21–30 of 211 posts
I really don't understand why people go to the trouble of using Pi-hole that only blocks at the DNS level, instead of using uBlock Origin which can block at the DOM level. uBlock Origin is easier and cheaper to set up, less maintenance, and more effective.
Pi-hole blocks for IoT devices, all apps across all smartphones on the network, all programs across all OS's on your network.
I really don't understand why people go to the trouble of using Pi-hole that only blocks at the DNS level, instead of using uBlock Origin which can block at the DOM level. uBlock Origin is easier and cheaper to set up, less maintenance, and more effective.
Standard reminder for whenever Pi-Hole gets brought up: You don't actually need a physical Raspberry Pi for this functionality, and you don't even need the Pi-Hole software. It's all just wrappers around dnsmasq[1], which every Linux distribution makes available via their package manager. If you have an old spare Linux system on your LAN already, doing whatever, you can just install and set up dnsmasq and point your…
I was shocked that TFA’s recommended kit was $155! When did Raspberry Pi’s get so pricey?
Standard reminder for whenever Pi-Hole gets brought up: You don't actually need a physical Raspberry Pi for this functionality, and you don't even need the Pi-Hole software. It's all just wrappers around dnsmasq[1], which every Linux distribution makes available via their package manager. If you have an old spare Linux system on your LAN already, doing whatever, you can just install and set up dnsmasq and point your…
I was shocked that TFA’s recommended kit was $155! When did Raspberry Pi’s get so pricey?
Tailscale with NextDNS is a simpler alternative to this and is easy to set up on all your devices.
Earlier quoted context omitted.
> read TFA for the iptables config that fixes those apps and devices that bypass local DNS. For example, Don't worry. All the browsers and stuff are bypassing this level of control by moving to DNS-over-HTTPS. You'll either have to deploy a TLS terminating proxy on your network, or give up on this arms race.
Jokes on you, I do have a fortinet which does this.... Oh wait, only up to TLS 1.1 or something and it's slow. I forgot the name of the software but there used to be a few tools to terminate and reencrypt. But yeah dnssec is it's own challenge
I really don't understand why people go to the trouble of using Pi-hole that only blocks at the DNS level, instead of using uBlock Origin which can block at the DOM level. uBlock Origin is easier and cheaper to set up, less maintenance, and more effective.
As mentioned in the article, pi-hole complements a browser ad block, doesn't replace it.
I really don't understand why people go to the trouble of using Pi-hole that only blocks at the DNS level, instead of using uBlock Origin which can block at the DOM level. uBlock Origin is easier and cheaper to set up, less maintenance, and more effective.
Makes it nice and easy for the non-technical members of the fam.
In case you’re like a lot of folks in HN, read the title, and say to yourself “already have one”, read TFA for the iptables config that fixes those apps and devices that bypass local DNS. For example, the New York Times app seems to now use its own hard-coded DNS servers. Without having tried it, it looks like TFA has the fix for that. EDIT: replies indicate that I, a person who is barely competent at many network ta…