4 ms·
I run Pi-Hole on my network as well; it's wonderful. I'm terrified that it will stop working soon though, as companies start to use their own DNS servers, which
by pkulak 6y ago
I run Pi-Hole on my network as well; it's wonderful. I'm terrified that it will stop working soon though, as companies start to use their own DNS servers, which I've heard is happening.
- JKCalhoun 6y agoInteresting. I would think though that the move to their own DNS servers could extend to their own ads as well — that is, cutting out the middle man that is Google/etc. I'm all for news sites, for example, hoisting ads if I knew they were getting the money from those ads, knew the ads were actually coming from their site.
- pkulak 6y agoSorry, I didn't mean their _own_ servers, I just meant hard-coding 8.8.8.8 into the DNS settings, for example. I wonder if you could hijack those requests at your router and send them back to your Pi-Hole? But then they just switch to DNS over TLS...
- varenc 6y agoI just have my network block outgoing DNS queries that aren’t from the gateway. But you’re so right that DoH is going to throw a wrench in this.
- deleted 6y ago[deleted]
- letitbeirie 6y agoIf an ad can use DoH to sidestep a firewall, so can an employee. If Google and Facebook were cunning (and nefarious, but that much is presumed), they would be aggressively developing a product that solves this problem for corporate networks, but at an enormous cost. Otherwise, when corporate networks solve this (and they will), home users who hate ads will just follow whatever pattern they settle on.
- varenc 6y agoEncrypted DNS is going to upset a lot of corporate network management/monitoring... But the switch to HTTPS for everything caused similar frustration for IT admins awhile ago. In the corporate world, I think the future is managing your network by managing every single device on your network. Only let authorized/corp devices in and all those devices must be enrolled in an MDM solution that enforces all sorts of policy and includes monitoring traffic/DNS queries. Of course that's a lot more work than just monitoring things at the network level.
- rodgerd 6y agoThis is pretty much why Google are a huge proponent of DoH.
- warent 6y agoI'm not sure I understand how this is related to pi-hole. Your computer sends the raw domain name to pi-hole (e.g. ads.google.com), and pi-hole returns 0.0.0.0 if it's on the block list. There's nothing Google or anyone can do to make pi-hole stop working.
- leesalminen 6y agoIoT devices are starting to use hardcoded DNS servers instead of using the one provided by DHCP, which negates the benefits of Pi-Hole on those devices. For now, I've configured my router to force all UDP port 53 traffic to my Pi-Hole which overrides what I mentioned above. But, in the future we may start to see IoT Devices hard-code DoH servers which will be harder to force over to the Pi-Hole.
- deleted 6y ago[deleted]
- pkulak 6y ago> I've configured my router to force all UDP port 53 traffic to my Pi-Hole Oh wow, how do you do that?