DNS Question

[Apex]

pfsense/opnsense with the pfblocker or what ever opnsense block app is (does what piehole does) this is how I have it set at home with my VM Modem (modem mode)

[ik9000]

anyone online? trying to get pihole working but something corrupted the thing so having to start from scratch. Does it matter which version of raspbian i install? Lite vs desktop vs desktop and software? SFAIK pihole just needs lite, not sure about UFW, but is it possible to still use pi for other things if it's running pihole (or is that not a good idea?)

[Rob_B]

I just used the adafruit link as above, afraid I'm not much use unless you go the same route I did

You could get it working and then experiment with a spare sd card later to see what else you can run on it https://discourse.pi-hole.net/t/can-...e-pi-hole/8684

[ik9000]

thanks that's really useful. Now I just need to find a list of what software the full fat version ships with vs the desktop (no software) option. I have a feeling it's the middle option I'm after but the official site is not very clear about what the differences are.

[ik9000]

looks like the SD card is toast. It's gone full write-protect and nothing is bringing it back. FFS it was supposed to be a quick half hour job...

[spacein_vader]

Lite is fine unless you need the GUI. My Pi3 version is running the following on top of Pi-hole:

Unbound (to act as a DNS server)
UFW (firewall for the pi only)
Wireguard (VPN)

Wireguard means that when I'm out my phone accesses the VPN thus giving me continued ad blocking wherever I am. This is fast enough while I'm on mobile data but remember if you're using anything prior to a Pi4 the ethernet connection is connected via USB so can be a bottleneck. Still plenty fast enough for DNS queries but a bit slow if you're using it as the entire networks firewall for example.

[ik9000]

Lite is fine unless you need the GUI. My Pi3 version is running the following on top of Pi-hole:

Unbound (to act as a DNS server)
UFW (firewall for the pi only)
Wireguard (VPN)

Wireguard means that when I'm out my phone accesses the VPN thus giving me continued ad blocking wherever I am. This is fast enough while I'm on mobile data but remember if you're using anything prior to a Pi4 the ethernet connection is connected via USB so can be a bottleneck. Still plenty fast enough for DNS queries but a bit slow if you're using it as the entire networks firewall for example.

I have the 3b+ so yeah, does seem like limited by usb. I'll give it a whirl and see what happens. like you UFW is more intended to protect the pi only rather than be the network firewall. The router does a lot of that, though I might see if I can customise it a bit more as I think I could probably close a few more ports than it is doing currently .