5 ms·

Do yourself a favour and install AdGuardHome/PiHole in your LAN so that you don't have to connect to a VPN each time, that way DNS is going to work and return a

Do yourself a favour and install AdGuardHome/PiHole in your LAN so that you don't have to connect to a VPN each time, that way DNS is going to work and return a valid response back to every single device that you own in the network.

zinekeller 4y ago
No dice if you're a Vodafone customer, they run DPI so that they block specific IPs (or even specific domains if the IP is shared).
- chongli 4y ago
  This is why we need everyone to use ECH (encrypted client hello) [1] [2] and large CDNs to share IPs. [1] https://en.wikipedia.org/wiki/Server_Name_Indication#Encrypted_Client_Hello https://en.wikipedia.org/wiki/Server_Name_Indication#Encrypt... [2] https://blog.cloudflare.com/handshake-encryption-endgame-an-ech-update/ https://blog.cloudflare.com/handshake-encryption-endgame-an-...
ikekkdcjkfke 4y ago
Isn't there a docker image one can spin up cheaply and not connect to dubious vpn provisers?
- vorpalhex 4y ago
  PiHole is local. You can docker it but you have some.. issues depending on configuration. AdGuard is a pihole like SaaS (that seems pretty good, it's the sort of thing I'd get for my mom).
  - lostlogin 4y ago
    Would this work? I assumed that ISP blocking would still block even when I use a Pihole.
    - mattrighetti 4y ago
      In most of my cases, they're just blocking the DNS.
OJFord 4y ago
Not that I don't recommend something like that for other benefits, but GP could probably just switch their router or devices to use some non-ISP DNS - 1.1.1.1, 9.9.9.9, 8.8.8.8, whatever. It's not blocking specific DNS requests that will fix their immediate problem, it's not blocking them (by not using ISP's resolver).
linker3000 4y ago
I have two Plusnet Hub Ones at home being used as wireless access points. Both are flashed with OpenWrt and one has AdBlock installed; that one is the house's primary DNS server, with OpenDNS upstream. Coupled with uBlock origin on all laptops and PCs, the online world is very ad-free. If I bypass the blocking I am dismayed by how much ad crap there is out there.

zinekeller 4y ago

No dice if you're a Vodafone customer, they run DPI so that they block specific IPs (or even specific domains if the IP is shared).

chongli 4y ago
This is why we need everyone to use ECH (encrypted client hello) [1] [2] and large CDNs to share IPs. [1] https://en.wikipedia.org/wiki/Server_Name_Indication#Encrypted_Client_Hello https://en.wikipedia.org/wiki/Server_Name_Indication#Encrypt... [2] https://blog.cloudflare.com/handshake-encryption-endgame-an-ech-update/ https://blog.cloudflare.com/handshake-encryption-endgame-an-...

ikekkdcjkfke 4y ago

Isn't there a docker image one can spin up cheaply and not connect to dubious vpn provisers?

vorpalhex 4y ago
PiHole is local. You can docker it but you have some.. issues depending on configuration. AdGuard is a pihole like SaaS (that seems pretty good, it's the sort of thing I'd get for my mom).
- lostlogin 4y ago
  Would this work? I assumed that ISP blocking would still block even when I use a Pihole.
  - mattrighetti 4y ago
    In most of my cases, they're just blocking the DNS.

OJFord 4y ago

Not that I don't recommend something like that for other benefits, but GP could probably just switch their router or devices to use some non-ISP DNS - 1.1.1.1, 9.9.9.9, 8.8.8.8, whatever. It's not blocking specific DNS requests that will fix their immediate problem, it's not blocking them (by not using ISP's resolver).

linker3000 4y ago

I have two Plusnet Hub Ones at home being used as wireless access points. Both are flashed with OpenWrt and one has AdBlock installed; that one is the house's primary DNS server, with OpenDNS upstream. Coupled with uBlock origin on all laptops and PCs, the online world is very ad-free. If I bypass the blocking I am dismayed by how much ad crap there is out there.