Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • Long-time AdAway user here (via root and a hosts file). I couldn't live without it. Simple and effective.
    by epihelix
  • Just use Rethink app https://github.com/celzero/rethink-app
    by jurakovic
  • I want to use something like this, but I don't think I can when also using VPN by Google on an unrooted phone.
    by xnx
  • Whenever I'm out and about I connect to my home system via wireguard VPN, and all DNS traffic through my home system is funneled into PiHole. I also have a healthy collection of DNS block lists setup on the PiHole (which I'm currently setting up a site to explain/share).

    I also have a VPS setup in a similar fashion in case my home connection fails for one of many reasons.

    I try to only practice safe internet. Raw-dog the internet and you're asking for an infection.

    by BLKNSLVR
  • I point "private DNS" to my VPS with pihole and stunnel, works quite well. Adguard as private DNS is also effective.
    by janwillemb
  • My current approach is AdGuard Home, WireGuard VPN to my home network the majority of the time.

    This was all pretty simple to setup given hardware that supports VPN, DDNS, etc.

    Worth noting too that just blocking hostnames is not enough; Netflix, as an example, uses Google's DNS servers (plain UDP) on some/most clients.

    If the network the client operates on can't prevent DNS to other servers, that's a simple "bypass" vector.

    AFAIK, the best you can get, given sufficient time, patience, and hardware is:

    • something like the above

    • blocking outbound DOT (853), DOQ (784, IIRC) excepting, perhaps, upstreams you trust

    • blocking HTTPS to known DOH endpoints (Cloudflare, Google, etc)

    • DNAT for plain DNS cases like the Netflix example above. (to your DNS server(s))

    Even that there's plenty of hypothetical opportunities for clients to just use another DOH resolver outside of your domain/IP block lists.

    by nyarlathotep_
  • Highly recommend https://nextdns.io, great for all kinds of blocking stuff. Plus Firefox or Edge for uBlock support.
    by somebudyelse
  • I can't recommend AdGuard enough. It works across devices, and just does all the DNS level blocking everywhere. I've been able to install it on my parents' devices, my siblings' devices, and more places. They have apps for just about any device. On top of that, you can install user scripts and use them on your mobile phones even if your browser doesn't support them (does require a CA cert being trusted).

    My biggest issue is I can't use it while I'm connected to Tailscale, but my plan is to install AdGuard Home on my homelab and have that take over instead. It does remove many of the functions, but it's better than the alternative

    by figmert

Explore Birbla archives