Live data from Hacker News

Pi-hole 5.0

pi-hole.net

201–210 of 254 posts

Re: Pi-hole 5.0

#201

Earlier quoted context omitted.

I set up a pihole and literally forgot about it. Like I was cleaning out a closet on moving day and found it plugged in. Took a moment to even realise what it was doing there.

Finding a years abandoned Linux server on your home network m ight be a good leasson to always treat your home network as if it was compromised.

Honestly curious: how would you exploit it? If the pi isn't exposed to the www by your router, what can you do?

Re: Pi-hole 5.0

#202
post #110

Earlier quoted context omitted.

Blocking Facebook stuff on every device except my wife’s phone.

Why not just tell your DHCP server to give her the regular DNS servers? Is this situation where she wants ad blocking but still wants to use FB?

Not OP, but in my case, most of my VLANs can’t perform DNS requests to WAN. Only the pi.hole server is able to do that (and other devices in the DMZ).

Reasoning: appliances like Chromecast/Apple TV/whatever will often ignore DHCP DNS settings if it doesn’t resolve, and they’ll reach out to 8.8.8.8/8.8.4.4 directly.

Re: Pi-hole 5.0

#203
post #194

Does it support blocking YouTube ads yet? I mean the short video ads that interrupt the videos

No they come from the same domain as the video that you are trying to watch. If you want to block YouTube ads, then use uBlockOrigin.

Re: Pi-hole 5.0

#204

Earlier quoted context omitted.

They could've at least intercepted the requests and applied their blacklist while leaving unblacklisted requests pass through as-is (so you can still use a custom server for the non-banned domains). Not saying I'm in favour of these shenanigans at all but at least if you are forced to do it then better do it with the minimum level of interference possible.

Then you can have your client lookup blacklistedsite.com.yourdomain.com and have yourdomain.com return the record of blacklistedsite.com to bypass filtering.

Just like you could register your own domain and return the record of a blacklisted website?

Re: Pi-hole 5.0

#205
post #2

Pi-Hole has made my home browsing experience so much better since setting it up. Minimal resource overhead, maximum results - and if you care about stats those are available too but I just turned all logging off. Now if it could just filter out YouTube ads...

I had something working a while ago for YT ad blocking in chromecast; the underlying problem there is that the chromecast is hard-coded to use Google's DNS servers (8.8.8.8, etc) instead of your networks. So you need to set up your network to intercept DNS requests to 8.8.8.8 and 8.8.4.4 and instead send these to your own ad-blocked DNS server. My network setup no longer lets me do this, and I don't care enough to ma…

Just don’t allow outbound DNS except from your pihole, and the Chromecast will use whatever DNS server you give it.

Also, make sure to block UDP and TCP on port 53, as well as UDP on port 443 (Chrome snitching).

Re: Pi-hole 5.0

#206
Which docker image do I use on raspberry pi 1 B? None of them seems to work, all crash on step `[20] pihole exited 267.`

Re: Pi-hole 5.0

#207
post #189

Earlier quoted context omitted.

Is that not a trivial amount for hands off DNS recursion services? Consider the cost to purchase a Raspberry Pi, set it up, electricity, wear and tear on flash storage, etc If you point me at a checkout page for $2/month to not even have to think about plugging a Pi in, I’m going to pull my credit card out in a heartbeat. A single coffee costs me more. Think about your time!

> Think about your time! Pi-hole is a tool to improve your privacy. Handing all your DNS requests to a 3rd party is the exact opposite. Now you have to deal with their privacy policy, track whether that company got hacked or bought etc. Installing and maintaining pi-hole takes very little time.

Where do you think pi-hole sends your DNS queries?

Re: Pi-hole 5.0

#208

Earlier quoted context omitted.

Also maybe they use their phone and many combinations of PhoneType + BrowserType don't support the same quality of adblocking as PiHole.

NextDNS is pretty good especially on iOS where you can’t install adblockers (unlike on rooted android)

latest ios 13, AdGuard Pro installs VPN profile and filters on DNS level pretty well.

Relevant adventure with iOS update rejection: https://adguard.com/en/blog/adguard-pro-is-back.html

Re: Pi-hole 5.0

#210
Per client blocking looking fab.

...I've got some sketchy IOTs that I've been meaning to lock down a little more.

Post reply on HN