Live data from Hacker News

Pi-hole 5.0

pi-hole.net

241–250 of 254 posts

Re: Pi-hole 5.0

#241
post #158

Earlier quoted context omitted.

Which to me is a good thing - smart TV's are garbage. Dumb TV + AppleTV will do just fine.

I guess, but Dumb TV + Roku can be quite terrible from a privacy perspective.

Logging messages sent by Roku comprise the 2nd largest blocked domain on my pihole. But - they are blocked.

In any case, I don't see that a smart TV is going to be any better in this respect.

Re: Pi-hole 5.0

#242

Earlier quoted context omitted.

Just like you could register your own domain and return the record of a blacklisted website?

Of course, but presumably the censoring dns server would never return a censored ip, regardless of domain. Whereas if you were to passthrough all non-blacklisted queries you wouldn't be able to block that, which is why no censor would ever implement it that way.

Which is why you'd end up implementing tunneling for your DNS requests like cloudflared provides.

Re: Pi-hole 5.0

#243

Earlier quoted context omitted.

> Is there a way to quickly disable/re-enable pihole for the network? Bookmark the following URL http://pi.hole/admin/api.php?disable=120&auth=PWHASH Replace PWHASH with the value of your WEBPASSWORD in setupVars.conf cat /etc/pihole/setupVars.conf | grep 'WEBPASSWORD=' | cut -c13- and '120' with the number of seconds you want to disable the Pi-hole filtering for.

Do you know if its possible to disable pihole only for the client requesting this, or a specific ip?

Not sure. Sorry.

Re: Pi-hole 5.0

#244
post #168

Cross-posting from my comment on Reddit's /r/Linux I'm a little disappointed that they seem to be very uninterested on how to get it working on "unsupported" configurations My x86 gateway currently runs on Gentoo (PFsense kept having random crashing issues) and it's something I'd love to add to it as far as I can tell all Pi-Hole needs is - Lighttpd + PHP (web management portal) - DNSMASq (DNS) - DHCPD (DHCP) - git (…

I've made this exact argument before, but it was unpopular. I maintain that if your software distrubution model is writing ISO files to SD cards, it's about as retarded as piping `curl` into `bash`. I too run a Gentoo server at home (fist bump), and I'm running `dnsmasq` for filtering and caching, and `stubby` for DNS-over-TLS, and I run this beauty of a cron job every morning: curl -s --compressed -o /var/lib/dnsmas…

That's a pretty entitled attitude to have toward people who are writing software in their own time and giving it to you for free to use.

Re: Pi-hole 5.0

#245

Cross-posting from my comment on Reddit's /r/Linux I'm a little disappointed that they seem to be very uninterested on how to get it working on "unsupported" configurations My x86 gateway currently runs on Gentoo (PFsense kept having random crashing issues) and it's something I'd love to add to it as far as I can tell all Pi-Hole needs is - Lighttpd + PHP (web management portal) - DNSMASq (DNS) - DHCPD (DHCP) - git (…

> I'm a little disappointed that they seem to be very uninterested on how to get it working on "unsupported" configurations

I think that's entirely reasonable. Unsupported configurations are "unsupported" for a reason: because open source developers have a limited amount of their unpaid free time to devote to their project, a project you get to use for free.

> ... was closed by the developer as "only two people have asked about Gentoo"

Again, entirely reasonable. Maintaining installation scripts for your project for every OS under the sun is a large burden, especially for OSes that the developers don't personally run themselves.

Since Linux distros are basically the poster-child of fragmentation, the usual way to get a piece of software supported on your distro is to have a distro package (for Gentoo I guess that'd be an ebuild) that does any distro-specific patching. Stuff that's generic enough can be upstreamed. Stuff that is distro-specific often has to stay in the distro patches unless someone is willing to step forward and be trusted to actively maintain it upstream in the long term. As an open source project maintainer, I definitely would not want distro-specific code in my build if there's no one with the inclination or expertise to maintain it.

> essentially saying "please install package X/Y/Z" during setup

... and this is exactly something that goes in your Gentoo ebuild, not in PiHole's generic install.

> I know Gentoo is fairly niche as far as distributions go, but seeing popular software moving away from "here's how to compile/install it" to "here's a docker container/here's what "we" support" is very disheartening

I'm a little puzzled by this remark, since that's how it's always been with open source that's intended to run on Linux. I go back and forth on what I think about Docker, but before we had that, you basically got a tarball with a configure script, and had to figure out on your own what dependencies to install on your distro to get it to build properly. Some projects with more bandwidth would include an RPM Or DEB package, but oftentimes those would only run on a few specific versions of RedHat/Fedora or Debian/Ubuntu, and you'd still have to install the dependencies yourself. At least with Docker it's sorta a "build once, run anywhere" type thing.

The thing I don't think you're getting is that you are not entitled to these people's time or resources. They're putting out a project in the hopes that people will find it useful. It is not reasonable to expect them to cater to every whim of every potential user's personal setup.

I'm sorry for the long-winded reply here, but it really bothers me when people expect open source developers to have their free time directed by non-contributors.

Re: Pi-hole 5.0

#246
post #107

"Javascript is required. Please enable javascript before you are allowed to see this page." Required to read the text of the announcement. No. Required to make donations via Stripe. Yes. RSS does not require Javascript. Looks like the full text announcement. https://pi-hole.net/feed/ Alternatively: echo 159.203.180.3 pi-hole.net >> /etc/hosts

Looks like they fixed the issue.

The above is no longer needed to avoid the Sucuri interstitial page.

Re: Pi-hole 5.0

#247

I just realised that if your router runs OpenWrt, you can install PiHole (an equivalent of, rather) directly onto your router by installing the following packages [1] dnsmasq adblock luci-app-adblock You may also need libustream-mbedtls Just tried it, works great. With a few small lists, the amount of blocked DNS requests is floating at around 30%. [1]: https://openwrt.org/docs/guide-user/services/ad-blocking

[deleted]

Re: Pi-hole 5.0

#248

I just realised that if your router runs OpenWrt, you can install PiHole (an equivalent of, rather) directly onto your router by installing the following packages [1] dnsmasq adblock luci-app-adblock You may also need libustream-mbedtls Just tried it, works great. With a few small lists, the amount of blocked DNS requests is floating at around 30%. [1]: https://openwrt.org/docs/guide-user/services/ad-blocking

https://command.honestsec.com sounds promising... looks like the system includes a secure router with secured double layer dns filtering (local at source and upstream resolver).

Re: Pi-hole 5.0

#250

I like Pi-hole, but pi@pihole:~ $ pihole -up [i] Checking for updates... [i] Pi-hole Core: up to date [i] Web Interface: up to date [i] FTL: up to date [] Everything is up to date! pi@pihole:~ $ pihole -v Pi-hole version is v4.4 (Latest: v5.0) AdminLTE version is v4.3.3 (Latest: v5.0) FTL version is v5.0 (Latest: v5.0)

Were you on the beta? Try this pihole checkout master

Thanks for the suggestion, it's neat that pihole maintains a git repo like this. I didn't get a chance to try it out though, I just installed from scratch.
Post reply on HN