@JaredBusch said in Pi-hole dumps on Fedora:

@stacksofplates said in Pi-hole dumps on Fedora:

@JaredBusch said in Pi-hole dumps on Fedora:

@stacksofplates said in Pi-hole dumps on Fedora:

Just run it in a container and none of this matters.

Pi-Hole's docker version was not a well done container 3 years ago when I implemented this solution. It was by no means a good idea at the time.

Well I just meant going forward.

That gets into different issues since Fedora went with podman. I haven't done much tinkering with it yet to see how compatible things are.

It's a drop in replacement. It doesn't use the Docker socket so you can't use things like docker-compose, but I don't necessarily see that as a bad thing. Any normal tasks should be the same. There's people who have said they aliased podman to docker and never noticed a difference.

@Dashrender said in DNS Filtering with Ties to Google Groups:

the browser will use the system DNS if that DNS support DNS over HTTPS....

How can the browser know what the DNs mechanism is? DO you mean the browser will try a local DNS over HTTPS first? That I can see.

@JaredBusch said in pi-Hole: Dashboard times out:

@gjacobse said in pi-Hole: Dashboard times out:

@JaredBusch said in pi-Hole: Dashboard times out:

Unless you have the Vultr Firewall in place restriciting access to your home IP or some software firewall running on the instance, you have setup a fucking public DNS server. What else would you expect to happen?

Great - that's an extra $10 a month unless I can run firewalld on the system and be fine.

um wut?

Admittedly - I may have misspoke and that is the DDOS not the firewall. I have to go back and look through.

@scottalanmiller said in pi-Hole: Dashboard times out:

@gjacobse said in pi-Hole: Dashboard times out:

@JaredBusch said in pi-Hole: Dashboard times out:

Unless you have the Vultr Firewall in place restriciting access to your home IP or some software firewall running on the instance, you have setup a fucking public DNS server. What else would you expect to happen?

Great - that's an extra $10 a month unless I can run firewalld on the system and be fine.

$10? Should be $3.50 on Vultr

This instance is indeed $3.50

@scottalanmiller said in piHole: Forwarded queries:

@gjacobse said in piHole: Forwarded queries:

@gjacobse said in piHole: Forwarded queries:

Looking through my pHole - I see that a number of entries (IPaddresses) are shown as forwarded. Is this something that should be allowed (forwarding) or blocked?

Or - is it a reply to the request and completely normal

Completely normal. A forward in DNS is when the local DNS server (the Pi-Hole) doesn't have the "answer" in its table.

I wondered - I went back and read it 'backwards' and from that stand point - I can very much see it as being normal. the request is forwarded on - ... not something coming in that shouldn't.

Thanks

@gjacobse said in pi-hole: Xbox; Ads on Youtube:

@Dashrender said in pi-hole: Xbox; Ads on Youtube:

@gjacobse said in pi-hole: Xbox; Ads on Youtube:

@marcinozga said in pi-hole: Xbox; Ads on Youtube:

Pi-hole won't block youtube ads, at least not the in-video ads. You need youtube premium to get rid of them, no way to block those I'm afraid.

Noted - I don't get ads on the PC(s), likely due to different adblocker there.

and well - dang.

How are they being blocked on the PC... something other than blacklists/DNS not resolve...

My default had been to install adblocker when building a PC,.. so it's likely still running even with the pi-hole running.

Right, but how do most of those work? as far as I know they work by blocking DNS queries

@gjacobse said in pi-Hole: Client and Recursive DNS:

And since i'm running this now, I get a notification on recursive DNS -

Yup, just ignore them.

@scottalanmiller said in pi-hole: Group Management:

@marcinozga said in pi-hole: Group Management:

@stacksofplates said in pi-hole: Group Management:

@stacksofplates said in pi-hole: Group Management:

@marcinozga said in pi-hole: Group Management:

@stacksofplates said in pi-hole: Group Management:

I just use CloudFlare for families. If I need to, I can change DNS on whatever to view something.

That only blocks malware and porn if you choose to. What about ads, marketing crap, tracking, etc.?

I leverage what's in the browser for that stuff.

That might not be 100% the best way to handle it, but I don' thave to manage and pay for a server to do it.

No Raspberry Pi lying around?

Who has an unused computer lying around? lol

I don’t, this old box of mine is hitting its last legs...

https://pi-hole.net/2020/05/10/pi-hole-v5-0-is-here

@scottalanmiller said in Pi-Hole Upstream DNS Providers:

@JaredBusch I suspect that if you put them into Custom that it prioritizes in the order that you select.

If you look in the setupVars.conf file, they are listed like this.
8098cac4-24a9-40ac-b3d2-4a3f0537f066-image.png
07fdc32c-fb20-46b7-9b15-30169dd42ee1-image.png

So you might have to edit the file instead.
But if you click the save button from the web ui, it will reset the ordering of the upstream dns servers.

@scottalanmiller said in Centralized Management for Pi-Hole - balena-pihole:

@NetworkNerd said in Centralized Management for Pi-Hole - balena-pihole:

I was saying I had considered setting up a Pi-hole at each of our extended family's homes. Sorry if that was not clear earlier.

It was, but why? That's buying one piece of hardware per location, and managing one install per location. Why not just all share one?

Agreed- if you must- host it on vultr for this.. for less than a happy meal you can have one running for a month

@dbeato said in Pi-hole vs. Full Web Filter:

@scottalanmiller said in Pi-hole vs. Full Web Filter:

@dbeato said in Pi-hole vs. Full Web Filter:

For me Pi-Hole has been sufficient as I did not have the hardware to run Untangle or Sophos Home, while I can run Pi-hole on 10 GB of Storage and 1 GB of RAM.

I feel like mine is on even less.

Yeah you can easily use it with 512 MB RAM.

I bet 380MB would do okay.

@bnrstnr said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

@DustinB3403 didn't you say the method above would only work for devices on the Pi-Hole's LAN?

The method linked by someone else would, yes. As it's impractical to try to do said linked approach for the open internet.

Again, it's what you would do, but isn't practical because of your scale.

Post 18.

@DustinB3403 said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

But the reported issue is that these request appear to come from your devices. IE they are spoofed or are legitimately coming from your trusted network.

Can you setup ingress filtering for this?

This is the approach proposed by Curtis.

@Curtis said in Pi-hole server involved in a 'DNS Amplification' DDOS Attack:

https://freek.ws/2017/03/18/blocking-dns-amplification-attacks-using-iptables/

I've run Pi-Hole in Docker, now I have it on Raspbian on Rpi 3+, I might deploy it inside Docker Swarm on my Rpi cluster at some point. I'm also trying out alternative, Adguard Home, on Rpi too, although installation is not as straightforward as Pi-Hole.

@travisdh1 said in So I built: Pi-hole:

@BRRABill said in So I built: Pi-hole:

Where is @scottalanmiller to chime in that isn't the purpose of DNS?

🙂

Careful, sounds like he's already infected you!

Yes but I can't yell at people as good as him.

@dustinb3403 said in New pi-hole install has no defualt white list items:

You can add the lists rather quickly as well.

Obviously. But I think I will wait and see.

@jaredbusch said in Pi-Hole web interface not working:

On the other system I created a blank external.conf and it works now.

sudo touch /etc/lighttpd/external.conf

Got it

@jaredbusch said in If You're Not Already, You May Want To Block Roku Log Domains:

Your logic is flawed.

If you let it communicate once, it has no reason to continually retry.

If you block it, it does not know that it cannot do as designed and will continually retry.

Re-read the post.

27k hits (actual hits...not attempts) last week (before it was blocked) and >10k attempts since blocked.