Block EVERY Online Ad with THIS

[mach]

56 minutes ago, Fish1423 said:

So will this work with only a static IP address or not????

Normal DHCP assigned IP will expire after a period of time. That means the IP of pi hole will change and you'll have to adjust DNS settings on your devices everytime it expires.

Doing a DHCP reservation fixes the IP to the Pi so it'll never expire. 

[jsn.]

Hey guys, saw the video, got a question.

 

I've been running Pi-hole for some time now with no real issues. Couple of weeks ago that changed.

 

Twitch app stopped working when I try to run it:

https://imgur.com/FXq5Qqq

 

When I disable Pi-hole for 10 secs and start Twitch app again, it works normally.

If I whitelist s.amazon-adsystem.com app loads normally.

 

Is there a more specific whitelist input that will let me load the app?

[Carnage98]

Cheapest parts on amazon and place to buy pie

Ethernet adapter - https://www.amazon.com/Caxico-Ethernet-Network-Adapter-Tablet/dp/B011E6GA1Q

Sd card (comes with adapter) - https://www.amazon.com/Sandisk-Ultra-Micro-UHS-I-Adapter/dp/B073K14CVB/ref=gwm_tlc_pi?pf_rd_s=blackjack-personal-1&pf_rd_t=Gateway&pf_rd_i=mobile&pf_rd_m=ATVPDKIKX0DER&pf_rd_r=02FQ89HMESF3K30BKBR0&pf_rd_p=608ee3fa-bc0f-4174-a3ba-e9dd4600db22&pd_rd_i=B073K14CVB

Pie - https://www.adafruit.com/product/2885

The shipping for the pie is 5$ from usps and if you have prime you can get the sd card and ethernet adapter the next day free shipping plus i already have a wall adapter and micro usb cable so i dont need to buy that but if you do heres the cheapest one and its free next day delivery if you have prime https://www.amazon.com/Android-Micro-Charger-Cable-Adapter/dp/B07TH2NCBL/ref=mp_s_a_1_fkmr0_1?keywords=chris+bliss+micro+usb+charger&qid=1567094769&s=gateway&sr=8-1-fkmr0

[Thorhax]

I got a new one for you. I'd like to use Pi-Hole outside my home network but... I'm in a bit of a bind.

I'm trying to setup a vpn on my raspberry pi 3 b+ using DietPi, however my network topography is unusual and cannot be changed.

 

I'm living in Japan and the way I get internet is controlled by the building management company.

basically it's: ISP->building wide router->my apartment single Ethernet jack built right into the wall->My personal router->my devices

 

so I got the ISP IP 238.blah.blah.blah->building router 192.168.blah.blah->my personal router->192.168.1.blah->my devices(including the Pi)

 

My Ip address seems to be static into the building, but from there I can't control anything until it gets to my person router.

 

This seems like an impossible situation 

[mach]

10 hours ago, Thorhax said:

I got a new one for you. I'd like to use Pi-Hole outside my home network but... I'm in a bit of a bind.

I'm trying to setup a vpn on my raspberry pi 3 b+ using DietPi, however my network topography is unusual and cannot be changed.

 

I'm living in Japan and the way I get internet is controlled by the building management company.

basically it's: ISP->building wide router->my apartment single Ethernet jack built right into the wall->My personal router->my devices

 

so I got the ISP IP 238.blah.blah.blah->building router 192.168.blah.blah->my personal router->192.168.1.blah->my devices(including the Pi)

 

My Ip address seems to be static into the building, but from there I can't control anything until it gets to my person router.

 

This seems like an impossible situation 

I'm using double NAT too.

Can you set up a VPN server on your router? I think it'd be way easier...less hoops to jump through

In my situation, I set up openvpn server on my router, forward the required port on the ISP router, also set up DDNS so my router would have a domain name to resolve into outside IP

And I'm able to VPN into my home network this way

Point the DNS on the router to your Pi, done! 

 

[Required]

Hmm why not Squid? Its blocks all Nasty Domains and Url like: lmg.gg and other weird Domain Endings.

I got from Zyxel a new Router with Contend Filter build in so thats another line of defence.

Quote

Cheapest parts on amazon

Hmm here we talk about blocking Spammer and you post the worst of it?

[Thorhax]

On 8/30/2019 at 9:37 PM, mach said:

I'm using double NAT too.

Can you set up a VPN server on your router? I think it'd be way easier...less hoops to jump through

In my situation, I set up openvpn server on my router, forward the required port on the ISP router, also set up DDNS so my router would have a domain name to resolve into outside IP

And I'm able to VPN into my home network this way

Point the DNS on the router to your Pi, done! 

 

DDNS was no problem to get setup, but setting up open vpn on the router itself was another issue.

I'm using a TP-Link Archer C5 v2. with the stock firmware version 3.17.1

unfortunately this router doesn't support DDWRT or else I'd put that on it.

Setting up openvpn on the raspberry pi3 was no problem, but ummm I'm kind of at a loss where I should go from here.

 

Any advice is much appreciated, this is a really good learning experience for me.

[Arak Zantara]

On 9/2/2019 at 8:28 PM, Thorhax said:

DDNS was no problem to get setup, but setting up open vpn on the router itself was another issue.

I'm using a TP-Link Archer C5 v2. with the stock firmware version 3.17.1

unfortunately this router doesn't support DDWRT or else I'd put that on it.

Setting up openvpn on the raspberry pi3 was no problem, but ummm I'm kind of at a loss where I should go from here.

 

Any advice is much appreciated, this is a really good learning experience for me.

Hey little brother , why not rock the OpenWRT?  Way superior to that 3.17.1 stock

I run a Nighthawk R7000 and R8000 both with Kong builds so I wont be much help other then to share the link 
https://openwrt.org/toh/hwdata/tp-link/tp-link_archer_c5_ac1200_v2.0

But hey 6 of 1 half a dozen of another .... right? Good Luck!!!

Arak Zantara

[Thorhax]

On 9/5/2019 at 8:26 AM, Arak Zantara said:

Hey little brother , why not rock the OpenWRT?  Way superior to that 3.17.1 stock

I run a Nighthawk R7000 and R8000 both with Kong builds so I wont be much help other then to share the link 
https://openwrt.org/toh/hwdata/tp-link/tp-link_archer_c5_ac1200_v2.0

But hey 6 of 1 half a dozen of another .... right? Good Luck!!!

Arak Zantara

DDWRT on v2 is only for the American version of the router, unfortunately mine is from Canada

[Arak Zantara]

7 hours ago, Thorhax said:

DDWRT on v2 is only for the American version of the router, unfortunately mine is from Canada

Dang Thor , You bought the wrong router and in the wrong country

 

Seriously, I gave you a link to OPEN WRT not DDWRT... https://openwrt.org/toh/hwdata/tp-link/tp-link_archer_c5_ac1200_v2.0

go all the way down . snatch up that 18.06.4 and see how that treats ya

 

Wahoo !!!     the GIT had some positive info:

 

"bcm53xx: add support for TP-LINK Archer C5 V2
This model also contains few partitions non-discover-able partitions we
need to "protect". Other than that it uses non-deprecated serial entry
in DTS that doesn't work with LEDE so we need to workaround it as well."

BAM !! how do you like me now? You should toss your boy  Rafał Miłecki <rafal@milecki.pl> a BIG Domo Arigato hes been killing it over there and hes punching up those kernels as well

Besides worse case scenario, Ya'll jump on your moose  and come on down here to Houston, I am literally looking at a TP-LInk ac1750 gathering dust. It is sitting next to a Linksys Wrt54G (The namesake starter baby) (You can't have that one
Anyway, We will swap one out with yours , grill us up a couple of medium rare T-bone steaks  and a couple of ice cold beers, and send you home happy....Cause I swear... You Canucks are kinda high strung 

Be Kewl

Arak

Spoiler

 

 

[Thorhax]

On 9/6/2019 at 5:26 PM, Arak Zantara said:

Dang Thor , You bought the wrong router and in the wrong country

 

Seriously, I gave you a link to OPEN WRT not DDWRT... https://openwrt.org/toh/hwdata/tp-link/tp-link_archer_c5_ac1200_v2.0

go all the way down . snatch up that 18.06.4 and see how that treats ya

 

Wahoo !!!     the GIT had some positive info:

 

"bcm53xx: add support for TP-LINK Archer C5 V2
This model also contains few partitions non-discover-able partitions we
need to "protect". Other than that it uses non-deprecated serial entry
in DTS that doesn't work with LEDE so we need to workaround it as well."

BAM !! how do you like me now? You should toss your boy  Rafał Miłecki <rafal@milecki.pl> a BIG Domo Arigato hes been killing it over there and hes punching up those kernels as well

Besides worse case scenario, Ya'll jump on your moose  and come on down here to Houston, I am literally looking at a TP-LInk ac1750 gathering dust. It is sitting next to a Linksys Wrt54G (The namesake starter baby) (You can't have that one
Anyway, We will swap one out with yours , grill us up a couple of medium rare T-bone steaks  and a couple of ice cold beers, and send you home happy....Cause I swear... You Canucks are kinda high strung 

Be Kewl

Arak

  Reveal hidden contents

 

 

Thank you very much, I'll give it a try once I get some time, and post on how it went.

[Video Beagle]

I've been using pi-hole for a while...skimmed the video and the thread, but haven't looked in depth here yet...but I do have 2 things I'm wondering if I can get help with...

 

1) 

Can someone explain these bits?  (I mean the obvious is obvious)...my memory usage seemed low, then I also installed a book server on the pi...and the memory usage went up..., that I decided I didn't need, and got rid of, but the memory usage remained higher..should that be there like that?

 

 

2)  I've whitelisted "s.youtube.com" ... when it was being blocked, I found that my apple tv and iOS devices weren't recording what videos I'd seen in my history and it wouldn't just play "up next" videos.  On a browser like safari, that doesn't have an ad blocker, it gets ads on vids midway..especially on Facebook vids..., and I'd like to find a way to fix that....any ideas?

 

(reading this back it seems like 3:30 am gibberish...which it is...hopefully someone can decipher me  )

[Arak Zantara]

On 9/11/2019 at 10:54 PM, Thorhax said:

Thank you very much, I'll give it a try once I get some time, and post on how it went.

Hmph /// you dont write... you dont call    LMFAO

[Arak Zantara]

On 9/12/2019 at 4:35 AM, Video Beagle said:

I've been using pi-hole for a while...skimmed the video and the thread, but haven't looked in depth here yet...but I do have 2 things I'm wondering if I can get help with...

 

1) 

Can someone explain these bits?  (I mean the obvious is obvious)...my memory usage seemed low, then I also installed a book server on the pi...and the memory usage went up..., that I decided I didn't need, and got rid of, but the memory usage remained higher..should that be there like that?

 

 

2)  I've whitelisted "s.youtube.com" ... when it was being blocked, I found that my apple tv and iOS devices weren't recording what videos I'd seen in my history and it wouldn't just play "up next" videos.  On a browser like safari, that doesn't have an ad blocker, it gets ads on vids midway..especially on Facebook vids..., and I'd like to find a way to fix that....any ideas?

 

(reading this back it seems like 3:30 am gibberish...which it is...hopefully someone can decipher me  )

I wish I could help you . but at my size and with these mutations called thumbs I have to stick with the full tower. anything smaller would just be diminishing returns 

Peace Arak

[WihGlah]

Just setup my Raspberry Pi with this. Works a treat.

 

Guess I should order a water bottle now... 

[hesaw]

does any one knows if this will work on a Raspberry pi 3 b+? I guess the pi zero is being used to reduce the costs, right?

[AngryBeaver]

On 8/28/2019 at 2:23 PM, myrmidon111 said:

How much will this slow down internet speeds? I have gigabit internet so that's pretty important to me. 

This isn't going to slow down your connection speed. All that passes through the pihole is dns information which is only a few bytes of data.

 

All this does is intercept dns requests before they leave your network so it can block bad stuff. So once the request is allowed you connect to that address directly so there is no speed penalty.

[AngryBeaver]

I am surprised they didn't cover dnssec installs using DoH or DoT. 

[Kisai]

30 minutes ago, AngryBeaver said:

This isn't going to slow down your connection speed. All that passes through the pihole is dns information which is only a few bytes of data.

 

All this does is intercept dns requests before they leave your network so it can block bad stuff. So once the request is allowed you connect to that address directly so there is no speed penalty.

Half true. The idea is that the pihole intercepts and caches the DNS requests. However if you run something that uses CDN for geolocation, it may stomp on that (as that's what happened with torrents rDNS), so at worse the initial DNS requests take longer, but it's not impacting the bandwidth, these aren't DNS requests you don't normally make.

 

Now, with that said, the Pi's are super cheap, and do not have the performance to deal with high volume DNS requests, so yeah Pihole might work, but it probably will fall over quickly if you have a lot of devices being used simultaneously, and thus if it crashes, you end up with no DNS service.

 

[wllmjsnnd]

On 8/29/2019 at 3:23 AM, myrmidon111 said:

How much will this slow down internet speeds? I have gigabit internet so that's pretty important to me. 

It will bottleneck the speed based on your pihole ethernet speed.. so if gigabit speed is really important to you, you can use Raspberry pi 4 or any other device that can run linux that have gigabit ethernet.

[jakkuh_t]

4 hours ago, wllmjsnnd said:

It will bottleneck the speed based on your pihole ethernet speed.. so if gigabit speed is really important to you, you can use Raspberry pi 4 or any other device that can run linux that have gigabit ethernet.

This is incorrect.

 

The speed of the Pi's ethernet has essentially 0 effect on your actual internet speed as the Pi is ONLY handling the DNS requests (what converts something like google.ca to the IP of the website, like 10.20.0.1) for the content being browsed, not the actual content.

[DreamState]

On 8/28/2019 at 2:35 PM, turgsh01 said:

I have a question... Is there any drawbacks to using this pihole setup? Cuz I have roughly 50+ devices on my network and I imagine ads take up quite a bit of unnecessary bandwidth and I'm sure everyone involved would appreciate a global auto adblock like this, but... what about the drawbacks? For instance, when I use adblock and adblock plus, certain websites such as... pornhub, lol, as prime example refuses to load most videos until I disable both adblocks and allow the ads to flood in. Would this still be an issue or would there be other similar issues, or is this one of those awesome no flaw forever type of solutions once correctly set up?

I feel like the video only tells half the story which is why I ask.

Some sights pick up the use of the adblock & noscript extenions from the browser and responding with notices or blocked content. However there is no way for them to see a dns server behind a firewall blocking add content.  In fact it would put individual citizens at the same level as corporations IT departments that perform the same function with their dns servers to cut down on bandwidth consumption from Ad traffic. 

[turgsh01]

9 hours ago, DreamState said:

Some sights pick up the use of the adblock & noscript extenions from the browser and responding with notices or blocked content. However there is no way for them to see a dns server behind a firewall blocking add content.  In fact it would put individual citizens at the same level as corporations IT departments that perform the same function with their dns servers to cut down on bandwidth consumption from Ad traffic. 

Interesting, thanks

[WihGlah]

Had my Pihole running for about 4 weeks now, apparently nearly half my DNS queries are adverts...

 

 

Initial impressions are that other traffic is just a little bit snappier.

 

 

visited the LTT store as thanks.

[corehop]

So this is broken for Youtube ads now, right? Everything I'm seeing is that Youtube now serves the ads from the same server as the content, which makes a DNS only solution outdated.