4 ms·
Personally, I went the nuclear route with a Pihole. My devices can’t talk to Google.
by TheBozzCL 2y ago
Personally, I went the nuclear route with a Pihole. My devices can’t talk to Google.
- timbit42 2y agoWhat if they use IPs instead of domain names?
- TheBozzCL 2y agoThen you write router-level firewall rules for the IPs you know are safe to fully block. You can do that selectively so you don’t break other devices. I already do this for local DNS circumvention, which is probably a lot more common than hardcoded IPs.
- timbit42 2y agoRight, but Pi-Hole can't help with this.
- chgs 2y agoPresumably you set your router to intercept all UDP/53 traffic, but remember the whole point of DoH is to prevent that and ensure nothing gets between the advertising surface and the advert source.
- TheBozzCL 2y agoThat’s why I also block all known DoH IPs. It’s a pretty long list, like 130 IPs. I have an allowlist for devices I don’t want to mess with, like my Pihole or guest devices. It’s definitely not perfect, but it does de job for now.
- foobarchu 2y agoThis works until you start living with someone who gets frustrated by things like sponsored results not working (completely fair, because they are often highly relevant).
- wobfan 2y agoI came back home to my parents house this christmas and my parents and my brother complained to my why the Google sponsored links don't work anymore (because I've set their DNS to an adblock DNS). I couldn't believe what they were saying. Their words didn't make sense to me. I ended up in removing all adblock- and privacy-related settings in our router - it felt like a defeat.
- blitzar 2y agoTo be fair to your family, Google have spent billions making the Google sponsored links look like organic search results.
- TheBozzCL 2y agoYou can set blocking per-device. I have strict blocking for my own devices, super-heavy blocking for IoT and other untrusted devices, and a lighter blocking as default. If they complain, I can disable blocking for them, or even set up a guest VLAN.