Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pi-hole v6

pi-hole.net

Post reply on HN
Print view View original

211–220 of 316 posts

Re: Pi-hole v6

#211

Post by gh02t »

samplatt wrote: post #199
lawn wrote: post #22

Earlier quoted context omitted.

I even run Adguard Home on my router that runs opnsense.

What routers are compatible with opnsense? Or does it need a full-blown server/container? Been happy with my pihole for a few years, and this thread is full of new information for me.

Opnsense is not like OpenWRT, it targets running on relatively powerful generic x86 hardware. Intel CPUs and networking hardware usually works best because of driver support on BSD, but it will work on others. I say "relatively" because even low power old embedded CPUs are more than enough to route at a gigabit or more with lots of firewall rules and services running. Opnsense's cousin Pfsense also has some support for ARM, but that version is only really available on their commercially supported hardware.

Most people either buy a generic box that can be had for ~$250, or recycle an old PC and stick in a network card. You can also buy commercially supported hardware for Opnsense or Pfsense's parent companies, though the value proposition isn't worth it for home users IMO as you will pay a steep premium versus loading up something yourself.

Re: Pi-hole v6

#212

Post by AnonC »

shmoogy wrote: post #57
eamag wrote: post #6

Want to highlight https://nextdns.io/ as a similar service, very happy with it

If only they had a stop blocking function.

NextDNS has not updated its client applications on multiple platforms (iOS/iPadOS/macOS) for several years. Those client applications did have the ability to stop the blocking (or not), but now it's just a toggle that does nothing.

Most of the time when I visit test.nextdns.io it shows as "unconfigured" even though the NextDNS client is installed and configured with a NextDNS profile (and approved in Settings as a VPN provider on these OSes). Sometimes it will work on its own.

I wouldn't recommend NextDNS unless the user is comfortable installing a (somewhat) permanent Profile on these devices with no temporary "off" switch to stop blocking. For me it's important to stop the blocking once in a while.

At least on macOS, there's Little Snitch (paid application), which can subscribe to the same blocklists used by ad blockers and has a working toggle.

Re: Pi-hole v6

#213

Post by samplatt »

gh02t wrote: post #211
samplatt wrote: post #199

Earlier quoted context omitted.

What routers are compatible with opnsense? Or does it need a full-blown server/container? Been happy with my pihole for a few years, and this thread is full of new information for me.

Opnsense is not like OpenWRT, it targets running on relatively powerful generic x86 hardware. Intel CPUs and networking hardware usually works best because of driver support on BSD, but it will work on others. I say "relatively" because even low power old embedded CPUs are more than enough to route at a gigabit or more with lots of firewall rules and services running. Opnsense's cousin Pfsense also has some support f…

Thanks very much for that. Been thinking about converting an old server to a router + container host for a while.

Re: Pi-hole v6

#214

Post by aulin »

MyOutfitIsVague wrote: post #38
andy_xor_andrew wrote: post #21

I set up pi-hole recently after hearing about it for years. I was kind of surprised at a lack of really basic features (imo): There isn't any kind of "dry run" or "phantom" mode, where requests are not actually blocked, but appear marked in the log UI as "would be blocked". This is super important because I want to see all the things my home network is doing that would be blocked before I actually hit the big red but…

> It's also not possible (or not clear) how to have different behavior for different clients There's a menu item for that: Clients. You create a group, add a client to that group, and configure blocking for that group. To have what you want, you create a group that has just one client in it.

I use pihole for dhcp and it's extremely easy with dnsmasq. Hope their settings overhaul does not break this.

dhcp-option=tag:nospam,option:dns-server,x.x.x.x dhcp-option=tag:spam,option:dns-server,y.y.y.y dhcp-host=client1...,set:nospam dhcp-host=client2...,set:spam

Re: Pi-hole v6

#216

Post by sph »

laweijfmvo wrote: post #55
LeoPanthera wrote: post #7

I've been using AdGuard Home, which does pretty much the same thing, but is slightly better polished, with things like support for DoH and OSs other than Linux. https://github.com/AdguardTeam/AdGuardHome

I went from PiHole -> AdGuard -> NextDNS. My patience for tinkering and maintaining wasn't high enough to not just pay someone else to do it :)

I used to use NextDNS, but pi-hole is such low maintenance it makes no sense to pay for a third party service and additional latency to do ads filtering. I set up pi-hole on an Arch Linux for ARM installation on a rPI 3 like 5 years ago and haven't touched it since. Still chugging along nicely.

Re: Pi-hole v6

#217

Post by knowaveragejoe »

corey_moncure wrote: post #141
xrisk wrote: post #93

Earlier quoted context omitted.

https://en.wikipedia.org/wiki/Twitter_suspensions

Let me put it another way; can you provide some examples of ideas, topics or opinions that I are likely to be censored if I posted them on X?

This has to be a disingenuous request. X is signaling at free speech, while in practice it amplifies or suppresses content the owner agrees or disagrees with.

Re: Pi-hole v6

#218

Post by sph »

mrmuagi wrote: post #100
laweijfmvo wrote: post #55

Earlier quoted context omitted.

I went from PiHole -> AdGuard -> NextDNS. My patience for tinkering and maintaining wasn't high enough to not just pay someone else to do it :)

Same except skipping AdGuard. Having the DNS live on a pi sounded like fun for me but it gave me stress due to power outages. There is safety in knowing you aren't adding a point of failure that only you know how to solve. I also had issues with adding backup DNS, since a backup DNS would be queried if the pihole blocked the DNS query -- so I would have to maintain two seperate blocklists, one local and one offsite.

DNS issues during power outages is the least of your problems, as chances are your Internet and all your PCs are down as well.

Re: Pi-hole v6

#219

Post by lawn »

samplatt wrote: post #199
lawn wrote: post #22

Earlier quoted context omitted.

I even run Adguard Home on my router that runs opnsense.

What routers are compatible with opnsense? Or does it need a full-blown server/container? Been happy with my pihole for a few years, and this thread is full of new information for me.

I bought my router from this site: https://teklager.se/en/products/routers/

They have some guides and stuff that explains the hardware requirements that might be helpful for you.

Re: Pi-hole v6

#220

Post by prmoustache »

timoteostewart wrote: post #67
josephg wrote: post #34

Earlier quoted context omitted.

> For my "smart tv" which I begrudgingly have to allow on my network occasionally for software updates Why install software updates if you don’t use the “smart” features? Our smart tv has been banned from the internet for years.

I imagine software updates might bring improved support for various media codecs, or UI enhancements, or better Bluetooth compatibility, etc.

Why would the manyfacturer spend money on that if it had your sale already and you aren't paying any support subscription?
Post reply on HN