ad blocking

[macster2075]

Im also using OpenVPN - so if I want more privacy, then I can use a VPN alongisde use Unbound without OpenDns, that way only ME can see my dns queries?

 

[shabbs]

At some point, something will NEED to see your queries... otherwise how will your request know where to go? Many, including myself, like Unbound as it cuts out the middle man so to speak and you go direct to root servers, minimizing your exposure to a smaller number of hosts. With Pi-hole - you can only have one upstream service - Unbound or some other DNS provider like OpenDNS, Cloudfare etc... So... pick your risk level and balance it vs the benefits/maintenance that each choice brings and then decide what works best for you.

 

[Tech9]

that way only ME can see my dns queries?

You just transfer your “privacy” to the VPN service provider, nothing else.

 

[macster2075]

At some point, something will NEED to see your queries... otherwise how will your request know where to go? Many, including myself, like Unbound as it cuts out the middle man so to speak and you go direct to root servers, minimizing your exposure to a smaller number of hosts. With Pi-hole - you can only have one upstream service - Unbound or some other DNS provider like OpenDNS, Cloudfare etc... So... pick your risk level and balance it vs the benefits/maintenance that each choice brings and then decide what works best for you.

I understand I can run Unbound with an upstream service, but my main question is....since I am already using pihole with OpenDns, what would be the benefit of me using Unbound alongside OpenDns?
I think I may not be explaining my question properly.. I apologize about that.

 

[Tech9]

I believe you don't know well the difference between Unbound and dnsmasq. Unbound can be used as resolver or forwarder. dnsmasq can be used as forwarder only. Both are caching servers, if you want to ask.

Your options with Pi-hole:

a) you want OpenDNS with its free categories - dnsmasq forwarding to OpenDNS servers
b) you want more "privacy" by spreading queries to different root servers - Unbound as resolver + blocklists for categories you want to block

Both have pros and cons.

 

[macster2075]

You're right. I don't understand the difference, hence why I am asking.
So when I want to go to let's say, google.com....

My PC > Pihole > OpenDns > Root DNS service?

What would it be when using Unbound?

 

[Tech9]

My PC > Pi-hole > Unbound (as resolver) > Root servers

 

[macster2075]

ok.. now, if I add OpenDns to the mix?

My PC > Pi-hole > OpenDns > Unbound (as resolver) > Root servers?

 

[Tech9]

You can't do it this way. OpenDNS is remote DNS server, Unbound is your local DNS server.

If you're asking about:

My PC > Pi-hole > Unbound (as forwarder) > OpenDNS > Root servers

I told you already - no point doing it. You just replace dnsmasq with Unbound and it does the same thing as dnsmasq.

 

[cptnoblivious]

ok.. now, if I add OpenDns to the mix?

My PC > Pi-hole > OpenDns > Unbound (as resolver) > Root servers?

Why?

First, you should figure out what you want. "Privacy" isn't an answer by the way, someone always knows. The question with all these setups is "Who do you trust?". Basically, it's a bit of a game of 'hot potato'.

I.E. Unless you're using TOR for everything (which has it's own issues) you either:
1. Trust your ISP
2. Don't trust your ISP

2a. So you don't use them for DNS - but they see all the sites you access anyways​

2b. So you don't use them as an 'endpoint' so you trust the VPN vendor (how much do you know about them?)​

If you find a DNS provider you trust, then you can use DoT to encrypt your DNS queries, but of course, your ISP will see the sites you visit.

Now, if you use a VPN, then you should probably use your VPN providers DNS servers (otherwise you can easily get DNS leaks). In that case, maybe just pick a VPN vendor that also has ad-blocking options.

Good luck!

 

[Morris]

I simply point my DNS to the ADDGuard DNS servers which also blocks known threat sites. It's super simple and you can set up exceptions if necessary on the router.

For those that want privacy, turn off your router. It's not going to happen. Even if you provide your own local DNS, your traffic need to hit the internet where it can be monitored. So you say use a VPN tunnel, it's hits the VPN providers network and there network hits the internet. Bot are places that can and frequently are monitored.

 

[macster2075]

I think this thread took a different turn and it's my fault for not explaining my question properly.
I lack the correct verbiage to explain it well and it's causing confusion.

 

[Tech9]

Lat's start with what do you need Pi-hole for and it will be more clear. If your idea is "privacy" - use the RPi for something else.

 

[SomeWhereOverTheRainBow]

ok.. now, if I add OpenDns to the mix?

My PC > Pi-hole > OpenDns > Unbound (as resolver) > Root servers?

I understand I can run Unbound with an upstream service, but my main question is....since I am already using pihole with OpenDns, what would be the benefit of me using Unbound alongside OpenDns?
I think I may not be explaining my question properly.. I apologize about that.

You can't do it this way. OpenDNS is remote DNS server, Unbound is your local DNS server.

If you're asking about:

My PC > Pi-hole > Unbound (as forwarder) > OpenDNS > Root servers

I told you already - no point doing it. You just replace dnsmasq with Unbound and it does the same thing as dnsmasq.

You're right. I don't understand the difference, hence why I am asking.
So when I want to go to let's say, google.com....

My PC > Pihole > OpenDns > Root DNS service?

What would it be when using Unbound?

 

[Tech9]

Yes, Mr. SWOTRB. Some people read the manual last.

 

[SomeWhereOverTheRainBow]

Yes, Mr. SWOTRB. Some people read the manual last.

Not me, I sure want to know, no, need to know what I am doing to keep up with the top of the top extra performance percent!

 

[macster2075]

I have a few lines in dnsmasq to force SafeSearch on browsers. If I install unbound, will I lose that?

 

[Tech9]

I'm leaving this conversation. I'm sorry.

 

[SomeWhereOverTheRainBow]

I have a few lines in dnsmasq to force SafeSearch on browsers. If I install unbound, will I lose that?

Not if you are referencing my amazing scripts , then you should be fine.

 

[shabbs]

I think this thread took a different turn and it's my fault for not explaining my question properly.
I lack the correct verbiage to explain it well and it's causing confusion.

Your original comment was about using Unbound for more privacy, and then the ask was: "What is the difference between setting up Unbound and OpenDns as the upstream compared to the way I have it now which is running pihole with OpenDns as upstream, but unbound is not installed?"

For Pi-hole - you can use Unbound OR OpenDNS as your upstream provider - but not both in a chain. Using both, even if you could, would just be additional steps for no reason and eliminate the benefit that Unbound brings.

Unbound offers a level of privacy in that you are only exposing your queries to a small set of root servers - not a 3rd party DNS provider etc.... or other VPN provider. Your ISP will still see the IPs that you are hitting no matter what you do as your traffic runs over their lines.

What are you trying to get out of using Unbound?