Does anyone have a recipe for using pihole via OpenVPN using docker? I'm using this[1] but I'm surprised there isn't something more official/baked. [1] https://github.com/mr-bolle/docker-openvpn-pihole
I just set this up yesterday, was quite easy.
Pi-hole: A black hole for Internet advertisements
231–240 of 262 posts
Re: Pi-hole: A black hole for Internet advertisements
#232I love the pi-hole, but I can't seem to figure out how to get resolving of .local hostnames back when I use it. Like, I can no longer ping my media server at media.local, I have to use the exact IP address. Not a deal breaker, but annoying.
Make sure Pihole has your local DHCP/DNS server setup as the first resolver. So it will check your router for example before checking externally. Then again, you might be using Pihole as your DHCP server?
Explain your setup some more and I can add more details.
Re: Pi-hole: A black hole for Internet advertisements
#233Ad blocking via DNS is relatively easy right now because a content provider like CNN.com will use a domain like “ads.evil-surveillance-media.com” to load their ads into your browser. But what happens if all these companies switch to just using their own domain to load ads? If the ads as well as the content BOTH come from CNN.com then there will be no easy way to filter the ads out. This will be the next stage in this…
With the prevelence of ad blocking tech, the question becomes why haven't they already?
The answer being that content providers can't be trusted to self report metrics that determine how much advertises pay. At least not for pay per view/client/etc models.
The people that self select themselves from viewing advertisements might be doing advertisers a favor. They're perhaps less likely to make purchases based on impressions//click ads on purpose; per dollar, ad campaigns might be more effective without said people.
Re: Pi-hole: A black hole for Internet advertisements
#234I love the pi-hole, but I can't seem to figure out how to get resolving of .local hostnames back when I use it. Like, I can no longer ping my media server at media.local, I have to use the exact IP address. Not a deal breaker, but annoying.
Yes, there are few things like that. I think this project is a good start but needs some features like local zone support (being the authoritative NS for you local domain).
Re: Pi-hole: A black hole for Internet advertisements
#235Earlier quoted context omitted.
That's interesting, Where do you see relevant Google Ads while shopping; is it on some product review blogs? Did you check the 'Shopping' tab of Google search?
One example I've run into... When you google search for something (like say a product or service that you want to purchase), you'll see a couple ads at the top of the results. Pi-hole usually prevents most ads from even displaying, but those always show up. If the ad was useful and you want to click through, it will generally block the request. I think the click through sends you to doubleclick or something. I've nev…
Understood, I think Google features those products in the shopping tab. But the results may vary depending upon the country you're in as I think they ran into some trouble for that in EU.
Re: Pi-hole: A black hole for Internet advertisements
#236I love the pi-hole, but I can't seem to figure out how to get resolving of .local hostnames back when I use it. Like, I can no longer ping my media server at media.local, I have to use the exact IP address. Not a deal breaker, but annoying.
If you point the PiHole Upstream DNS to your router's DNS (Or whatever DNS server is hosting the .local domains) it should resolve .local hostnames again. I think by default it uses 8.8.8.8 or 8.8.4.4
https://discourse.pi-hole.net/t/change-upstream-dns-server-i...
Re: Pi-hole: A black hole for Internet advertisements
#237I love the pi-hole, but I can't seem to figure out how to get resolving of .local hostnames back when I use it. Like, I can no longer ping my media server at media.local, I have to use the exact IP address. Not a deal breaker, but annoying.
I thought .local names used mDNS. Not sure why pi-hole would interfere with that.
Re: Pi-hole: A black hole for Internet advertisements
#238Earlier quoted context omitted.
Due to the architecture of DNS, DNS is not end-to-end encrypted. There is a potential solution (djb's DNSCurve), but it will not be deployed. As a result, let's do an assessment. Using Google DNS, self-hosted resolver, or your ISP's DNS : NSA, your ISP, everyone and every dog at the middle of your link to the Internet can track and see your requests. Using CloudFlare's DNS w/ DNS-over-HTTPS : only NSA (via a NSL or s…
Cloudflare scaled up massively so quickly when they started offering cdns a decade ago. I judged the company in a negative light when their ceo or cfo wrote an open letter rationalizing their ban silencing some obnoxious website over political belief virtue signaling. A company that crushes free speech cannot be trusted. I don’t even remember what the obnoxious or offensive website was but I know that offensive speec…
The first amendment applies to government censorship only.
Cloudflare is not the government. A business can choose not to service someone based on almost any criteria, that's not "crushing free speech". You can then choose not to patronize the business based on that policy. This is an important part of a free market.
Re: Pi-hole: A black hole for Internet advertisements
#239Earlier quoted context omitted.
> Your wife downloads a game on her phone, and you get that look like "ok, why isn't this working.. what did you do now?" THISSSSSS. The only thing stopping me from using Pi-hole at home are my family members and the inevitable "this isn't working!?!?" rant and then I need to figure out how and what to whitelist. No thanks. I have ad blockers on the kids' PC and when something doesn't work, it's one click to temporar…
I've been running it for months now and so far none of my family has come back with any 'major' issues. The only ones, which I could whitelist are when they use something like google shopping that has affiliate links and they're blocked.
>The only ones, which I could whitelist are when they use something like google shopping that has affiliate links and they're blocked.
If you have impatient shoppers in your household, the blocked affiliate(s) might be a benign issue at first, but when you miss out on a buying opportunity and then an algorithm prices it higher (while you are conducting a 'whitelisting' exercise) - things can escalate very quickly..
Re: Pi-hole: A black hole for Internet advertisements
#240Earlier quoted context omitted.
This is the dark side of DNS-over-HTTPs: it prevents the network operator from changing what is received by browsers. Sometimes this is legitimate, as in Pi-hole. Paul Vixie got very upset when he discovered that his chromecast bypasses local DNS settings to go directly to Google: https://news.ycombinator.com/item?id=19170671 I wouldn't be surprised if soon Chrome defaults to DNS-over-HTTPs direct to base, except for…
It's a big concern. I can block DNS on my network (except for pihole), but I can't block QUIC, and certainly not HTTPS or TLS. If I know about an IP ahead of time, I can block those, but who's to guarantee that Google or any other nefarious service would always use a well known IP for DoH?
How would devices use the obscure DoH IPs, there would have to be a method to update/lookup said IPs. That same method could be used to keep an up to date block list.
Alternatively, the traffic could be subject to heuristics to identify DoH connections.