Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pi-hole 5.0

pi-hole.net

Post reply on HN
Print view View original

231–240 of 254 posts

Re: Pi-hole 5.0

#231

Post by yjftsjthsd-h »

aembleton wrote: post #215
yjftsjthsd-h wrote: post #89

Earlier quoted context omitted.

The dream is to network boot the thing, so you literally plug a new pi in to network+power and it automatically boots and starts running stuff:) (Well, a Pi also needs a 1-time step to enable network boot, but still)

Can't you just move the microSD card over so all the configuration is in place and you just need to power it?

That should work as long as SD card is okay. Unfortunately, it's my understanding that SD cards remain the most likely thing to fail in the entire system, hence my interest in not using them.

Re: Pi-hole 5.0

#232

Post by agumonkey »

the_pwner224 wrote: post #118
agumonkey wrote: post #16

Earlier quoted context omitted.

it has frail feet but it does work more often than not

Interestingly it's been working perfectly for me with no issues for almost 1 year. A bit surprised to learn that it is not stable for a bunch of people.

Well I think it's just a matter of lag between bugfix and updates on my side. Which means from time to time I get a guru error. Other than that it's quite stable.

Re: Pi-hole 5.0

#233

Post by surround »

liotier wrote: post #230

Is there any value in Pi-hole for people already running Unbound with a bunch of adblock blacklists ? With OPNsense, it is a three-click setup. Found one feature: per-client blocking. Anything else ?

I run Unbound alongside Pi-Hole. I’m not familiar with all the features of OPNsense, but pi-hole is convenient because it

- automatically updates the block lists each week

- supports regex filters

- has a admin web interface which makes it easy to view statistics and filtering log, edit the whitelist/blacklist, etc.

Re: Pi-hole 5.0

#234

Post by surround »

Tepix wrote: post #187

Looks good! Is anyone else getting this during the update? [i] Target: https://hosts-file.net/ad_servers.txt [] Status: Connection Refused [] List download failed: no cached list available Looking at the query log, I see a fairly large amount of requests 24/7 by my Xiaomi robot vacuum and my Xiaomi desk LED Desk Lamp. I've blocked both of them. Is there any way of disabling the wifi on the desk light completely? Righ…

I’m not familiar with the desk lamp, but take a look at Valetudo for your vacuum.

https://github.com/Hypfer/Valetudo

Re: Pi-hole 5.0

#235

Post by liotier »

surround wrote: post #233
liotier wrote: post #230

Is there any value in Pi-hole for people already running Unbound with a bunch of adblock blacklists ? With OPNsense, it is a three-click setup. Found one feature: per-client blocking. Anything else ?

I run Unbound alongside Pi-Hole. I’m not familiar with all the features of OPNsense, but pi-hole is convenient because it - automatically updates the block lists each week - supports regex filters - has a admin web interface which makes it easy to view statistics and filtering log, edit the whitelist/blacklist, etc.

Integration of Unbound in OPNsense has the basics - the web interface lets one edit access lists, blacklists etc. but no statistics dashboard or sophisticated log processing. It supports lists with regex though.

Updating automatically requires a cron job, which has to be added by the administrator using the GUI - adding it automatically is a future feature.

Re: Pi-hole 5.0

#236

Post by formalsystem »

I had setup Pi-hole and it was blocking something like 66% of my internet traffic which amounted to ads and spyware.

A couple of days later, it just mysteriously stopped working and I couldn't for the life of me figure out why. My theory is that AT&T detected my blocking and blocked my internet as a result. Is that too much of a tin foil hat theory? How can I know for sure?

I don't know too much about computer networking, only the basics.

Re: Pi-hole 5.0

#237

Post by andrei_says_ »

theshrike79 wrote: post #159
andrei_says_ wrote: post #93

Earlier quoted context omitted.

Thank you, I’ve been needing to do this frequently.

What kind of sites, if you don't mind sharing? I've been using pi-hole for 4 years now and I can remember two situations when I had to disable it - and one of those was cloudflare's fault (PS4 cloud saves don't work with 1.1.1.1 DNS)

Working from home - running reports on google analytics and other marketing tools :)

Re: Pi-hole 5.0

#238

Post by mikeryan »

city41 wrote: post #88
Waterluvian wrote: post #87

Earlier quoted context omitted.

I set up a pihole and literally forgot about it. Like I was cleaning out a closet on moving day and found it plugged in. Took a moment to even realise what it was doing there.

I’m reminded almost every day that I have a pi-hole since it is not my dns provider when on my company’s vpn. It’s absolutely night and day on so much of the web. Some sites have so many ads now it’s just shocking to be frank.

Won't fix your issue but I run a Wireguard VPN on my PiHole that allows me to get onto my local network. The other upside is that once connected you get the PiHole blocking from anywhere....

Re: Pi-hole 5.0

#239

Post by theandrewbailey »

aetherspawn wrote: post #137

I just realised that if your router runs OpenWrt, you can install PiHole (an equivalent of, rather) directly onto your router by installing the following packages [1] dnsmasq adblock luci-app-adblock You may also need libustream-mbedtls Just tried it, works great. With a few small lists, the amount of blocked DNS requests is floating at around 30%. [1]: https://openwrt.org/docs/guide-user/services/ad-blocking

I remember seeing those packages, and wondered how effective they were.

Re: Pi-hole 5.0

#240

Post by patrickdavey »

diroussel wrote: post #214
patrickdavey wrote: post #201

Earlier quoted context omitted.

Honestly curious: how would you exploit it? If the pi isn't exposed to the www by your router, what can you do?

Typically a pi-hole is used as a DNS resolver. In order to work it must connect to the internet. Scenario for attack: Laptop looks up a website, DNS request is made to pi-hole, pi-hole sends request to internet. Response packet received back is actually from an attacker, that uses a known vulnerability in the handling of the packet to take over the machine. Attacker can now see what DNS requests are being made, and b…

That is definitely a bad situation. Thanks for the reply. Unnerving to think there'd be even a possibility of getting root just from processing a DNS response!
Post reply on HN