Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pi-Hole 4.3.2

pi-hole.net

Post reply on HN
Print view View original

111–120 of 224 posts

Re: Pi-Hole 4.3.2

#111

Post by dastx »

Mister_Snuggles wrote: post #35

The one thing that's holding me back on actually using Pi-Hole is the lack of flexibility. What I'd really like to see is the ability to do various things on a per-client basis. For example, one commenter wanted a simple "reload without blocking" functionality and the response was to use a bookmarklet plus the Pi-Hole API to disable it temporarily. This works, but the problem is that it disables it temporarily for ev…

I think AdGuard's AdGuard Home, Pi-Hole competitor, does this. I've been following it for a while but haven't had the chance to replace my Pi-Hole installation yet.

Re: Pi-Hole 4.3.2

#112

Post by TheChaplain »

bloopernova wrote: post #92
yumraj wrote: post #91

One unadvertised advantage of pihole is monitoring and blocking sites that you don't want kids to use, such as the thousands of io-games and what not.

We use it to block phone-home sites that devices like "smart" TVs use to send data back for the manufacturer to profit off.

There was a thread a month ago here (or on Reddit perhaps) about SmartTV's scanning/connecting to open hotspots if they can't phone home from their wlan.

Someone also claimed TV's from the same manufacturer connects to eachother in a mesh to find a way to phone home but that sounds a little too spectacular...

Re: Pi-Hole 4.3.2

#113

Post by 4mitkumar »

testdelacc1 wrote: post #100

Is this substantially better than using ublock origin? I feel like my browsing experience is pretty good right now, and I'm uncertain what the benefits to upgrading are.

Ublock origin, uMatrix etc are pretty solid on browser based stuff.

But piHole can be used for blocking device telemetry. From installed softwares is the OS itself

Re: Pi-Hole 4.3.2

#114

Post by Flott »

bni wrote: post #44

Can Pi-Hole block YouTube ads yet?

It doesn't work for me at least. I still see a ton of ads on the youtube app on all of my Roku devices. I heard that it works for some people so maybe i'm hitting domains that aren't in the blocklists due to my location?

Re: Pi-Hole 4.3.2

#115

Post by move-on-by »

shadyMrPatch wrote: post #110
move-on-by wrote: post #94

Earlier quoted context omitted.

Please do not open port 53. Without proper counter-measures, open resolvers contribute to DNS Amplification attacks. If you have an open resolver, I guarantee that it is being used maliciously. Please close your port 53 and use a VPN to securely access your pihole. DNS Amplification Attacks: https://www.us-cert.gov/ncas/alerts/TA13-088A

didn't know about that. I'll give that a read later.

Its pretty simple:

> A Domain Name Server (DNS) amplification attack is a popular form of distributed denial of service (DDoS) that relies on the use of publically accessible open DNS servers to overwhelm a victim system with DNS response traffic.

DNS queries are much smaller then DNS responses. Making a huge amount of queries uses less bandwidth then uses to respond - making it a prime candidate for DDOS attacks. Look at your logs, no doubt you will see a large number of requests for various hosts. This is your system being used to attack people. Please close the port.

Re: Pi-Hole 4.3.2

#116

Post by brenden2 »

boyter wrote: post #15

Just recently I experimented going without my pi-hole or any ad blocker software for 4 weeks to see what would happen. My goodness the internet is a dumpster fire without it. So many pages lagging and slow to load. Things I wanted to click that jumped when an ad loaded resulting in miss clicks. Annoying things following me around. It was especially bad on mobile with the GDRP/Cookie notices and ad's to the point that…

Yep, my experience as well. There must be a better way. I think we're warming up for a war since browsers (Chrome and Safari at least) have slowly started making it harder to block ads, which I think will becoming a creeping normality.

Re: Pi-Hole 4.3.2

#119

Post by edoceo »

mikepurvis wrote: post #96
mihaifm wrote: post #50

Earlier quoted context omitted.

Pihole is just a GUI on top of dnsmasq, they're not doing anything fancy, apart maybe for the extra statistics. These are some interesting ideas for improvement, I'd also be interested in something with more flexibility, but I'm not sure if there's an alternative at the moment.

There are still a few possibilities for how it could work— first would be running multiple instances of dnsmasq and then putting a reverse proxy in front of them that would direct the traffic based on who's asking. Another would be switching to a purpose-built DNS resolver/cache that had this capability. Finally, you could have per-client DNS IPs, but this would require the cooperation of the DHCP server, which is le…

Dnsmasq can be the DHCP too. I basically run a "pi-hole" like thing on a Soekris - handles four subnets and routes and other neat network magic.

It serves dead pages for CSS, JS and IMG

Re: Pi-Hole 4.3.2

#120

Post by ignoramous »

crstin wrote: post #3

As the situation has worsened with the latest release of Safari I'm really interested to globally setup Pi-Hole on a VPS via docker and use it in combination with VPN (Strongswan) for all of my devices (also mobile). Has anybody had success with such a setup yet?

You could instead WireGuard split tunnel dns traffic and serve it with Pi-Hole or forward it to dns.aguard.com if you do not really require analytics or use unbound with block lists to resolve names recursively.
Post reply on HN