Live data from Hacker News

Blocky – a DNS proxy and ad-blocker for the local network

0xerr0r.github.io

81–90 of 110 posts

Re: Blocky – a DNS proxy and ad-blocker for the local network

#81

My problem with network-level adblockers, also PiHole is that they break a lot of services (yeah it's mostly sloppy or malicious intent from service provider but still). On a browser you can quickly disable uBlock for that site, it is much more tedious for these services - also because it's not even clear that the filtering is causing the problem, also because it maybe someone else on the network experiencing the pro…

I’ve been using https://oisd.nl/ on my network for some time (just cronned into an unbound config file) and nothing breaks. If you report a website breaking to the maintainer, he removes the offending block. Works well, I can recommend it. And it reminds my to send them a little money in thanks.

This looks really good. Thanks for suggesting it.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#82
post #37

Earlier quoted context omitted.

rethinkdns dev here > For spreading DNS providers, would randomly routing to different ones be more or less private than rotating providers every X minutes. Less private for the simple fact that now you'd have to rely on multiple upstream resolvers to respect your privacy. Stick to one; ideally the one with better privacy guarantees like the Mozilla endpoints to Cloudflare DNS. Or, use anonymizing protocols like Obli…

100% agree. Not sure why you'd randomly play round robin with a bunch of DNS servers. What purpose is this feature even for? If privacy is what you're intending however, DNS is only one part of that and there are other ways in which things can leak https://www.privacyguides.org/en/advanced/dns-overview/ Generally I just recommend to people to use their internal VPN provider's DNS servers and call it a day, or of cour…

I use (and recommend) local recursive resolvers.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#83
post #4

> Uses random upstream resolvers from the configuration - increases your privacy through the distribution of your DNS traffic over multiple provider The whole project is really interesting but this line caught my eye. For spreading DNS providers, would randomly routing to different ones be more or less private than rotating providers every X minutes? It feels like so many sites request so many different resources tha…

not novel but a standard feature in dnscrypt-proxy

Re: Blocky – a DNS proxy and ad-blocker for the local network

#84

Earlier quoted context omitted.

I have a handful of different wifi SSIDs set up on my network at home to help with this, some route their DNS queries through a pihole instance and others (say, without the “AB” for ‘adblock’ suffix on their ssid names), don’t. Each ssid is their own vlan and each has their own dhcp listening that doles out the pihole instance address on the Adblock-enabled nets. It’s easy enough to just connect to a different ssid i…

That is a great idea. What do you use to run multiple wifis with separate vlan?

An AP or wlan router that supports vlan to ssid mapping.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#85

Earlier quoted context omitted.

I have a handful of different wifi SSIDs set up on my network at home to help with this, some route their DNS queries through a pihole instance and others (say, without the “AB” for ‘adblock’ suffix on their ssid names), don’t. Each ssid is their own vlan and each has their own dhcp listening that doles out the pihole instance address on the Adblock-enabled nets. It’s easy enough to just connect to a different ssid i…

That is a great idea. What do you use to run multiple wifis with separate vlan?

I use some of the lower-end wifi 6 APs, coupled with an AC (controller), from fs.com, they work solidly, and with seamless roaming around the house, after figuring out some of the rather odd translation in the AC web interface. After some annoying small steps, the ssh consoles on both the AC and the APs are all that I use.

They’re mated to a Juniper EX switch running stock JunOS over PoE, primarily one AP for each floor and another one or two to fill in dead spots. I haven’t had to touch it since I’ve set it up, just keeps chugging along.

Slight over-kill for the environment, but I’m so damn tired of using bad wifi I just wanted to do it right!

Re: Blocky – a DNS proxy and ad-blocker for the local network

#86

Earlier quoted context omitted.

There are YouTube clones for iOS & Android that have Adblock, Shorts Block & Sponsor Blocks

Which ones for iOS?

Yattee

https://github.com/yattee/yattee

it requires either public or private Piped or Invidious instaces [1][2].

1. https://github.com/TeamPiped/Piped/wiki/Instances

2. https://docs.invidious.io/instances/

Re: Blocky – a DNS proxy and ad-blocker for the local network

#87

super useful for being able to use cloudflare dns but still resolve the archive.* domains using a different resolver (because archive.* blocks cloudflare for ideological reasons): conditional: mapping: archive.is: 8.8.8.8 archive.today: 8.8.8.8 archive.md: 8.8.8.8 archive.ph: 8.8.8.8

here's the same in dnsmasq: server=/archive.today/8.8.8.8 server=/archive.ph/8.8.8.8 server=/archive.is/8.8.8.8 server=/archive.li/8.8.8.8 server=/archive.vn/8.8.8.8 server=/archive.fo/8.8.8.8 server=/archive.md/8.8.8.8 server=/archive.to/8.8.8.8

Which is what pi-hole uses if anyone is curious.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#88

Can't block Youtube shorts with these DNS adblockers, I know I can use browser extensions on a computer (and I do), but I really want to block shorts on iOS/Android apps. Tried the squid https proxy rabbit hole, but could not get it to work with mobile devices. Any hints?

Tried the squid https proxy rabbit hole, but could not get it to work with mobile devices.

You'll need to generate your own CA and root certs to install if you're setting up a MITM proxy.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#89

Earlier quoted context omitted.

Home Depot is the most fragile website I'm forced to deal with. It regularly breaks in novel ways for me when it can't load some random dependency that it doesn't actually need the functionality from.

And it doesn’t load at all from outside the US! I once wanted to purchase before coming back, to learn I need to vpn back in to the US to order something. Crazy.

Thank the GDPR for that, probably.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#90
post #68

Why would I use Blocky vs. Pi-Hole? It seems like a nice project but pi-hole is really mature; I'd love to see a feature comparison or a brag sheet showing what it's better at.

Or AdGuard Home https://news.ycombinator.com/item?id=39276687

Or NextDNS to let someone else handle it.

Post reply on HN