• 1 Post
  • 21 Comments
Joined 6 months ago
cake
Cake day: January 13th, 2024

help-circle






  • I was making a quick check, and yes, the DoH situation is a bit more dicey. From how I see it, the best way to make this work is to, at the firewall level, either block as much as possible any requests that look like DoH (and hope whatever was using that falls back to regular DNS calls) or setup a local DoH server to resolve those queries (although I am not sure if it is possible to fully redirect those). In that sense, pihole can’t really do much against DoH on its own

    EDIT: decided to look a bit further on the router level, and for pfsense at least this is one way to do this recipe for DNS block and redirect


  • Hm… I am not familiar with that device myself, and since I use opnsense for a while I forget most people do not use routers outside of the provided one.

    But in a theoretical sense, this firewall rule should look something like this:

    • origin of traffic is any IP that goes into port 53
    • outgoing traffic has to go to pi hole on port 53



  • Pi hole is an amazing tool and gives a lot of insight on what is being queried and blocked against the block lists. Also, makes completely transparent on the entire network to have nasty things blocked. One thing I will mention to make the setup better: make sure on the firewall level you can have a rule that makes every request for a DNS to go through pi hole. Some devices will use a hard coded DNS instead of respecting the one on the network






  • ZeDoTelhado@lemmy.worldtoMemes@lemmy.mlWorst day
    link
    fedilink
    arrow-up
    4
    ·
    3 months ago

    I do agree with this as well, but wanted to add a little something that might give a different perspective. Let’s say you are extremely gifted at being a computer engineer and you don’t know it. Nowadays probably you start fiddling with computers and eventually find out. Let’s say that you are gifted for this, but instead being born nowadays, you were born in the 1800. There is no way to know you were a gifted computer engineer back then because, well, computers didn’t really exist. The inverse also applies as well. If you are extremely good at lightning up street lamps, nowadays that skill is not relevant, since no one needs to light up street lamps manually anymore.

    I do think these skills have usually some sort of equivalent (even tangentially) and you find out what you can be good at. Is it your optimal skill? I do not think we can effectively know, since everything is not available from both present, past and future, all at once to be exposed to.



  • I was reading about it and I actually like a lot this solution’s principle. It reminds me a lot of puppet which I have seen before (for other kind of tasks) to orchestrate several computers. Big shame it works on windows though, since I have a server with docker on ubuntu server at this point and was not really looking forward to change that. But thanks for the suggestion, is for sure very interesting


  • Nowadays I sort of do this with seafile. Select folders to sync, open the app every other time to resync stuff, carry on with your day. The only thing I wanted to take away if there is a better way to not have a massive hassle to reinstall everything in case something happens (and in case I forget to select a folder to sync also).

    But your suggestion I think is very valid as well. At least for mint have a way to make a more automated installer or similar to get the stuff I use usually. Yet another rabbit hole to go into…