Earlier quoted context omitted.
Also maybe they use their phone and many combinations of PhoneType + BrowserType don't support the same quality of adblocking as PiHole.
NextDNS is pretty good especially on iOS where you can’t install adblockers (unlike on rooted android)
Pi-hole 5.0
161–170 of 254 posts
Re: Pi-hole 5.0
#162Earlier quoted context omitted.
FWIW, pihole is not tied to any particular hardware. For example: https://github.com/pi-hole/docker-pi-hole
Yeah that docker is great! Though it lags behind a bit, it's still on 4.2.2.
v5.0 image was released minutes after the main v5.0 release. I've personally not tried :latest, but I am told that works. I prefer to use named tags
Re: Pi-hole 5.0
#163Earlier quoted context omitted.
Thanks! I hadn't heard of this method. One question though: What will prevent the ad providers from asking their customers to add an A/AAAA record to one of their IPs? That'll be much harder to combat for an adblocker especially because those IPs will usually be shared with actual content services. Of course this'll add overhead to the visited website manager because the IPs will probably change regularly as they're…
I think it would be only marginally harder to combat, since now you just need a list of IPs to block. Someone would have to maintain the (likely ever changing) list of IPs used, but that's not so different from what's happening now.
> Someone would have to maintain the (likely ever changing) list of IPs used
What if the ad-network is domain-fronting via a CDN? Either ways, can't block IPs since http-domain IP isn't supposed to be a one-to-one mapping, each belong to different layers of the TCP/IP stak.
Re: Pi-hole 5.0
#164Earlier quoted context omitted.
It was really easy to set-up, but on first day it actually broke an Android TV-app on default settings (meaning it blocked some call that stopped the app from loading through). Ironically, after disabling it for a minute and then loading through the app, it didn't block the video ads (not rendered into the video). YMMV of course, but it wasn't usable for me since everyone in the household needs to understand/solve an…
Which to me is a good thing - smart TV's are garbage. Dumb TV + AppleTV will do just fine.
My TV is not on the internet. I have an Nvidia Shield, Android TV is the name of the OS.
Re: Pi-hole 5.0
#165PSA: A RPi running Pi-hole is not a fire-and-forget item. The networked software on it, including pi-hole, sometimes has security holes discovered and exploited, and has to be kept up to date. See eg https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi... & https://www.reddit.com/r/pihole/comments/73tvdq/cve201714491... & https://www.cvedetails.com/vulnerability-list.php?vendor_id=... (afaik Pi-hole is built…
Setting up automatic updates is probably a good idea.
Can you recommend a good way to make sure the Pi and Pi-hole are always up to date? I imagine a simple cron with pihole -up is not sufficient?
Re: Pi-hole 5.0
#166Is there a way to quickly disable/re-enable pihole for the network? With AdGuard DNS or uBlock Origin I still get into situations where occasionally they break a site completely and I have to temporarily disable the plugin (or switch to cell tower dns) to get the site working, so I’d want a quick way out of pi-holing traffic as well
> Is there a way to quickly disable/re-enable pihole for the network? Bookmark the following URL http://pi.hole/admin/api.php?disable=120&auth=PWHASH Replace PWHASH with the value of your WEBPASSWORD in setupVars.conf cat /etc/pihole/setupVars.conf | grep 'WEBPASSWORD=' | cut -c13- and '120' with the number of seconds you want to disable the Pi-hole filtering for.
Do you know if its possible to disable pihole only for the client requesting this, or a specific ip?
Re: Pi-hole 5.0
#167PSA: A RPi running Pi-hole is not a fire-and-forget item. The networked software on it, including pi-hole, sometimes has security holes discovered and exploited, and has to be kept up to date. See eg https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi... & https://www.reddit.com/r/pihole/comments/73tvdq/cve201714491... & https://www.cvedetails.com/vulnerability-list.php?vendor_id=... (afaik Pi-hole is built…
I don’t see the issue with this? Anyone who’s able to install Pihole in the first place will be more than capable of keeping the system up to date. I’d generally trust the underlying software and the maintainers to address security issues in a timely manner, security vulnerabilities on home routers on the other hand...
Re: Pi-hole 5.0
#168Cross-posting from my comment on Reddit's /r/Linux I'm a little disappointed that they seem to be very uninterested on how to get it working on "unsupported" configurations My x86 gateway currently runs on Gentoo (PFsense kept having random crashing issues) and it's something I'd love to add to it as far as I can tell all Pi-Hole needs is - Lighttpd + PHP (web management portal) - DNSMASq (DNS) - DHCPD (DHCP) - git (…
I've made this exact argument before, but it was unpopular. I maintain that if your software distrubution model is writing ISO files to SD cards, it's about as retarded as piping `curl` into `bash`.
I too run a Gentoo server at home (fist bump), and I'm running `dnsmasq` for filtering and caching, and `stubby` for DNS-over-TLS, and I run this beauty of a cron job every morning:
curl -s --compressed -o /var/lib/dnsmasq/hostnames.txt https://raw.githubusercontent.com/notracking/hosts-blocklists/master/{hostnames.txt,domains.txt} | sed -e '/::/d' -e 's/0.0.0.0//g' -e '/thepiratebay/d' > /var/lib/dnsmasq/domains.txt && rc-service dnsmasq restartRe: Pi-hole 5.0
#169Does anyone know if pi-hole lets you see per-client bandwidth usage?
It can't. There pihole only sees your DNS requests, not any other traffic, so it can't tell if you pulled 100 KB or 100 GB from that domain you just looked up.
It does show you DNS requests counts and such per device, but that's a poor proxy for bandwidth.
Re: Pi-hole 5.0
#170Earlier quoted context omitted.
Setting up automatic updates is probably a good idea.
Can you recommend a good way to make sure the Pi and Pi-hole are always up to date? I imagine a simple cron with pihole -up is not sufficient?
The default way would be to install the package unattendedupgrade which will install security updates on your system every day.
Depending on how pihole is installed, this may not upgrade it. I personally have it installed with docker and uses watchtower for updates, but the risk with this mechanism is that it can break things.