Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Setting Up 1.1.1.1 for Families on a Pi-Hole

uglyduck.ca

Post reply on HN
Print view View original

21–30 of 82 posts

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#21

Post by broodbucket »

jasonjayr wrote: post #17
hn_throwaway_69 wrote: post #16

Why do parents feel the need to control what their children do online? I had unrestricted internet access as a child and turned out fine. Although I must say, a DNS based approach is more benign than some of the horrendously invasive alternatives.

Control or monitor? I'm pretty sure I don't want my kids around 4chan and/or kiwifarm till they're much older .....

My high school friend group lived on 4chan, and this was in the era of shock sites and the like. You grow out of it pretty quickly.

Zero parenting experience here, but making something the "forbidden fruit" is probably how kids learn to change the DNS on their device.

As far as I can remember, the only real-world consequence was someone applying Bengay where it should not be applied.

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#22

Post by captn3m0 »

a10c wrote: post #6
whalesalad wrote: post #3

I’d urge everyone to run a dns bench tool at home. Cloudflare isn’t always the right choice and for some ISPs with routing issues it can sometimes be a bad choice.

can you recommend a tool?

I’ve used https://pypi.org/project/DnsBench/

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#23

Post by ttt7 »

broodbucket wrote: post #20
hn_throwaway_69 wrote: post #16

Why do parents feel the need to control what their children do online? I had unrestricted internet access as a child and turned out fine. Although I must say, a DNS based approach is more benign than some of the horrendously invasive alternatives.

The DNS approach helps more for malware than it does for adult content and the like. Twitter, Reddit, Tumblr, Google/Bing image search etc all have adult content easily within reach and DNS can't do anything about that. It doesn't make sense on a technical level so it doesn't even matter if it makes sense on a philosophical level.

Using 1.1.1.3 blocks adult content on search engines like Google - it’s obviously not hard to find adult content through other means, but it avoids accidents.

https://one.one.one.one/family/

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#24

Post by YourGrace »

hn_throwaway_69 wrote: post #16

Why do parents feel the need to control what their children do online? I had unrestricted internet access as a child and turned out fine. Although I must say, a DNS based approach is more benign than some of the horrendously invasive alternatives.

I believe the biggest difference is the expansion of what's available online. When I was growing up online, I didn't have to worry about the same set of issues children have to navigate today, or even the same set of bad things online. There weren't as many attack vectors, and there weren't as many people to target. With more people online and accessible, it's safe to assume more issues will rise with having unrestricted access.

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#25

Post by freediver »

I did test 1.1.1.1 and found it to be pretty slow on long tail domains (obviously everyone is caching popular ones).

I bascially ran a 'dig' with multiple DNS providers and CloudFlare was slowest among the bunch for long-tail domains.

Here are the details: https://twitter.com/vladquant/status/1428761979808669704

CloudFlare never responded to this tweet.

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#26

Post by LordDragonfang »

broodbucket wrote: post #21
jasonjayr wrote: post #17

Earlier quoted context omitted.

Control or monitor? I'm pretty sure I don't want my kids around 4chan and/or kiwifarm till they're much older .....

My high school friend group lived on 4chan, and this was in the era of shock sites and the like. You grow out of it pretty quickly. Zero parenting experience here, but making something the "forbidden fruit" is probably how kids learn to change the DNS on their device. As far as I can remember, the only real-world consequence was someone applying Bengay where it should not be applied.

Point of clarification, was this before or after stormfront explicitly started using the site as a recruitment and training ground for neo-nazis? Because I also spent a fair bit of my middle and high-school time on 4chan, and can attest to the fact that the 4chan of 2007-2012 and the chansites of the present day are very different beasts.

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#27

Post by ttt7 »

LeoPanthera wrote: post #5
2Gkashmiri wrote: post #2

why? arent we already using pi-hole for blocking all the stuff? that said, i have a query about a simple way to force all dns in a local network to pass through pi-hole. i only have access to the iSP router and pi-hole and cannot use third party router

Your router must support outbound NAT in order to force all connections on a specified port to a specified host. If your router doesn't have that feature, there's no way to do it.

You could double-NAT with a second router (apparently causes problems with some things like consoles, although I’ve never had a problem).

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#28

Post by gjs278 »

freediver wrote: post #25

I did test 1.1.1.1 and found it to be pretty slow on long tail domains (obviously everyone is caching popular ones). I bascially ran a 'dig' with multiple DNS providers and CloudFlare was slowest among the bunch for long-tail domains. Here are the details: https://twitter.com/vladquant/status/1428761979808669704 CloudFlare never responded to this tweet.

I doubt im visiting many domains that aren’t already cached by them

Re: Setting Up 1.1.1.1 for Families on a Pi-Hole

#29

Post by unixhero »

freediver wrote: post #25

I did test 1.1.1.1 and found it to be pretty slow on long tail domains (obviously everyone is caching popular ones). I bascially ran a 'dig' with multiple DNS providers and CloudFlare was slowest among the bunch for long-tail domains. Here are the details: https://twitter.com/vladquant/status/1428761979808669704 CloudFlare never responded to this tweet.

Interesting, but what are long tail domain?
Post reply on HN