4 ms·
Good that the root cause is being addressed. In the meantime, I'll be reducing the symptoms by routing all my DNS traffic through my pi.hole instance.
by janwillemb 6y ago
Good that the root cause is being addressed. In the meantime, I'll be reducing the symptoms by routing all my DNS traffic through my pi.hole instance.
- rainingcatndogs 6y agoI wouldn't be surprised if these mentioned apps comes with google's dns resolvers baked in, in that case routing through pihole doesn't help here.
- foepys 6y agoAfaik, some apps like Netflix that rely on geo-blocking for their content licensing do it already and it's only a matter of time until they switch to DNS over HTTP so requests cannot be altered at all.
- scoot_718 6y agoThat's just going to break functionality on many networks.
- ugexe 6y agoThere are block lists for DoH servers and other DNS queries can be forwarded to your own resolver.
- smokefreeskies 6y agoI set up a rule on my router to drop any DNS traffic and DoH traffic to well known DNS providers unless it comes from the server running pihole. Otherwise it was proving very hard to find out how to force applications / mobile devices to use my DNS server.
- kazen44 6y agoyou could also just NAT port 52 to your pihole. (translating 8.8.8.8 ofcourse). I don't know if this would work with DoH. (but DoH is terrible anyways)
- hiq 6y agoThat only works as long as you can easily distinguish the DNS traffic from the rest, right? For instance if my VideoApp serves content from videoapp.example.com and I use my own DNS also at videoapp.example.com, served over DoH, I think that's basically the end for host-based content blockers.
- CodeGlitch 6y agoHow are you routing through your pihole when connected only to mobile broadband?
- curiousgal 6y agoVPN
- CodeGlitch 6y agoBut your phone is still connecting out to the internet and therefore using your data allowance.
- BenjiWiebe 6y agoBut instead of loading an ad or sending telemetry, it will merely query DNS and then give up.
- 411111111111111 6y agoBut it won't be able to download the ads, so only the dns query will go over the air. If you're using Android: Blokada from f-droid is another option if you want to skip even that.
- chrisseaton 6y agoI think most people have basically unlimited data these days, and I'm sure nobody is worrying about the cost of a DNS request.
- BlueTemplar 6y agoAren't smartphones starting to penetrate third world countries?
- chrisseaton 6y agoYes. Is that relevant? Their data is often cheaper than ours!
- teekert 6y agodo you force that as a DNS provider, block all other DNS options, including DNS over https? I use AdGuard but there are sooooo many ways around it.