5 ms·

I'm gonna go searching for it but, in the meantime, anyone know the process for submitting a hostname to be added to any of the lists used by PiHole, et al.? T

I'm gonna go searching for it but, in the meantime, anyone know the process for submitting a hostname to be added to any of the lists used by PiHole, et al.? The hostname that Ubiquiti is using -- trace.svc.ui.com -- seems like exactly the thing that should be blocked, IMO. --- FWIW, if you're using PiHole and want to block these access points from "phoning home", you can simply do the following: $ echo server=/trace.svc.ui.com/ | sudo tee /etc/dnsmasq.d/ubiquiti_access_point_phone_home.conf $ sudo systemctl restart pihole-FTL.service This will cause dnsmasq, the underlying resolver, to return NXDOMAIN for any such queries. --- EDIT: Apparently the "pihole" utility has functionality built-in to blacklist domains (via /etc/pihole/blacklist.txt). Instead of the above, you can simply use: $ pihole -b trace.svc.ui.com This will result in the IP address "0.0.0.0" being returned (with a TTL of two seconds) for any manually blacklisted hostnames (the same way that PiHole normally responds to queries for blocked domains) although, personally, I still prefer NXDOMAIN.

specto 7y ago
adding this to my edgerouter heh.
- MertsA 7y ago
  Don't mess with the generated config file on the EdgeRouter, it'll just get replaced next time you reconfigure it or a firmware update is applied. Just add the following to the config. set service dns forwarding options server=/trace.svc.ui.com/ Or if you have dns forwarding using the system resolver you could also just add it to the hosts file via something similar to this. set system static-host-mapping host-name trace.svc.ui.com inet 0.0.0.0
  - specto 7y ago
    Thanks, I have a lot of these rules already :)
kpU8efre7r 7y ago
Use blacklist. I already have to blacklist some Belkin URLs that are constantly pinged.
- jlgaddis 7y ago
  Using the blacklist is simpler but it uses a two second TTL (bit looks like that can be changed in the 01-pihole.conf file, though). I'd rather it return NXDOMAIN, though. That's what I had to do to block DNS-over-HTTPS for Firefox.
  - gingerlime 7y ago
    FWIW, I just tested my Adguard Home by adding trace.svc.ui.com to the filter, and I think it does return NXDOMAIN by default.

specto 7y ago

adding this to my edgerouter heh.

MertsA 7y ago
Don't mess with the generated config file on the EdgeRouter, it'll just get replaced next time you reconfigure it or a firmware update is applied. Just add the following to the config. set service dns forwarding options server=/trace.svc.ui.com/ Or if you have dns forwarding using the system resolver you could also just add it to the hosts file via something similar to this. set system static-host-mapping host-name trace.svc.ui.com inet 0.0.0.0
- specto 7y ago
  Thanks, I have a lot of these rules already :)

kpU8efre7r 7y ago

Use blacklist. I already have to blacklist some Belkin URLs that are constantly pinged.

jlgaddis 7y ago
Using the blacklist is simpler but it uses a two second TTL (bit looks like that can be changed in the 01-pihole.conf file, though). I'd rather it return NXDOMAIN, though. That's what I had to do to block DNS-over-HTTPS for Firefox.
- gingerlime 7y ago
  FWIW, I just tested my Adguard Home by adding trace.svc.ui.com to the filter, and I think it does return NXDOMAIN by default.