Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Maza – Like Pi-hole but local and using your operating system

github.com

Post reply on HN
Print view View original

121–130 of 138 posts

Re: Maza – Like Pi-hole but local and using your operating system

#121

Post by 4nof »

I found there is a docker container of pihole which means it can run on anything including Windows! I tried it and it works in a docker container on windows just fine! pihole docker steps: (prereq: install docker https://www.docker.com/products/docker-desktop)

1.setup your docker-compose.yml file with the one listed on pihole page https://hub.docker.com/r/pihole/pihole/ (starts with version: '3').

2. save and do "docker-compose up -d"

3. do "docker ps" and ensure your pihole is running.

4. Go to network settings and set your DNS to 127.0.0.1 and ::1 like this: https://mayakron.altervista.org/wikibase/show.php?id=Acrylic...

5. if the docker container is ever stopped, you will need to reverse the setup step 4 to get back internet.

Hope that helps all you windows users who want a DNS blocker pihole on your machines!

Re: Maza – Like Pi-hole but local and using your operating system

#122

Post by Larrikin »

martimarkov wrote: post #44
imglorp wrote: post #38

Earlier quoted context omitted.

Chrome, for example, has banned some adblockers. Makes sense to me.

Out of curiosity which ones and is there a common pattern in their blockage philosophy?

They banned the best one in my opinion https://adnauseam.io/ Blocks ads and helps poison the data they have collected on you

Re: Maza – Like Pi-hole but local and using your operating system

#123

Post by jlgaddis »

amelius wrote: post #94
alpaca128 wrote: post #76

Earlier quoted context omitted.

How is it supposed to be harder to hack? I thought the main point is to have the blocking enabled in the whole network, including devices like smartphones.

Because the Pi-Hole doesn't run untrusted code, like a personal computer does (e.g. Javascript, installed applications, etc.). Same holds for smartphones.

I'd consider the web-based administration interface to be "untrusted code" -- and there just a remote code execution vulnerability (due to very insufficient input validation of MAC addresses) discussed here yesterday [0] .

[0]: https://news.ycombinator.com/item?id=22714661

Re: Maza – Like Pi-hole but local and using your operating system

#124

Post by achairapart »

ddrt wrote: post #116
achairapart wrote: post #104

I'm looking for a simple tool to setup and switch to DNS over HTTPS at the OS level (MacOS, in this case), with no success. With it, I would simply switch to one of the many pi-holed/filtered DOH services[0] out there, or even roll my own on a cheap VPS. On iOS there is DNSCloak which is excellent, Android 9+ has built-in support (Private DNS). [0]: like pi-dns.com or blahdns.com

Out of ignorance, how does DNS Cloak differ/compare to NextDNS?

NextDNS is a commercial solution, there will be more limits to the free plan when it will be out of beta. DNSCloak is just a tool that let you choose different DNS resolvers, even your very own.

Re: Maza – Like Pi-hole but local and using your operating system

#125

Post by brigandish »

lonelappde wrote: post #72
huhtenberg wrote: post #36

Earlier quoted context omitted.

Just for the sake of argument - to block trackers that are built into other software, eg. chat clients and some such.

Pi-hole already does that. You can run pi-hole on your local OS with Docker. It's 5 minutes to install.

Aside from competition being a good thing, Docker itself introduces attack vectors.

Re: Maza – Like Pi-hole but local and using your operating system

#126

Post by obituary_latte »

xnyan wrote: post #90
obituary_latte wrote: post #67

Earlier quoted context omitted.

You can also splurge and for under $10/mo set it up on a DigitalOcean (or similar) cheap hosting provider and have it available everywhere. And you can share with friends and family.

The cost in your example is far, far more than $10 USD a month. If you can set this up, your time is absolutely worth something and even if this is your area of expertise, you are now personally responsible for a critical piece of your internet browsing infrastructure. There are tons of important details to keeping a critical service up and running almost all the time - even if you are competent in this, that is stil…

I have had one up for around 2 years now and would say I have spent less than 5 minutes maintaining it over that time period. I did spend more than typical time setting it up because I added a custom php page so I could remotely add client ip addresses to the dns iptables whitelist, but I could have just done the basic setup in <20 minutes. It’s solid as a rock. Am I lazy about it? Sure. But I don’t quite consider it critical. It’s just personal use basic internet. And if something were to go wrong, most if not all client configurations have a backup/secondary dns option anyway so as long as that is configured things keep working fine, just with ads.

Re: Maza – Like Pi-hole but local and using your operating system

#127

Post by mcovey »

For anyone running OpenWRT, you can install the adblock package to accomplish roughly the same thing as Pi-hole does. I don't believe it supports some advanced features like DoH/DoT or DNS resolution (e.g. a1b2c3.example.com -> ad-server-that-should-be-blocked.com), but it does the basics - custom host file sources, additional blacklist rules, whitelisting, and quick enable/disable for troubleshooting.

It also has an option to force all DNS traffic (port 53, so again it won't catch DoH/DoT) to go through the router. Occasionally I forget I've done this and tried `dig foo.bar @1.1.1.1` and gotten confused until I remember that my router is forcing that DNS lookup to go through it first, and then through the router's configured DNS resolver.

Re: Maza – Like Pi-hole but local and using your operating system

#128

Post by jdc0589 »

4nof wrote: post #121

I found there is a docker container of pihole which means it can run on anything including Windows! I tried it and it works in a docker container on windows just fine! pihole docker steps: (prereq: install docker https://www.docker.com/products/docker-desktop ) 1.setup your docker-compose.yml file with the one listed on pihole page https://hub.docker.com/r/pihole/pihole/ (starts with version: '3'). 2. save and do "do…

I've been doing this for the past year or so.

couldn't run pihole network wide because too many shady "deal /discount" sites my girlfriend uses kept breaking, so this was my alternative.

Re: Maza – Like Pi-hole but local and using your operating system

#129

Post by touristtam »

mcovey wrote: post #127

For anyone running OpenWRT, you can install the adblock package to accomplish roughly the same thing as Pi-hole does. I don't believe it supports some advanced features like DoH/DoT or DNS resolution (e.g. a1b2c3.example.com -> ad-server-that-should-be-blocked.com), but it does the basics - custom host file sources, additional blacklist rules, whitelisting, and quick enable/disable for troubleshooting. It also has an…

You can use dnsmasq on OpenWRT and other packages that void the need for an additional pi-hole.

Re: Maza – Like Pi-hole but local and using your operating system

#130

Post by XelNika »

rovr138 wrote: post #101
XelNika wrote: post #80

Earlier quoted context omitted.

Why not configure your local .test domains in your Pi-hole? That's also dnsmasq, you can use the same configuration options.

> Works well for when i'm not on one of my networks. On the go is the key here.

What do you mean? There's nothing preventing him from running Pi-hole and stubby locally in Docker. That was how I interpreted his comment.
Post reply on HN