Earlier quoted context omitted.
I created a bit.ly link that points to http://yourpiholehost/admin/api.php?disable=300&auth=api_key Bookmark it for myself and other people in the house and then turn it off for five mins whenever there is an issue.
Would be fun to hook this up to one of those IoT Amazon buttons.
Blocky – a DNS proxy and ad-blocker for the local network
101–110 of 110 posts
Re: Blocky – a DNS proxy and ad-blocker for the local network
#102My problem with network-level adblockers, also PiHole is that they break a lot of services (yeah it's mostly sloppy or malicious intent from service provider but still). On a browser you can quickly disable uBlock for that site, it is much more tedious for these services - also because it's not even clear that the filtering is causing the problem, also because it maybe someone else on the network experiencing the pro…
PiHole has an API that can be used to enable and disable the ad blocker. I have a bunch of home automation set up, and through the use of HomeBridge and a plug-in I have a button in my Apple Home app on my iPhone to enable or disable the ad blocker. Since it's exposed as a smart home thing, you could hook it up to a voice assistant like Siri or Alexa. I built an integration once for an Elgato StreamDeck. You can also…
Re: Blocky – a DNS proxy and ad-blocker for the local network
#103Why would I use Blocky vs. Pi-Hole? It seems like a nice project but pi-hole is really mature; I'd love to see a feature comparison or a brag sheet showing what it's better at.
I had used Pi-hole and blocky. Pi-hole is nice for the non-expert who just wants to block ads, with a neat web interface. But with blocky, instead of a web interface you can fully configure blocky in a single nice-documented extensive YAML file. Metrics are retrieved per Prometheus and can be visually shown in something like Gragfana. It has A LOT of features and is faster. :)
Re: Blocky – a DNS proxy and ad-blocker for the local network
#104> Uses random upstream resolvers from the configuration - increases your privacy through the distribution of your DNS traffic over multiple provider The whole project is really interesting but this line caught my eye. For spreading DNS providers, would randomly routing to different ones be more or less private than rotating providers every X minutes? It feels like so many sites request so many different resources tha…
More info on why Tor chooses just a few entry nodes here: https://support.torproject.org/about/entry-guards/
Re: Blocky – a DNS proxy and ad-blocker for the local network
#105Earlier quoted context omitted.
I use (and recommend) local recursive resolvers.
It's unencrypted and exposing your IP. From a privacy perspective it's better to use something like Mullvad DNS over DoT or DoH.
My ISP can already see where I go and what I do anyway.
But you do you, friend.
Re: Blocky – a DNS proxy and ad-blocker for the local network
#106It's a DNS proxy, like pi-hole, but it seems a lot more powerful than Pi-hole that is basically just a configured dnsmasq server to be user-friendly. https://docs.pi-hole.net/
Re: Blocky – a DNS proxy and ad-blocker for the local network
#107Earlier quoted context omitted.
I did create a self signed root cert, it works as expected when accessing net from my Mac. But mobile devices refuse to work, zero network requests succeed. I did trust the root cert on both mac and mobile. ¯\_(ツ)_/¯
Certificate pinning perhaps?
Re: Blocky – a DNS proxy and ad-blocker for the local network
#108Why would I use Blocky vs. Pi-Hole? It seems like a nice project but pi-hole is really mature; I'd love to see a feature comparison or a brag sheet showing what it's better at.
Blocky is better because it uses less resources ,only a single yml onfig file and dns queries are faster as it's stateless
Re: Blocky – a DNS proxy and ad-blocker for the local network
#109why would I use this over something like Adguard Home?
Re: Blocky – a DNS proxy and ad-blocker for the local network
#110Earlier quoted context omitted.
Certificate pinning perhaps?
Righto, looks like impossible to fix then.
Depending on how much time you are willing to put in you could create a list of apps that dont PIN and selectively MiTM apps that dont