Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

isn't PiHole some kind of external firewall? that works 90% of the average-joe known botnets against a desktop PC, but it's not helpful for laptops / unknown-control endpoints. (or endpoints that are really good at hiding)


No, it’s a DNS server with blacklisting features. It can’t block traffic, it can only prevent some software from looking up addresses.


You can use PiHole or one of the many equivalents on a laptop or other location shifting device in a few ways:

1. Run it locally and have it configured to use a public name server as its source (if you run Windows/other there are not doubt native options that'll work this way too). Even if the network you connect to redirects requests to public DNS resolvers you'll still be going through your local filter. Though you'll need to set your machine to ignore DNS config via DHCP, and you'll have to point it at the local resolvers if the network simply blocks public DNS servers.

2. Run it in a VM or container, this would mean you can run PiHole specifically even if you are running Windows, and configure as above. Memory requirements are pretty low so unless you are using very low spec device it should fit.

3. If you have a hosted server (you can get a VPS big enough for PiHole for a few $/year) or a publicly addressable address at home, you can run a VPN and access it that way (assuming the network you are on does not block your VPN of choice of course). You don't have to run a VPN, but I'd not recommend running a publicly addressable DNS server. This will even work on phones depending on the OS there and the chosen VPN.

Of course these are not viable options for a lesser techie user.


PiHole is a network wide ad blocker that works at the DNS level. Basically you route all of your network's DNS requests through PiHole and it blocks any domains that are known ad/malware domains.


Why would you not just modify your hosts file on your machine? Do you really need a raspberry pi for this?


Sometimes you don't have access to the hosts file, like on an unrooted phone or a smart TV.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: