Maza – Like Pi-hole but local and using your operating system

Post by angristan » Mon, Mar 30, 2020, 4:50 PM UTC

3xblah wrote: post #118

darkteflon wrote: post #39

Earlier quoted context omitted.

I’ve just looked into this - it looks excellent. Can I ask: is this an all-round superior solution to running your own pi-hole? I set up dual redundant pi-holes on raspberry pi 4s on my home network but switching all devices to NextDNS would give me access to filtered DNS even when away from home, plus save me the trouble of running two raspis (including two Ubuntu instances) just for that purpose. Could anyone knowl…

NextDNS is a commercial entity founded by a Netflix employee who is working on a Netflix CDN. Do the NextDNS terms of use address the potential for data sharing between the two entities. Running NextDNS has costs. Given the absence of fees for using NextDNS, it has a commercial interest in collecting information about users. Like other third party DNS providers (middlemen), e.g., Google or Cisco/OpenDNS, NextDNS supp…

Post by poitrus » Mon, Mar 30, 2020, 9:56 PM UTC

snazz wrote: post #108

nullify88 wrote: post #107

Earlier quoted context omitted.

> NextDNS is also further away, meaning there will be much more latency for all your DNS queries. It is usually best to run your own resolver, or have a local DNS server in your network. But your local PI resolver would likely have to pass on your request to an upstream DNS server if it isn't cached. Although its negligible, this extra hop would add latency. This is assuming the result isn't in the OS or browser DNS…

I find that about half of my DNS requests hit the network cache and not upstream, which makes it worth it for me.

Post by eikenberry » Mon, Mar 30, 2020, 10:06 PM UTC

swinglock wrote: post #29

Who is this for, what's the point? If you're using a computer on which installing this software is an alternative, you can install a web browser with an ad blocker, which performs much better than DNS based filters. If you're not using such a computer, Pi-Hole proves DNS filtering and this software doesn't. What's the use-case between these two that isn't already covered?

Post by mega_tux » Thu, Apr 02, 2020, 8:31 PM UTC

swinglock wrote: post #136

brigandish wrote: post #125

Earlier quoted context omitted.

Aside from competition being a good thing, Docker itself introduces attack vectors.

Surely not more so than curling scripts from the web and executing them as root, which is the exact install procedure described for this program.