4 ms·
I keep meaning to set this up but haven't. What's the simplest best setup for my own DNS blocker?
by jsrozner 7d ago
I keep meaning to set this up but haven't. What's the simplest best setup for my own DNS blocker?
- drnick1 7d agoThe easiest off-the-shelf option would be a router running OpenWrt. IIRC, it natively uses dnsmasq, and the relevant blacklists can be obtained from here: https://github.com/hagezi/dns-blocklists https://github.com/hagezi/dns-blocklists My own setup is DIY: a Debian box running Unbound (recursive DNS) with the RPZ blacklists from above. This gets rid of the upstream DNS service such as the ISP's completely, and prevents tampering or censorship.
- kuerbel 7d agoHmmm Pihole I guess. Runs on a pi zero (1 or 2 but 2 is better ofc)
- eevahr 7d agoFor simplicity I highly recommend https://nextdns.io https://nextdns.io. Supports most devices, and probably most, if not all, well known blacklists.
- Melatonic 6d agoAlso recommend NextDNS Forget if they have Hagezi though. Also it would be really nice if there was a way to export and import custom URL lists and rules....
- anygivnthursday 7d agoFor a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).