Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AdGuard Home: Network-wide ad- and tracker-blocking DNS server

github.com

Post reply on HN
Print view View original

51–60 of 258 posts

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#51

Post by jraph »

breckenedge wrote: post #16
winstonprivacy wrote: post #12

Sadly for the AdGuard team, there isn't much of an audience for this. It's one of those things everyone says they want but few people will actually install one, much less maintain one over time. Add to that the wife-forced uninstalls and the total long-term audience for this is (no kidding) in the thousands.

My spouse’s device is on a pihole exclusion list. Can you not do this with AdGuard?

What is the reason for someone in the network to not want the filtering? Does this break some websites?

My own devices are covered, I definitely want full filtering even when not at home and my devices are completely hackable, but I'm wondering if such a tool would be a convenience for other people using the network in particular with less hackable devices, and people likely to use my network are likely totally uninterested in ads, but I don't want this to be a pain.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#52

Post by lawn »

Naac wrote: post #19

Anyone know of an Adguard home or pihole equivalent service I can run as part of OPNSense? I currently have a different machine dedicated to pihole, but it would be intriguing to have something built in. I would imagine split DNS and firewall rules would be simpler this way.

I run Adguard Home on my router with OPNSense. I don't remember how I set it up, but it wasn't that difficult.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#53

Post by breckenedge »

jraph wrote: post #51
breckenedge wrote: post #16

Earlier quoted context omitted.

My spouse’s device is on a pihole exclusion list. Can you not do this with AdGuard?

What is the reason for someone in the network to not want the filtering? Does this break some websites? My own devices are covered, I definitely want full filtering even when not at home and my devices are completely hackable, but I'm wondering if such a tool would be a convenience for other people using the network in particular with less hackable devices, and people likely to use my network are likely totally unint…

Yes, it breaks some websites and apps that they use for work. My pihole also only runs on my “private” network, the “guest” network is not filtered.

Apple’s Private Relay also does not work behind a pihole.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#55

Post by drewg123 »

hipsterstal1n wrote: post #24
maronato wrote: post #15

Earlier quoted context omitted.

I’ve been using NextDNS for a little while and don’t remember having issues with captive portals on my iPhone. Maybe something changed?

Most likely it's due to the different lists you can add or use on NextDNS. I also have issues with captive portals (I run a number of lists on NextDNS) and I just flip it off and on when I need to.

I just checked, and I don't use any lists, except for an allow list I just started with captive portal domains. Eg .aainflight.com, .captive.apple.com, etc

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#56

Post by dsheets »

I contributed improved ipset support to this project. As far as I know, it’s one of the few off-the-shelf DNS servers that can insert result records into Linux ipsets to enable domain-based firewall policy. I run it on OpenWRT and use the ipset support to open the default drop firewall from my “smart” projector on my IoT subnet to NetFlix and YouTube. It sets the ipset entry expiry to the DNS TTL. Now, the only way for the machine to connect to the internet is to resolve a whitelisted domain and it can only access while the record is fresh. I haven’t encountered any issues so far. I take it that some Chinese users use this same functionality to selectively VPN domains to evade GFW.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#57

Post by az09mugen »

ittan wrote: post #34

Unsure if anyone here uses Technitium DNS(Opensource and free). It works on minimal hardware. I am running it on an Orange Pi 3 LTS. https://technitium.com/dns/

Yup, running it on a pi 4. Simple to set up and use, happy with it. I didn't know about Adguard but I don't want to try it even if it seems good.

Re: AdGuard Home: Network-wide ad- and tracker-blocking DNS server

#59

Post by dizhn »

nickthegreek wrote: post #44
dizhn wrote: post #20

Earlier quoted context omitted.

I don't get this comment. It is basically the same kind of tool as the Pihole only much easier to install and maintain. (It's a single go binary) Isn't this a popular class of software?

It is not a popular class of software to the masses, it is a popular class of software to a niche audience. I don't share as pessimistic attitude as OP though. I'm pretty sure the audience is in the tens of thousands!

They have that many stars on GitHub. They actually also have thousands of forks each. The api probably still has a way to count downloads but I didn't bother. I wasn't claiming users in the millions anyway. :)
Post reply on HN