121–130 of 258 posts
Earlier quoted context omitted.
A general trick for bringing up the captive portal manually is to browse to a non ssl url such as http://example.com The portal would unapologeticly mitm the server response with a redirect to the portal login page. The domain needs to exist (to pass DNS) and not have HSTS, but otherwise any address will do.
http://neverssl.com/ is my go-to for this.
With a self-hosted DNS internally, how do you handle fallback? For example if the box with Adguard Home or pihole crashes, can you configure your router or your devices in a way that would instead go to say cloudflare or google DNS?
Earlier quoted context omitted.
I'm curious what issues you ran into with Pi-hole? I was running my instance for years without a single hiccup. I ended up moving to AdGuard Home about a year ago though because I wanted to run it on my OPNSense box. I have an automatic WireGuard VPN set up on my devices to VPN into my home network when I'm not connected to my SSID, so my local DNS still works remotely.
Too many false positives with Pi-Hole. I never felt comfortable putting my partner on the same vlan that it was serving DNS requests for fear that something would break for them when I was out of town, unable to get into the pi-hole and sort out the issue. I also had my banking app stop working one day. Never could get it working. Eventually I just got fed up with having to switch vlans or to mobile data to check my…
I generally will go in and whitelist things if a site breaks due to a DNS block, but of course putting your partner on the same VLAN can be problematic. I "got around" that by having a button in Home Assistant that will completely turn off Pi-hole (and now AdGuard). So my partner will go in and toggle that if there's a problem.
AdGuard Home does also have the ability to completely disable blocking for specific clients.
I do adblocking with a browser extension. The adblocking has more context, can modify the page, and has easy UI integration for debugging and turning it off.
What else are DNS blocklists for? Clients except browsers?
For the record, on my desktop I use systemd-resolved (for DNSSEC) and dnscrypt-proxy2 (for encryption). On my router I run unbound as recursive resolver for other devices.
On my phone I use quad9, and adblocking via Firefox.
Earlier quoted context omitted.
It looks like cost is not comparable. ControlD pricing is per user and a router costs $5/month, but NextDNS is a flat $20/year. So ControlD would be significantly more than NextDNS for me personally.
It's very much comparable...for personal use: https://controld.com/plans?step=plans
Maybe I'll give it a try sometime.
I ran a competing project[0] on my home network for a few years before I discovered NextDNS[1]. What I lost in performance (requests don't leave my house) I gained in portability: ALL my devices can take advantage – at home and away – and time-saved. PiHole works 90% of the time, but when it did stop working, I'd have to spend a bit of time fixing it. At $20/year, I simply couldn't compete with NextDNS. Note: This is…
I ran Pi-hole along with my OpenBSD router running unbound for some period. Then I realized I can download the same entries used for Pi-hole, AdGuard, uBlock, etc. I created a simple script that generates an unbound configuration that I can include in my unbound.conf file. One advantage over Pi-hole I noticed is I can return NXDOMAIN which makes more sense to me. I didn't see how I had that option with Pi-hole. I jus…
Those who are using DNS level ad blocking: how much do sites break? And how easy is it to unblock them? I currently use browser based blocking and find a lot of sites don’t work at all. Typically SPAs. But if I have to use them, I can disable the adblocker in two clicks. How does that compare?
Those who are using DNS level ad blocking: how much do sites break? And how easy is it to unblock them? I currently use browser based blocking and find a lot of sites don’t work at all. Typically SPAs. But if I have to use them, I can disable the adblocker in two clicks. How does that compare?
I'm experienced in DNS but have never seen the point in DNS blocklists. It feels like the wrong layer. I do adblocking with a browser extension. The adblocking has more context, can modify the page, and has easy UI integration for debugging and turning it off. What else are DNS blocklists for? Clients except browsers? For the record, on my desktop I use systemd-resolved (for DNSSEC) and dnscrypt-proxy2 (for encryptio…
If you look at the logs from your media box, (whether that is your TV, Roku, or whatever) there's a massive amount of tracking that gets sent up.
Combined with Tail scale I can even block ads and tracking on my devices when I'm not home.
Earlier quoted context omitted.
I ran Pi-hole along with my OpenBSD router running unbound for some period. Then I realized I can download the same entries used for Pi-hole, AdGuard, uBlock, etc. I created a simple script that generates an unbound configuration that I can include in my unbound.conf file. One advantage over Pi-hole I noticed is I can return NXDOMAIN which makes more sense to me. I didn't see how I had that option with Pi-hole. I jus…
Care to share your script?
https://www.tumfatig.net/2022/ads-blocking-with-openbsd-unbo...