What's new
By:

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

PiHole Info

C

coxhaus

Part of the Furniture
I have never run a PiHole and I wonder how it works. I have used a Microsoft DNS server on my network, so I know how that works.

Can you setup PiHole to perform DNS on a switched network so only DNS traffic flows to your PiHole using a switch?


By any chance is PiHole setup on a different network so you have to do slow routing to and from it for port 80 and DNS?

By chance is all traffic routed to a PiHole?

Can someone give me a run down on how it works. I have no plans to run it but I would like to know.
 
PIHOLE = DNS = 53 not 80

The only traffic hitting it is DNS

Any URL / regex can be added to black/white lists

It can serve as a DHCP server or you can change your DHCP server to specify the IP of pihole for your clients
 
I know DNS is port 53 but there are other options now for DNS, DOH and DOT. I use port 53. And I know web is port 80.

So DHCP also if you want. What about the rest?

DHCP would imply the same network unless you are doing a layer 3 hop.

So PiHole does not block Ads?
 
Last edited:
OK so all switched traffic.

I read where someone was using it to block ads and I was wondering how that would work. I guess they were wrong.
 
I guess the router is doing the DOH and DOT encryption and maybe PIHole forwards to it which forwards on to the net.
 
ColinTaylor said:
It does block ads - that's the entire point of PiHole. Are you sure you're not confusing PiHole with some other product?

Pi-hole – Network-wide Ad Blocking

pi-hole.net pi-hole.net
Click to expand...
Then you have to be doing layer 3 maybe higher not layer 2 if you are blocking web traffic. Layer 2 is switching. Are you only doing DNS blocking?

OK, here is a question, do you use PiHole as your default gateway? Are only as your DNS IP?
 
Last edited:
@coxhaus Why are you interjecting on something you obviously know nothing about here?

PIHOLE / sometimes is used to call a Rasp-PI which is a SBC mini computer which is not the software itself

PIHOLE SW will do DNS / DHCP / block or white list ads / domains

It's like all of the ad blocking SW on the market but on steroids and besides normal entries you can add regex or curated lists that auto update as well.
1655148321713.png

1655148484452.png

1655148495842.png
 
coxhaus said:
Thanks that makes sense I don't need the pictures. It is DNS only. I am good.
Click to expand...
No, it's multi functional.....

DOH / DOT are the browser itself sending DNS through 443. The OS does have an additional setting to use the same but, doesn't override using PIHOLE for DNS. A phone though on the other hand explicitly needs to disable both the browser and phone secure DNS options.
 
I have no plans to run it. I might play with Cisco Umbrella sometime. My problem is I am not sure I want to give up QUAD9.

I use an Intel I9 cpu on my laptop and ads are so fast they don't bother me.

I may have seen some ads that were injected with a little window. I am not sure, but I don't click on those. And since the last Microsoft updates I have not seen them.
 
coxhaus said:
I have no plans to run it. I might play with Cisco Umbrella sometime. My problem is I am not sure I want to give up QUAD9.
Click to expand...

PiHole can support Quad9 without any issues. With ad blocking, it's more about privacy and potential security if an ad server is compromised and starts serving up malware. PiHole isn't the only game in town for router/dns based site blocking (more than just ads) - but for what it is, on a small home or business network, it can be a useful tool.
 
Yes I know DNS is a chain. I am sure you could even forward DNS server to a router and then forward from the router to an internet router. I did that in the past just so I could add some static names in the router for DNS. There was some reason I could not add the names to the local DNS for the router. I was years ago.

I was thinking more if I use Cisco's Umbrella I will have to give up QUAD9.
 
Last edited:
You can input whatever DNS you want to in the custom field and 9999 is one of the default built in options with a check box. If you go into the VAR files you can do it all from CLI.

There's nothing special about any particular DNS option though. In the past there have been issues with most of them getting poisoned and causing issues and just switch to something else until you get the desired response of a page opening as requested.

It uses dnsmasq under the hood

Code: 
Jun 13 16:25:04 dnsmasq[3010]: reply epdg.epc.geo.mnc260.mcc310.pub.3gppnetwork.org is 208.54.159.227
Jun 13 16:25:10 dnsmasq[3010]: reply fls-na.amazon.com is 192.0.0.2
Jun 13 16:25:29 dnsmasq[3010]: reply www.amazon.com is 192.0.0.2
Jun 13 16:26:06 dnsmasq[3010]: reply optimizationguide-pa.googleapis.com is 142.251.32.202
Jun 13 16:26:10 dnsmasq[3010]: reply apps.facebook.com is <CNAME>
Jun 13 16:26:10 dnsmasq[3010]: reply star.facebook.com is <CNAME>
Jun 13 16:26:10 dnsmasq[3010]: reply star.c10r.facebook.com is 31.13.93.19
Jun 13 16:26:17 dnsmasq[3010]: reply clients4.google.com is <CNAME>
Jun 13 16:26:17 dnsmasq[3010]: reply clients.l.google.com is 142.251.35.206
Jun 13 16:26:20 dnsmasq[3010]: reply mail.google.com is 142.251.116.18
Jun 13 16:26:20 dnsmasq[3010]: reply mail.google.com is 142.251.116.19
Jun 13 16:26:20 dnsmasq[3010]: reply mail.google.com is 142.251.116.17
Jun 13 16:26:20 dnsmasq[3010]: reply mail.google.com is 142.251.116.83
Jun 13 16:26:45 dnsmasq[3010]: reply 1.amazon.pool.ntp.org is 96.8.119.236
Jun 13 16:26:45 dnsmasq[3010]: reply 1.amazon.pool.ntp.org is 137.184.81.69
Jun 13 16:26:45 dnsmasq[3010]: reply 1.amazon.pool.ntp.org is 192.241.146.233
Jun 13 16:26:45 dnsmasq[3010]: reply 1.amazon.pool.ntp.org is 12.167.151.1
1655155479297.png
 
I miss Pi-hole GUI. I had one running on Ubuntu Server with Unbound before. Using pfBlockerNG in pfSense now. It deals with both DNS and IP.
 
You must log in or register to reply here.

Similar threads

M
Wireguard DNS issues
Replies
15
Views
937
Martin
M
I
Clients are bypassing the DNS set by the DHCP server set by Merlin
Replies
11
Views
604
bennor
B
P
DNS Director (Global redirection = router, User defined 1 = pihole) not sending anything to user defined 1
2
Replies
20
Views
2K
ColinTaylor
C
N
IPv6 Not Allowing Manual DNS Server
Replies
12
Views
975
ZebMcKayhan
Z
J
Noob DNS questions
Replies
3
Views
615
bennor
B

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 1,268 (members: 19, guests: 1,249)
Back
Top