91–100 of 249 posts
Our phones and smart devices all use either DoH or hardcode a specific DNS resolver. I haven't spent the time going all the way down to re-routing all port 53 traffic, but I doubt it'll do much.
To me the future of the home network is largely dead as long as I can't reasonably manage the software on these devices.
I keep seeing posts about Pi Holes and it looks good, but I have previously dealt with ads by appending their delivering sites to my /etc/hosts, i.e. 0.0.0.0 trashsite1.com 0.0.0.0 trashsite2.com The only downside I see is that my approach is not network-wide. Any other reasons I should reconsider?
Earlier quoted context omitted.
This is already happening. The likes of Google Home et al already hardcode their own servers. I noticed that no DNS requests were being made through my Pi Hole, so when I looked, it turned out their DNS servers were hardcoded. However, I'm more worried about when they start hardcoding DoH servers.
Same on DoH. I can’t filter it or redirect it like I can with plain old DNS.
Earlier quoted context omitted.
There should be no cost. Which game will constantly use DNS to resolve addresses after being launched?
I caught a bug related to this in Project Zomboid in an early multiplayer version. Often when someone joined a server there would be a tiny bit of lag for all of the users. I figured out the server was using a java method that indirectly was doing a blocking DNS lookup. I think it was reverse DNS but I forget which method it actually was, and if it was blocking the main thread or just the networking thread. (PiHole s…
Earlier quoted context omitted.
I run two piholes, rackmounted and battery backed (just plugged into a ups). DNS performance is very fast, better than ISP dns usually. General web usage is much, much more pleasant. No issues with gaming.
Any recommendation on hardware piholes? I have a UDM Pro but honestly i don't know how much i trust modifying it at all - i've found Ubiquiti software to be iffy... so i'm a bit hesitant to modify anything.
Earlier quoted context omitted.
i am considering pfsense for my homelab setup - can you easily troubleshoot issues and whitelist addresses if you need to?
I recommend opnsense [0] over pfsense. I ran pfsense for 5 years and it is great, but there was some bad blood [1] between the two projects and the community. [0] https://opnsense.org/ [1] https://teklager.se/en/pfsense-vs-opnsense/
also have you done migration between the two? if so, how hard was it?
Earlier quoted context omitted.
I run two piholes, rackmounted and battery backed (just plugged into a ups). DNS performance is very fast, better than ISP dns usually. General web usage is much, much more pleasant. No issues with gaming.
there will be issues if you play halo. it depends on some telemetry stuff in windows that is typically blocked by this sort of thing.
If you add a bunch of extra-aggressive blocklists maybe you'll have issues but if you stick with the recommended OOTB lists, you'll be fine.
Earlier quoted context omitted.
i am considering pfsense for my homelab setup - can you easily troubleshoot issues and whitelist addresses if you need to?
I recommend opnsense [0] over pfsense. I ran pfsense for 5 years and it is great, but there was some bad blood [1] between the two projects and the community. [0] https://opnsense.org/ [1] https://teklager.se/en/pfsense-vs-opnsense/