Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pi-hole v6

pi-hole.net

Post reply on HN
Print view View original

291–300 of 316 posts

Re: Pi-hole v6

#291

Post by kbolino »

adornKey wrote: post #232
RandomDistort wrote: post #63

Earlier quoted context omitted.

Isn't a TV that permanently shows HDMI input a big monitor? Weirdly they always seem to be more expensive than a TV though.

One difference between Monitors and TV used to be that Monitors used RGB Subpixel-Layout and TVs used BGR. (i.e. TV panels are upside down) Configuring subpixel-layout per monitor is something that most OS won't allow. So if you use several monitors, you usually have to mount the BGR-ones upside down. (Otherwise fonts will be blurry...) For some time now there are really cheap 4K Monitors with BGR-layout available. I…

Subpixel hinting isn't that useful at high DPIs though. Apple has ditched it entirely in macOS, regardless of monitor DPI, and gone back to standard anti-aliasing.

Re: Pi-hole v6

#292

Post by Havoc »

Can it do native dns over http yet? Without hacky unbound proxy I mean.

That’s why I switched to affairs home but wouldn’t mind switching back

Re: Pi-hole v6

#293

Post by jimsmart »

master_crab wrote: post #289
jimsmart wrote: post #282

Earlier quoted context omitted.

That's kinda janky really. DNS doesn't have redirection like HTTP has, so what you describe can only be implemented using port forwarding (or SSH tunnelling, but I've never seen a router with the ability to tunnel DNS in this fashion?). Port forwarding used like this, won't enable one to use the 'groups' functionality on PiHole — which was the (g)parent thread here — because all requests arriving at the PiHole will c…

That doesn’t correct the situation in which the device is ignoring DHCP DNS requests.

> That doesn’t correct the situation in which the device is ignoring DHCP DNS requests.

That's the first time such a thing has been mentioned in this thread.

But I now get what you're trying to say in your comment above.

Sure, one can use e.g. iptables, to forward all outbound traffic on some port to some local IP. If your router has such capabilities.

But your rules won't be as simple as forward all port 53 traffic: you'll need to ensure that you exclude the PiHole from any rules like that (otherwise it would create an infinite loop) - or ensure the rule is specific for the device(s) in question.

And of course it wouldn't work if the device is using DoH.

But the issue you've introduced here, a device with hard-coded DNS, isn't really what this thread is about — the topic here was ~about wanting to group clients in PiHole, and different ways to configure the router to achieve this, without only seeing a single requesting client IP at the PiHole.

Re: Pi-hole v6

#294

Post by saltymug76 »

mistyvales wrote: post #198
saltymug76 wrote: post #189

Earlier quoted context omitted.

Pihole catches a lot of the trackers and crap coming out of my android tv. On my pc I see it as an extra line of defense after ublock.

Hulu stopped working properly on my Shield after using Pi-Hole, so I guess it was working?

On the pihole subreddit there's a wiki with lists of domains you can whitelist for certain services. I had to whitelist something for xbox live to work.

Re: Pi-hole v6

#296

Post by AstralSerenity »

ge96 wrote: post #33
andy_xor_andrew wrote: post #21

I set up pi-hole recently after hearing about it for years. I was kind of surprised at a lack of really basic features (imo): There isn't any kind of "dry run" or "phantom" mode, where requests are not actually blocked, but appear marked in the log UI as "would be blocked". This is super important because I want to see all the things my home network is doing that would be blocked before I actually hit the big red but…

I think I'll never buy a smart TV what an ultimate ahole move to put ads in there. It's like the Kindles where you have to read these ads before you can open your book (of course you can pay a 1-time fee). Like buying a movie on YouTube and having to watch ads in it or can't see full res unless you're on an allowed device. If UBO actually stops working on Chrome I'll either leave or use pihole. My cheap android phone…

If you use an Android device, you have the potential to live an ad-free life:

- Use Firefox with Ublock Origin and BypassPaywallsClean to avoid ads and Paywalls. - Use ReVanced to patch your YouTube APK to disable ads, add SponsorBlock to avoid in-video ads, etc. ReVanced can also patch all major social media apps to remove all ads. - Use OSS apps to avoid ads or get extra functionality. I use OuterTune for free music, Aliucord/Revenge for a better Discord client, etc.

Re: Pi-hole v6

#297

Post by tailspin2019 »

Fnoord wrote: post #277
tailspin2019 wrote: post #263

Earlier quoted context omitted.

Out of interest, those IP ranges that you’re blocking… is that at DNS level or are you doing some firewall-level blocking too? And do you use any kind of reference for determining which ranges/countries are wise to block or has this just been something you’ve evolved over time?

Great questions. Currently, I have IPv4 only (will change end of year to dual stack), and to block AS13414 (NetName TWITTER-NETWORK) blocking 104.244.40.0/21 to block x.com is suffice. However, if you follow [1] you have a more complete blocklist. In a *BSD you can use cron and curl to update these lists based on if a change occurred, OPNsense allows the same in their webUI. In that vein, I also have Tor exit node bl…

Interesting thanks for elaborating. I might need to take a closer look at OPNsense.

Re: Pi-hole v6

#298

Post by 8fingerlouie »

whalesalad wrote: post #281
8fingerlouie wrote: post #145

Earlier quoted context omitted.

Define latency ? This is my latency (ping.nextdns.io): zepto-cph (IPv6) 12 ms (anycast1, ultralow2) zepto-cph 13 ms (anycast1, ultralow2) ■ anexia-cph 13 ms (anycast2, ultralow1) anexia-cph (IPv6) 15 ms (anycast2, ultralow1)

welp. for every single domain you interact with, you gotta do a dns lookup. visit a modern website like yahoo, cnn, wapo, whatever and that will be like 100 dns requests. your device hits your router, if it has no answer, it recursively goes up the line getting an answer. do that 100 times. that is just for resolution. you still gotta actually hit that endpoint and get whatever it is you are trying to get. so if your…

I use my local router as a DNS cache/proxy for this exact reason, though i doubt 12ms (or 24ms) will mean much in the grand scheme of things compared to downloading a 25MB webpage which is mostly tracking code and ads.

Yes, if we were in the "good old days" of slim websites, 12ms may be noticable, but today, with webpages taking up lots and lots of storage that is served with every connetion, i seriously doubt you'll notice.

Besides that, every browser and modern operating system will cache DNS records for whatever the TTL from the upstream DNS is set to.

Re: Pi-hole v6

#300

Post by b3lvedere »

close04 wrote: post #261
b3lvedere wrote: post #236

Earlier quoted context omitted.

I've had a MSI Trident functioning as a gaming/HTPC computer for years and the family loves it. They know how to browse the various streaming services and use Steam and Kodi.

> a MSI Trident This is diverging quite a bit from "a smart TV replacement". Especially if Steam is a requirement. The gaming PC you have there is probably exactly the combination you want. But for most others it's the compromise to avoid I mentioned above. It delivers the console and TV/media center experience but with the full PC power consumption, noise, boot times, maintenance effort, and inconvenient controls. T…

Things just happened that lead to that optimised state of using one device for alll (The MSI). Nevertheless the main question was about a nice 4k screen. :)
Post reply on HN