Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pi-hole v6

pi-hole.net

Post reply on HN
Print view View original

41–50 of 316 posts

Re: Pi-hole v6

#41

Post by unsnap_biceps »

chgs wrote: post #37
unsnap_biceps wrote: post #4

Does anyone know if pihole is ever going to add DoH or similar support natively? I've had such troubles with cloudflared awhile back that I gave up on DoH, but would love to encrypt those queries.

I’m not sure why I’d ever want DoH, I block as much as I can at my firewall and have a canary domain. I want my devices to use my defined dns sever on my network, not some ad company (and all tech companies eventually become ad companies)

I want pihole to talk encrypted to the upstream dns server. I don't actually care if my devices talk encrypted to pihole.

I just don't want to leak dns requests to my isp. If there's a way to do this without DoH or DoT, I'd happily learn more about it.

Re: Pi-hole v6

#42

Post by hk1337 »

Mossy9 wrote: post #2

Pi-hole is such a great tool. I've been running it for a few years on a raspberry pi zero, and am constantly astonished by the sheer amount of cruft it blocks for me. Congratulations to the team for the release - happy to support you via Patreon!

I have had many times click an article link on reddit where everyone in the post comments complains about how the site is riddled with ads that it makes it unreadable and all I see is the article with a lot of whitespace.

Re: Pi-hole v6

#43

Post by andrewinardeer »

plg wrote: post #32

love pi-hole we block all meta and X properties from our home network, also ads and it's self hosted on our own metal it's a wonderful life

> we block all meta and X properties from our home network, also ads

There's a difference between meta, X and ads?

Re: Pi-hole v6

#44

Post by BHSPitMonkey »

andy_xor_andrew wrote: post #21

I set up pi-hole recently after hearing about it for years. I was kind of surprised at a lack of really basic features (imo): There isn't any kind of "dry run" or "phantom" mode, where requests are not actually blocked, but appear marked in the log UI as "would be blocked". This is super important because I want to see all the things my home network is doing that would be blocked before I actually hit the big red but…

Is a DNS blackhole the right way to restrict your TV from doing bad things? The software running on the device might not even use DNS lookups to connect to hosts as it pleases. Your router is probably the better place to add guardrails.

Re: Pi-hole v6

#45

Post by ncrmro »

Nice.

I wish pihole or adguard would add support for change DNS records based on the query subnet. I believe this is called DNS views.

That way my local devices and wireguard devices can get the correct IP for internal services.

Re: Pi-hole v6

#46

Post by b3lvedere »

ge96 wrote: post #33
andy_xor_andrew wrote: post #21

I set up pi-hole recently after hearing about it for years. I was kind of surprised at a lack of really basic features (imo): There isn't any kind of "dry run" or "phantom" mode, where requests are not actually blocked, but appear marked in the log UI as "would be blocked". This is super important because I want to see all the things my home network is doing that would be blocked before I actually hit the big red but…

I think I'll never buy a smart TV what an ultimate ahole move to put ads in there. It's like the Kindles where you have to read these ads before you can open your book (of course you can pay a 1-time fee). Like buying a movie on YouTube and having to watch ads in it or can't see full res unless you're on an allowed device. If UBO actually stops working on Chrome I'll either leave or use pihole. My cheap android phone…

Most non-smart 4K screens are more expensive than 4k-smart tv screens though. Really weird, because there's less stuff in it. I just want a nice 50" 4k screen with hdmi and display ports. I don't use all the other junk anyway, since i watch tv via a computer and sounds goes to a surround set.

Re: Pi-hole v6

#47

Post by bjoli »

jccalhoun wrote: post #35

I've been using Technitium for a couple years and been pretty happy with it https://technitium.com/dns/

So have I. I found it more approachable once I started having more advanced configurations.

Re: Pi-hole v6

#48

Post by roger_ »

LeoPanthera wrote: post #7

I've been using AdGuard Home, which does pretty much the same thing, but is slightly better polished, with things like support for DoH and OSs other than Linux. https://github.com/AdguardTeam/AdGuardHome

I moved to AGH a while ago too.

Is there anything in Pi-Hole v6 that would make someone switch back?

Re: Pi-hole v6

#49

Post by progbits »

BHSPitMonkey wrote: post #44
andy_xor_andrew wrote: post #21

I set up pi-hole recently after hearing about it for years. I was kind of surprised at a lack of really basic features (imo): There isn't any kind of "dry run" or "phantom" mode, where requests are not actually blocked, but appear marked in the log UI as "would be blocked". This is super important because I want to see all the things my home network is doing that would be blocked before I actually hit the big red but…

Is a DNS blackhole the right way to restrict your TV from doing bad things? The software running on the device might not even use DNS lookups to connect to hosts as it pleases. Your router is probably the better place to add guardrails.

I recommend putting all these things on their own VLANs with strict routing rules.

For example my STB is on a VLAN that has WAN access (otherwise it won't do anything), but that makes it untrustworthy so it is completely isolated from rest of LAN.

On the other hand some "smart"/IoT devices are on a VLAN that has no WAN access so that they can't phone home, become a botnet, or download firmware updates that remove functionality in favor of subscription services. Only a VM running homeassistant can talk to them.

This will work until amazon sidewalk / built-in LTE modems become too frequent, at that point I'll have to start ripping out the radio modules from things I buy.

Re: Pi-hole v6

#50

Post by hk1337 »

eamag wrote: post #6

Want to highlight https://nextdns.io/ as a similar service, very happy with it

This actually seems rather nice. Not the same as PiHole but I can see its upsides.

One upside I like about PiHole is that I can set it up to distribute the DNS to all my devices. This seems like I have to manually configure each device?

ATT doesn't let you set the IPv6 DNS, so I either have to disable IPv6 on the network or setup PiHole to pass IPv6 and the DNS I want to the device.

Post reply on HN