Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Blocky – a DNS proxy and ad-blocker for the local network

0xerr0r.github.io

Post reply on HN
Print view View original

91–100 of 110 posts

Re: Blocky – a DNS proxy and ad-blocker for the local network

#91

Post by aesh2Xa1 »

ignoramous wrote: post #27
cj wrote: post #4

> Uses random upstream resolvers from the configuration - increases your privacy through the distribution of your DNS traffic over multiple provider The whole project is really interesting but this line caught my eye. For spreading DNS providers, would randomly routing to different ones be more or less private than rotating providers every X minutes? It feels like so many sites request so many different resources tha…

rethinkdns dev here > For spreading DNS providers, would randomly routing to different ones be more or less private than rotating providers every X minutes. Less private for the simple fact that now you'd have to rely on multiple upstream resolvers to respect your privacy. Stick to one; ideally the one with better privacy guarantees like the Mozilla endpoints to Cloudflare DNS. Or, use anonymizing protocols like Obli…

> the Mozilla endpoints to Cloudflare DNS

Oh, I did not know that Mozilla had an endpoint on Cloudflare's 1.1.1.1 service, but there it is!

https://github.com/mozilla/gecko-dev/blob/c09764753ea40725eb...

https://mozilla.cloudflare-dns.com/dns-query

Does Mozilla publish their terms somewhere? I'm curious how their endpoint is any different.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#92

Post by girishso »

userbinator wrote: post #88
girishso wrote: post #30

Can't block Youtube shorts with these DNS adblockers, I know I can use browser extensions on a computer (and I do), but I really want to block shorts on iOS/Android apps. Tried the squid https proxy rabbit hole, but could not get it to work with mobile devices. Any hints?

Tried the squid https proxy rabbit hole, but could not get it to work with mobile devices. You'll need to generate your own CA and root certs to install if you're setting up a MITM proxy.

I did create a self signed root cert, it works as expected when accessing net from my Mac. But mobile devices refuse to work, zero network requests succeed. I did trust the root cert on both mac and mobile. ¯\_(ツ)_/¯

Re: Blocky – a DNS proxy and ad-blocker for the local network

#93

Post by kornhole »

efitz wrote: post #68

Why would I use Blocky vs. Pi-Hole? It seems like a nice project but pi-hole is really mature; I'd love to see a feature comparison or a brag sheet showing what it's better at.

If you have a PFSense or OPNSense firewall/router, PFblockerNG also does a great job https://docs.netgate.com/pfsense/en/latest/packages/pfblocke.... PFSense comes with a DNS Resolver with option to forward to these other resolvers. It has also too many other features to list especially useful to a homelab.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#94

Post by leipert »

efitz wrote: post #68

Why would I use Blocky vs. Pi-Hole? It seems like a nice project but pi-hole is really mature; I'd love to see a feature comparison or a brag sheet showing what it's better at.

For me single binary and single config file is a big one. Much easier to deploy and share configs for example. I have a PiHole running but I kind of dread setting up a second one for redundancy.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#95

Post by madspindel »

nobody9999 wrote: post #82
dngray wrote: post #37

Earlier quoted context omitted.

100% agree. Not sure why you'd randomly play round robin with a bunch of DNS servers. What purpose is this feature even for? If privacy is what you're intending however, DNS is only one part of that and there are other ways in which things can leak https://www.privacyguides.org/en/advanced/dns-overview/ Generally I just recommend to people to use their internal VPN provider's DNS servers and call it a day, or of cour…

I use (and recommend) local recursive resolvers.

It's unencrypted and exposing your IP. From a privacy perspective it's better to use something like Mullvad DNS over DoT or DoH.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#96

Post by animuchan »

that_guy_iain wrote: post #31
girishso wrote: post #30

Can't block Youtube shorts with these DNS adblockers, I know I can use browser extensions on a computer (and I do), but I really want to block shorts on iOS/Android apps. Tried the squid https proxy rabbit hole, but could not get it to work with mobile devices. Any hints?

Just don't go to the shorts section? Or are you talking about the ads in the shorts section?

Shorts plague the search. Short clips are always completely irrelevant to anything I can possibly be looking for, while not entirely insane, anyway.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#97

Post by vwkd »

girishso wrote: post #30

Can't block Youtube shorts with these DNS adblockers, I know I can use browser extensions on a computer (and I do), but I really want to block shorts on iOS/Android apps. Tried the squid https proxy rabbit hole, but could not get it to work with mobile devices. Any hints?

Sideload a tweaked YouTube IPA, like YTLitePlus.

Re: Blocky – a DNS proxy and ad-blocker for the local network

#98

Post by reeeeaway »

girishso wrote: post #92
userbinator wrote: post #88

Earlier quoted context omitted.

Tried the squid https proxy rabbit hole, but could not get it to work with mobile devices. You'll need to generate your own CA and root certs to install if you're setting up a MITM proxy.

I did create a self signed root cert, it works as expected when accessing net from my Mac. But mobile devices refuse to work, zero network requests succeed. I did trust the root cert on both mac and mobile. ¯\_(ツ)_/¯

Certificate pinning perhaps?

Re: Blocky – a DNS proxy and ad-blocker for the local network

#99

Post by ranger_danger »

AwaAwa wrote: post #74
ranger_danger wrote: post #60

Earlier quoted context omitted.

How are you using a different proxy per container tab? I've tried FoxyProxy but it leaked DNS requests through the local network resolver even with SOCKS5 proxies.

Go into the main extension settings of 'Firefox Multi-Account Containers' that lists your containers and click on 'Manage containers'. Select any container and the last option on the new page is 'Advanced Proxy Settings'. This setting is per container.

ah, that would be way too much work for a one-off proxy switch for one site

Re: Blocky – a DNS proxy and ad-blocker for the local network

#100

Post by fossdd »

efitz wrote: post #68

Why would I use Blocky vs. Pi-Hole? It seems like a nice project but pi-hole is really mature; I'd love to see a feature comparison or a brag sheet showing what it's better at.

I had used Pi-hole and blocky. Pi-hole is nice for the non-expert who just wants to block ads, with a neat web interface. But with blocky, instead of a web interface you can fully configure blocky in a single nice-documented extensive YAML file. Metrics are retrieved per Prometheus and can be visually shown in something like Gragfana. It has A LOT of features and is faster. :)
Post reply on HN