4 ms·
How does Chrome do that, I thought pihole worked through DNS?
by ralphc 4y ago
How does Chrome do that, I thought pihole worked through DNS?
- comfypotato 4y agoChrome uses its own DNS servers. It's a setting that can be turned off. I'm migrating to Firefox in case it becomes permanent (also just on the principle on not liking this nonsense game about marketing advertising modifications as security improvements). https://discourse.pi-hole.net/t/pi-hole-doesnt-seem-to-work-if-using-google-chrome/55015 https://discourse.pi-hole.net/t/pi-hole-doesnt-seem-to-work-...
- pridkett 4y agoAn increasing number of devices ship with hard coded DNS servers - usually 8.8.8.8 and 8.8.4.4. You need more than PiHole in those situations as you also need to transparently redirect DNS to PiHole/AdGuard Home. But that’s not enough by itself. Things can still use DNS over HTTPS and DNS over TLS. Even Firefox will try this unless configured otherwise. You can add the canary domain for well behaved apps to say don’t use those protocols, but poorly/maliciously configured apps can still ignore that. So then you’re in an arms race with blocking publicly known DNS over HTTPS servers. You can do it, but it’s tiring. But hey, I’ve learned a lot more about iptables and how to manage them on my UDM Pro as a result.
- mrkramer 4y agoThis blog post[0] explains how to bypass hardcoded DNS servers with PiHole. It might help those who don't know how to do it. Didn't test it personally, I still use uBlock Origin. [0] https://labzilla.io/blog/force-dns-pihole https://labzilla.io/blog/force-dns-pihole
- comfypotato 4y agoThis was an informative comment. Thanks. Sounds like I was over-zealous switching from Chrome because of DoH (seeing as even Firefox does it by default). Am I correct that disabling DoH (in Firefox) with a PiHole is a safe way to browse ad free?