5 ms·

I just set up pihole recently and it blows my mind how almost 15% of requests are trackers/garbage. I highly recommend setting one up and donating to them if po

I just set up pihole recently and it blows my mind how almost 15% of requests are trackers/garbage. I highly recommend setting one up and donating to them if possible. You can always use balena if you're not tech savvy enough [1]. The easiest solution is to use AdGuards DNS that has most of these blocked for you [2]. [1] https://www.balena.io/blog/deploy-network-wide-ad-blocking-with-pi-hole-and-a-raspberry-pi/ https://www.balena.io/blog/deploy-network-wide-ad-blocking-w... [2] https://adguard.com/en/adguard-dns/overview.html https://adguard.com/en/adguard-dns/overview.html

cgb223 6y ago
I’ve been thinking about doing this as a weekend project. Does the hardware limitations of the pi mess with download or upload speeds at all? Any weird sites that don’t work with it running? How much better is it than something like ublock origin?
- syntaxing 6y ago
  It's just a self hosted DNS so there shouldn't be any speed reduction (goes straight to Google's DNS if it's not blocked). It very different from ublock origin that reads the html directly from the website. Since it's DNS based, it's not perfect hence why they recommend using pihole + ublock origin. The nice thing about it is that it blocks most ads pretty well (even on your phone) without breaking anything if you use the right host list, and blocks all the telemetry network wide (if you change the DNS on the router).
  - cgb223 6y ago
    Do you have to use Google’s DNS? I’m currently trying to phase off my dependence on them. Gotta wonder what kind of ad tracking/targeting they do based on DNS lookups you send them
    - luc79 6y ago
      You can configure any DNS server you like
    - johnpowell 6y ago
      There are multiple DNS options. Or you can just use Unbound and be your own DNS. https://i.imgur.com/3sVDwhQ.png https://i.imgur.com/3sVDwhQ.png https://docs.pi-hole.net/guides/unbound/ https://docs.pi-hole.net/guides/unbound/
- SirYandi 6y ago
  > Does the hardware limitations of the pi mess with download or upload speeds at all? Not at all (at least for me on a 100mbit connection with the Pi 3B+). I've read you could even use a pizero if you don't care about the Web interface being all that snappy. > Any weird sites that don’t work with it running? You set your own blocklists so you can choose how permissive you want to be. I have something like 1MM blacklisted URLs and rarely find sites to be completely broken. It's easy to temporarily pause the blocker, or add a single domain to the whitelist. > How much better is it than something like ublock origin? uBlock origin has the advantage of hiding content directly from the page, whereas pihole tends to leave a greyed out box where the ad used to be. I tend to use both at the same time anyway.
- stekern 6y ago
  Not OP, but I'm using NextDNS -- the managed version of a PiHole. I have uBlock Origin and uMatrix in all my desktop browsers, and I'm seeing around 15% blocked queries on NextDNS. Most of the blocked traffic seem to come from my mobile devices.
dheerajvs 6y ago
How ironic that the balena.io site uses Google Analytics!
uniqueid 6y ago
15% That's actually low! Once you add some custom lists, it'll go higher than that. The lowest ratio of blocked requests I see is 38% on mine. When I use a news reader app on my phone, it goes up to around 55%.
- pixxel 6y ago
  Any custom list suggestions?
  - uniqueid 6y ago
    I don't pay much attention to which is which; if you search for "pihole adlist" you'll find lots of recommendations. FYI: You can add the list URLs in the web interface to "Group Management > Adlists" It took me a while to realize that.
  - donclark 6y ago
    https://github.com/Perflyst/PiHoleBlocklist/blob/master/SmartTV.txt https://github.com/Perflyst/PiHoleBlocklist/blob/master/Smar... https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/hosts/spy.txt https://github.com/crazy-max/WindowsSpyBlocker/blob/master/d... https://github.com/Truvis/CodeDrop/blob/master/PiHoleDNS_script_autoblock_youtube_ads.txt https://github.com/Truvis/CodeDrop/blob/master/PiHoleDNS_scr... https://github.com/kbinani/adblock-youtube-ads/blob/master/blacklist.txt https://github.com/kbinani/adblock-youtube-ads/blob/master/b... https://github.com/mmotti/pihole-regex/blob/master/regex.list https://github.com/mmotti/pihole-regex/blob/master/regex.lis... https://gitlab.com/ookangzheng/dbl-oisd-nl/raw/master/dbl.txt https://gitlab.com/ookangzheng/dbl-oisd-nl/raw/master/dbl.tx... https://raw.githubusercontent.com/CHEF-KOCH/Audio-fingerprint-pages/master/AudioFp.txt https://raw.githubusercontent.com/CHEF-KOCH/Audio-fingerprin... https://raw.githubusercontent.com/DandelionSprout/adfilt/master/BrowseWebsitesWithoutLoggingIn.txt https://raw.githubusercontent.com/DandelionSprout/adfilt/mas... https://raw.githubusercontent.com/LanikSJ/ubo-filters/master/filters/videoadex-domains.txt https://raw.githubusercontent.com/LanikSJ/ubo-filters/master... https://raw.githubusercontent.com/hectorm/hmirror/master/data/adaway.org/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... https://raw.githubusercontent.com/hectorm/hmirror/master/data/adguard-simplified/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... https://raw.githubusercontent.com/hectorm/hmirror/master/data/someonewhocares.org/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... https://raw.githubusercontent.com/hectorm/hmirror/master/data/stevenblack/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... https://raw.githubusercontent.com/hectorm/hmirror/master/data/winhelp2002.mvps.org/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... (edited = formatting)
pmoriarty 6y ago
Just put Steven Black's host list[1] in to /etc/hosts Not sure what, apart from extra cpu cycles, pihole adds over this. [1] - https://github.com/StevenBlack/hosts https://github.com/StevenBlack/hosts
- Dahoon 6y ago
  Pihole covers the whole network. A host file doesn't and is circumvented easily. I have all DNS traffic blocked at the router, except coming from pihole.
- rhamzeh 6y ago
  I used to do that, but then all of those blocked domains start appearing in the ssh auto-completion alongside those configured in ssh config, which gets annoying. I prefer dnscrypt-proxy over PiHole if you don't want a UI. NOTE: A benefit of PiHole/dnscrypt proxy on a local server like the raspberry pi is that you can use it across your devices instead of just on your laptop.
- devinegan 6y ago
  Big advantage for me is network wide blocking on all devices with one central location to manage lists.

cgb223 6y ago

I’ve been thinking about doing this as a weekend project. Does the hardware limitations of the pi mess with download or upload speeds at all? Any weird sites that don’t work with it running? How much better is it than something like ublock origin?

syntaxing 6y ago
It's just a self hosted DNS so there shouldn't be any speed reduction (goes straight to Google's DNS if it's not blocked). It very different from ublock origin that reads the html directly from the website. Since it's DNS based, it's not perfect hence why they recommend using pihole + ublock origin. The nice thing about it is that it blocks most ads pretty well (even on your phone) without breaking anything if you use the right host list, and blocks all the telemetry network wide (if you change the DNS on the router).
- cgb223 6y ago
  Do you have to use Google’s DNS? I’m currently trying to phase off my dependence on them. Gotta wonder what kind of ad tracking/targeting they do based on DNS lookups you send them
  - luc79 6y ago
    You can configure any DNS server you like
  - johnpowell 6y ago
    There are multiple DNS options. Or you can just use Unbound and be your own DNS. https://i.imgur.com/3sVDwhQ.png https://i.imgur.com/3sVDwhQ.png https://docs.pi-hole.net/guides/unbound/ https://docs.pi-hole.net/guides/unbound/
SirYandi 6y ago
> Does the hardware limitations of the pi mess with download or upload speeds at all? Not at all (at least for me on a 100mbit connection with the Pi 3B+). I've read you could even use a pizero if you don't care about the Web interface being all that snappy. > Any weird sites that don’t work with it running? You set your own blocklists so you can choose how permissive you want to be. I have something like 1MM blacklisted URLs and rarely find sites to be completely broken. It's easy to temporarily pause the blocker, or add a single domain to the whitelist. > How much better is it than something like ublock origin? uBlock origin has the advantage of hiding content directly from the page, whereas pihole tends to leave a greyed out box where the ad used to be. I tend to use both at the same time anyway.
stekern 6y ago
Not OP, but I'm using NextDNS -- the managed version of a PiHole. I have uBlock Origin and uMatrix in all my desktop browsers, and I'm seeing around 15% blocked queries on NextDNS. Most of the blocked traffic seem to come from my mobile devices.

dheerajvs 6y ago

How ironic that the balena.io site uses Google Analytics!

uniqueid 6y ago

15% That's actually low! Once you add some custom lists, it'll go higher than that. The lowest ratio of blocked requests I see is 38% on mine. When I use a news reader app on my phone, it goes up to around 55%.

pixxel 6y ago
Any custom list suggestions?
- uniqueid 6y ago
  I don't pay much attention to which is which; if you search for "pihole adlist" you'll find lots of recommendations. FYI: You can add the list URLs in the web interface to "Group Management > Adlists" It took me a while to realize that.
- donclark 6y ago
  https://github.com/Perflyst/PiHoleBlocklist/blob/master/SmartTV.txt https://github.com/Perflyst/PiHoleBlocklist/blob/master/Smar... https://github.com/crazy-max/WindowsSpyBlocker/blob/master/data/hosts/spy.txt https://github.com/crazy-max/WindowsSpyBlocker/blob/master/d... https://github.com/Truvis/CodeDrop/blob/master/PiHoleDNS_script_autoblock_youtube_ads.txt https://github.com/Truvis/CodeDrop/blob/master/PiHoleDNS_scr... https://github.com/kbinani/adblock-youtube-ads/blob/master/blacklist.txt https://github.com/kbinani/adblock-youtube-ads/blob/master/b... https://github.com/mmotti/pihole-regex/blob/master/regex.list https://github.com/mmotti/pihole-regex/blob/master/regex.lis... https://gitlab.com/ookangzheng/dbl-oisd-nl/raw/master/dbl.txt https://gitlab.com/ookangzheng/dbl-oisd-nl/raw/master/dbl.tx... https://raw.githubusercontent.com/CHEF-KOCH/Audio-fingerprint-pages/master/AudioFp.txt https://raw.githubusercontent.com/CHEF-KOCH/Audio-fingerprin... https://raw.githubusercontent.com/DandelionSprout/adfilt/master/BrowseWebsitesWithoutLoggingIn.txt https://raw.githubusercontent.com/DandelionSprout/adfilt/mas... https://raw.githubusercontent.com/LanikSJ/ubo-filters/master/filters/videoadex-domains.txt https://raw.githubusercontent.com/LanikSJ/ubo-filters/master... https://raw.githubusercontent.com/hectorm/hmirror/master/data/adaway.org/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... https://raw.githubusercontent.com/hectorm/hmirror/master/data/adguard-simplified/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... https://raw.githubusercontent.com/hectorm/hmirror/master/data/someonewhocares.org/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... https://raw.githubusercontent.com/hectorm/hmirror/master/data/stevenblack/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... https://raw.githubusercontent.com/hectorm/hmirror/master/data/winhelp2002.mvps.org/list.txt https://raw.githubusercontent.com/hectorm/hmirror/master/dat... (edited = formatting)

pmoriarty 6y ago

Just put Steven Black's host list[1] in to /etc/hosts Not sure what, apart from extra cpu cycles, pihole adds over this. [1] - https://github.com/StevenBlack/hosts https://github.com/StevenBlack/hosts

Dahoon 6y ago
Pihole covers the whole network. A host file doesn't and is circumvented easily. I have all DNS traffic blocked at the router, except coming from pihole.
rhamzeh 6y ago
I used to do that, but then all of those blocked domains start appearing in the ssh auto-completion alongside those configured in ssh config, which gets annoying. I prefer dnscrypt-proxy over PiHole if you don't want a UI. NOTE: A benefit of PiHole/dnscrypt proxy on a local server like the raspberry pi is that you can use it across your devices instead of just on your laptop.
devinegan 6y ago
Big advantage for me is network wide blocking on all devices with one central location to manage lists.