4 ms·

Currently I'm using NextDNS [0] and happy with its ultralow server. Fast. Block ads. Privacy. Even support the Anonymized ESC. Sometimes it still chooses the

Currently I'm using NextDNS [0] and happy with its ultralow server. Fast. Block ads. Privacy. Even support the Anonymized ESC. Sometimes it still chooses the wrong ultralow server, but in overall it's good and fit my case. [0] https://nextdns.io/ https://nextdns.io/

leokennis 4y ago
Love it too. You set it up and it just works. Basically once a year PayPal notifies me I paid them $20, and in exchange I don’t see any ad, ever, anywhere.
- sigg3 4y ago
  That's awesome! What about yt ads? I'm using a pihole but I can't seem to cover the google ad servers in the region (northern Europe).
  - JackGreyhat 4y ago
    If im not mistaken, yt serves ads from its first party domain, making it hard to block from a dns perspective. Blockers such as uBlock do it by blocking elements or code, not dns lookups.
    - sigg3 4y ago
      Cool, that makes sense. I have quite a few false positives with Google Ads.
  - leokennis 4y ago
    Like the other person said, these are basically unblockable by DNS and if you block them by other means it causes a lot of “collateral damage”. So my statement was not entirely correct :-)
6ak74rfy 4y ago
I was a NextDNS user until recently. I now use the following setup: - Pi-hole on a Raspberry Pi at home. It uses Cloudflare as its upstream DNS resolver and provides ad blocking for all devices connected to my home network. - RPi also runs Tailscale and I set pi-hole as the DNS resolver for my tailnet. All mobile devices are always connected to Tailscale, so they too indirectly use pi-hole.
Handytinge 4y ago
I find it a little confusing. Looking at their site, it says "all devices, all networks". Do you need to set up some sort of firewall rule internally to capture UDP 53? It talks about controlling usage of apps etc on kids phones, but a savvy kid will set up DNS over HTTP with a mobileconfig profile (or the Android equivilant), the same way we all found ways to bypass filters as kids. It seems to me like a remote pi-hole with a curated ACL list and the same anount of setup. Am I being too cynical?

leokennis 4y ago

Love it too. You set it up and it just works. Basically once a year PayPal notifies me I paid them $20, and in exchange I don’t see any ad, ever, anywhere.

sigg3 4y ago
That's awesome! What about yt ads? I'm using a pihole but I can't seem to cover the google ad servers in the region (northern Europe).
- JackGreyhat 4y ago
  If im not mistaken, yt serves ads from its first party domain, making it hard to block from a dns perspective. Blockers such as uBlock do it by blocking elements or code, not dns lookups.
  - sigg3 4y ago
    Cool, that makes sense. I have quite a few false positives with Google Ads.
- leokennis 4y ago
  Like the other person said, these are basically unblockable by DNS and if you block them by other means it causes a lot of “collateral damage”. So my statement was not entirely correct :-)

6ak74rfy 4y ago

I was a NextDNS user until recently. I now use the following setup: - Pi-hole on a Raspberry Pi at home. It uses Cloudflare as its upstream DNS resolver and provides ad blocking for all devices connected to my home network. - RPi also runs Tailscale and I set pi-hole as the DNS resolver for my tailnet. All mobile devices are always connected to Tailscale, so they too indirectly use pi-hole.

Handytinge 4y ago

I find it a little confusing. Looking at their site, it says "all devices, all networks". Do you need to set up some sort of firewall rule internally to capture UDP 53? It talks about controlling usage of apps etc on kids phones, but a savvy kid will set up DNS over HTTP with a mobileconfig profile (or the Android equivilant), the same way we all found ways to bypass filters as kids. It seems to me like a remote pi-hole with a curated ACL list and the same anount of setup. Am I being too cynical?