Pi-Hole: Ad blocking at the network level

[spacein_vader]

It largely depends on how good the firewall in front of it is. If your router or network firewall is fairly robust you could do without, but it won't do any harm.

Ufw would be fairly simple, disallowing everything that doesn't come from the internal network and via port 43.

[MLyons]

Of course, I was getting it backwards. I guess websites pick up Adblocker with a script that detects when the calls aren't made then.

They normally use some JS to see if the element loaded by the ad is there. If the node in the DOM for the advert isn't there then they show the popup

[EtheAv8r]

I am very interested in this and have ordered the Raspberry Pi 3 Model B+ Value Starter Kit recommended by peterb. I am not much of a networking guru, but understand the basics. I have no previous Pi knowledge. My ISP is BT and I have "Superfast 2 Unlimited" and my current router is BT HomeHub 6.

The BT HomeHub 6 does not allow me to change the DNS settings, so I am going to have to change the router to one that will and works with BT FTTC Infinity 2 as the service was previously called. I am researching routers by Netgear, Asus, TP Archer, LinkSys etc, but would value suggestions/recommendations from you guys who know what you are talking about. Normal family internet stuff, I stream TIDAL and Spotify, and iPlayer and I want stable uptime and improved WiFi.

Many thanks......

[peterb]

I personally like the Draytek series - https://www.draytek.com/en/products/...or2862-series/

these give solid performance. You could buy a unit with built in wi-fi or get a base model and a ubiquiti access point - they are rock solid performnce - the AC lite version is ideal for a domestic set up.

[jimborae]

I personally like the Draytek series - https://www.draytek.com/en/products/...or2862-series/

these give solid performance. You could buy a unit with built in wi-fi or get a base model and a ubiquiti access point - they are rock solid performnce - the AC lite version is ideal for a domestic set up.

I would argue that a Draytek recommendation comes with caveat that the UI is old and arcane and not helpful to anyone who is not well versed with networking in general. Not talking Cisco level arcane but certainly not friendly for the home user.

Asus or TP-Link Archer would get my vote, especially in the case of Asus as 3rd Party firmware is available for certain models which is truly excellent (Merlin firmware).

[jimborae]

In other news I'm getting severe grief from SWMBO because and I quote:

"Whenever I click on the top search result and ads it doesn't work. Something about Google Lead Services denied."

Me: "Yes Honey, your unsafe web browsing habits have now been Pi-holed"

SWMBO: "Huh???? Whats unsafe about that?? What are you talking about, you shut your pi hole and stop buggering up the wi-fi!"

Teenage son:"Yeah I can't access some sites either, please turn whatever it is off!"

Me:"That's because some of your porn sites or links on those porn sites are blocked"

Teenage son says nothing, turns red and does a swift exit.

SWMBO: "Just sort it out or you'll be needing porn sites soon!"

So long story short the wife wants me to remove Pi Hole or at least not protect her unsafe browsing and she won't accept that what she's doing is not good.

[peterb]

Find out which sites she wants to visit and whitelist them (and ask your son to show him the sites he wants to visit!)

[spacein_vader]

It sounds like your wife is trying to click on the advertising links that Google puts at the top of its searches for products. This will go through lead services so Google gets a cut for the referral. Often the next link down is an unpaid link to the same site.

[jimborae]

It sounds like your wife is trying to click on the advertising links that Google puts at the top of its searches for products. This will go through lead services so Google gets a cut for the referral. Often the next link down is an unpaid link to the same site.

Yep 8 times out of 10 it's exactly that, however because she's predominantly a Safari user, those unpaid links often aren't the same immediately underneath. And she can't be arsed to keep scrolling

Other times it's referral links embedded in others sites so it's just not practical to keep white listing them every time she comes across a different one as often I'm not there to do it.

She wont change her habits, I'm reluctant to expose our network to crap and malware.....Never the twain shall meet.

May have to put her devices on static IP's and send them to an alternative DNS.

[peterb]

I'm on safari - maybe change the default search engine to duckduckgo?

[EtheAv8r]

Well thanks for the pointers chaps, I have been doing a lot of research, reading and viewing reviews on lots of kit, and have a final shortlist of two routers, both Asus: the RC-AC88U or the RC-AC5300, both of which are good in their own rights and both have Merlin Firmware support.

Pi arrives from Amazon tomorrow. I am now looking for the VDSL Modem.

EDIT: Going with the DrayTek Vigor130 VDSL2 Modem.. all on order with SCAN, arriving Friday.

[EtheAv8r]

Raspberry Pi 3 Model 3+ up and running Pi-Hole and initial testing looking good.

At present only my laptop using it as DNS as I have to change the Router out to enable my own selection of DNS via DHCP for all devices on my network. I went with the Asus RT-AC5300 and the DrayTek Vigor 130 to replace my BT HomeHub 6. Delivered super efficiently by SCAN today.

[matts-uk]

The BT HomeHub 6 does not allow me to change the DNS settings, so I am going to have to change the router to one that will and works with BT FTTC Infinity 2 as the service was previously called.

Sorry, a little late to this one. The pihole is built on top of dnsmasq which includes a perfectly good dhcp server. You could just disable the dhcp server of on HomeHub and use the pihole to serve dhcp with the relevant dns settings.

[EtheAv8r]

Sorry, a little late to this one. The pihole is built on top of dnsmasq which includes a perfectly good dhcp server. You could just disable the dhcp server of on HomeHub and use the pihole to serve dhcp with the relevant dns settings.

OK I did wonder if that was possible, but moot now as new Asus RT-AC5300 and Vigor 130 in and running. Seems stable and the internet speed is slightly faster than the HH6, but WiFi not measurably better. The Asus is of course much more configurable, which is both good and bad (if/when I cock it up playing with settings). I do have the HH6 as a fall back option.

[ik9000]

Find out which sites she wants to visit and whitelist them (and ask your son to show him the sites he wants to visit!)

son
dad

some things are best not shared.

[matts-uk]

OK I did wonder if that was possible, but moot now as new Asus RT-AC5300 and Vigor 130 in and running. Seems stable and the internet speed is slightly faster than the HH6, but WiFi not measurably better. The Asus is of course much more configurable, which is both good and bad (if/when I cock it up playing with settings).

Hmm. My personal view is that fancy WiFi routers are rarely worth the money.

I do have the HH6 as a fall back option.

If you are feeling brave, and are handy with a soldering iron, the HH6 can be reflashed with LEDE/OpenWRT. Underneath the horribly dumbed down UI there is a not too shabby WiFi router trying to get out.