Live data from Hacker News

Pi-hole v6

pi-hole.net

101–110 of 316 posts

Re: Pi-hole v6

#101
I love PiHole.

I run my PiHole on a small cloud VM that I use for several projects, but put it behind a VPN that's configured to only forward DNS lookups, then VPN into it from my phone. So many advantages behind this setup.

- Since only DNS lookups are tunneled, I don't have to worry about tunneling ALL my traffic and paying egress fees

- Blocks ads in ALL apps, not just my browser

- If it's acting up, I can just disconnect from the VPN to disable PiHoling

- Don't have to expose my home IP address and open a port for the world to start banging on

Re: Pi-hole v6

#102

I love PiHole. I run my PiHole on a small cloud VM that I use for several projects, but put it behind a VPN that's configured to only forward DNS lookups, then VPN into it from my phone. So many advantages behind this setup. - Since only DNS lookups are tunneled, I don't have to worry about tunneling ALL my traffic and paying egress fees - Blocks ads in ALL apps, not just my browser - If it's acting up, I can just di…

> Don't have to expose my home IP address and open a port for the world to start banging on

Is that really an issue if all you're exposing is the VPN port? Wireguard for instance has industrial-grade encryption. Even open port 51820 should be fine

Re: Pi-hole v6

#103
post #95

Earlier quoted context omitted.

> It's also not possible (or not clear) how to have different behavior for different clients There's a menu item for that: Clients. You create a group, add a client to that group, and configure blocking for that group. To have what you want, you create a group that has just one client in it.

It's slightly more complicated. What you are suggesting works if (1) you are using Pi-hole as a DHCP server or (2) all your devices are individually configured to use the Pi-hole IP address for DNS resolution. What's more likely though is that you just point your router's DNS setting to Pi-hole, and in that case there is only one client on the Pi-hole dashboard - your router.

> What's more likely though is that you just point your router's DNS setting to Pi-hole, and in that case there is only one client on the Pi-hole dashboard - your router.

That depends entirely on what capabilities your router has.

Many routers have a setting for the DNS info they give to clients via DHCP, which would mean every client is indeed using PiHole directly for DNS resolution.

Other less capable routers, only have a setting for which upstream DNS server(s) the router should use, which of course isn't going to allow you to do anything with PiHole's group stuff.

But an easy solution is simply to disable the DHCP server on the router, and simply use what is built-in to PiHole. It uses dnsmasq behind the scenes, and as DHCP servers go, it's pretty capable and configurable. This is how I use PiHole on my own network, and have done for years now (with some customised dnsmasq config, because I have strong preferences about my network setup and services).

Most routers do nothing particularly special regarding DHCP anyhow, so no big deal to just turn it off, and use PiHole's stuff.

FWIW, and tangent to these specific points, my upgrade to the new PiHole 6 earlier today was pretty smooth — with the exception of it defaulting to having its dashboard on port 8080 instead of my previous 80. Plus I had to tweak a couple of settings to ensure it loads my custom dnsmasq config. But no deal breakers at all.

Re: Pi-hole v6

#104
The big feature miss for me in this announcement is baked in support for configuration sync between servers. Redundant DNS is common and it would be nice if pi-hole supported this oob. Making it even better would be an ability to see stats across all synced servers from one location.

Re: Pi-hole v6

#105

Earlier quoted context omitted.

> Is this criticism unfair? Only if you don't trust only Russians and no one else.

I don't trust Iran, North Korea, or China either. It's not hard, I'm an American and it's 2025. These are our adversaries (I didn't choose them) who currently commit cybercrimes against us. Hopefully in 2035 that won't be the case and we can all sing kumbaya.

But if the binary came from US even with some malicious code, it would be OK simply because the origin is different?

Re: Pi-hole v6

#106

Earlier quoted context omitted.

> Really weird, because there's less stuff in it. It's also not subsidized by selling your user data.

Is this really true? The margin must be huge. I've seen 4K smart tv's for half the price of 4k monitors.

Probably more to do with the economies of scale. More TVs are sold than PC monitors so therefore cheaper.

Re: Pi-hole v6

#107
post #37

Does anyone know if pihole is ever going to add DoH or similar support natively? I've had such troubles with cloudflared awhile back that I gave up on DoH, but would love to encrypt those queries.

I’m not sure why I’d ever want DoH, I block as much as I can at my firewall and have a canary domain. I want my devices to use my defined dns sever on my network, not some ad company (and all tech companies eventually become ad companies)

People use DoH/DoT so that their upstream DNS lookups are not transmitted in plaintext across the open internet. You can do this and still run your own DNS server on your network. The parent commenter is asking about Pihole with DoH, which is exactly this.

Re: Pi-hole v6

#108
post #33

Earlier quoted context omitted.

I think I'll never buy a smart TV what an ultimate ahole move to put ads in there. It's like the Kindles where you have to read these ads before you can open your book (of course you can pay a 1-time fee). Like buying a movie on YouTube and having to watch ads in it or can't see full res unless you're on an allowed device. If UBO actually stops working on Chrome I'll either leave or use pihole. My cheap android phone…

Most non-smart 4K screens are more expensive than 4k-smart tv screens though. Really weird, because there's less stuff in it. I just want a nice 50" 4k screen with hdmi and display ports. I don't use all the other junk anyway, since i watch tv via a computer and sounds goes to a surround set.

> Really weird

No, not weird. The extra stuff is there to show you ads and/or track your behavior, which generates a stream of revenue for the TV maker. W/o the extra stuff, the only revenue comes from the one-time purchase.

Re: Pi-hole v6

#109
post #95

Earlier quoted context omitted.

> It's also not possible (or not clear) how to have different behavior for different clients There's a menu item for that: Clients. You create a group, add a client to that group, and configure blocking for that group. To have what you want, you create a group that has just one client in it.

It's slightly more complicated. What you are suggesting works if (1) you are using Pi-hole as a DHCP server or (2) all your devices are individually configured to use the Pi-hole IP address for DNS resolution. What's more likely though is that you just point your router's DNS setting to Pi-hole, and in that case there is only one client on the Pi-hole dashboard - your router.

It works for me and I don't use Pi-Hole as a DHCP server or have any of my devices individually configured. I have my router acting as a DHCP server and have it tell clients to use my Pi-hole for DNS. Some routers' default firmwares don't let you do this, but most OpenWRT and Tomato and the like should.

Re: Pi-hole v6

#110

I've been using Technitium for a couple years and been pretty happy with it https://technitium.com/dns/

Technitium is great. Rock solid, plenty performant and it has more features than you'll ever need. Pretty wild when you consider it's being maintained by a single dev.
Post reply on HN