PiHole for Friends and Family
-
Some sort of Dynamic DNS solution
-
@scottalanmiller said in PiHole for Friends and Family:
VPN would fix that, but would be a huge pain.
Thought about that, but like you said, huge pain...
-
Also, not sure how to handle smartphones, tablets, etc that travel outside the network? I guess I would have to use a VPN there?
-
Using SaltStack might be a solution?
Maybe @scottalanmiller have an idea about taking advantage of using salt minion to update the rich rules with the current IP address.
-
@aaronstuder said in PiHole for Friends and Family:
Also, not sure how to handle smartphones, tablets, etc that travel outside the network? I guess I would have to use a VPN there?
If you can't set the DNS addresses, yes.
-
@aaronstuder said in PiHole for Friends and Family:
Also, not sure how to handle smartphones, tablets, etc that travel outside the network? I guess I would have to use a VPN there?
Have you considered MAC filtering?
-
@black3dynamite said in PiHole for Friends and Family:
@aaronstuder said in PiHole for Friends and Family:
Also, not sure how to handle smartphones, tablets, etc that travel outside the network? I guess I would have to use a VPN there?
Have you considered MAC filtering?
Interesting Idea. Not sure that would work over the WAN?
-
What if I setup a dynamic DNS client on a computer, and have it update to my domain, say name.domain.com then have a script nslookup the domain name and update the firewall rules?
-
Would it not be easier to skip the DDNS parts and just have a script send the IP address directly?
-
@scottalanmiller yes, but how?
-
@scottalanmiller I don’t have a Linux computer at my grandparents or it would be easy
-
@aaronstuder said in PiHole for Friends and Family:
@scottalanmiller I don’t have a Linux computer at my grandparents or it would be easy
Use Python or PowerShell
-
@scottalanmiller it’s a Mac
-
-
@black3dynamite said in PiHole for Friends and Family:
@aaronstuder said in PiHole for Friends and Family:
@scottalanmiller it’s a Mac
Use Python.
Sadly all I know about Python is it’s a snake...
-
@aaronstuder said in PiHole for Friends and Family:
@black3dynamite said in PiHole for Friends and Family:
@aaronstuder said in PiHole for Friends and Family:
@scottalanmiller it’s a Mac
Use Python.
Sadly all I know about Python is it’s a snake...
Use bash?
-
@aaronstuder said in PiHole for Friends and Family:
@scottalanmiller it’s a Mac
Hence Python, the universal system automation language.
-
@ramblingbiped said in PiHole for Friends and Family:
@aaronstuder said in PiHole for Friends and Family:
@black3dynamite said in PiHole for Friends and Family:
@aaronstuder said in PiHole for Friends and Family:
@scottalanmiller it’s a Mac
Use Python.
Sadly all I know about Python is it’s a snake...
Use bash?
True, could be done just like on Linux.
-
@aaronstuder said in PiHole for Friends and Family:
What if I setup a dynamic DNS client on a computer, and have it update to my domain, say name.domain.com then have a script nslookup the domain name and update the firewall rules?
What OS are you going to be installing pi-hole in?
Liked the idea so just started working on the script, resolving the dynamic dns name and logging it and comparing it to the current ip is done. Just need to target your OS of choice to test the creation/destruction of the firewall rules.
https://github.com/rodrigo-hissam/dns_to_ip_firewall_rules/blob/master/dns-to-ip-firewall-rules.py
Example:
~/scripts/python$ python dns-to-ip-firewall-rules.py Adding to firewall - TODO mangolassi.it - 104.25.47.32 Adding to firewall - TODO google.com - 172.217.1.238 Adding to firewall - TODO theverge.com - 151.101.65.52 #Log files created per host to store the previous ip for the comparison. ~/scripts/python$ ls dns-to-ip-firewall-rules.py google.com mangolassi.it theverge.com # Re running the script to compare with logged ip ~/scripts/python$ python dns-to-ip-firewall-rules.py Same ip address nothing to do mangolassi.it - 104.25.47.32 Same ip address nothing to do google.com - 172.217.1.238 Adding 151.101.193.52 to firewall theverge.com - 151.101.193.52 -
I am not a scripter, nor do I play one on TV, but you can get your public IP using this:
curl ifconfig.co
