Ooops comments on Self-Hosting a DNS Sinkhole is really important

Selfhosted

62,993 readers

5,906 active

1,547 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

moderators

[–] Ooops@feddit.org 2 points 9 hours ago (4 children)

I never understood pihole in the first place. It's just a fancy web interface you do never look at if the thing does its job quietly in the background. And unbound alone is perfectly able to use blocklists with one line of configuration (and an onliner script to convert the common lists into the right format).

permalink

fedilink

source

parent

hideshow 4 child comments

[–] awelo@tuiter.rocks 0 points 4 hours ago (1 child)

@Ooops @EncryptKeeper
Those scripts never worked for me....... so pihole-unbound to the end......xddddddd

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Ooops@feddit.org 1 point 4 hours ago*

My "script" to update the blocklist from time to time was literally

curl <blocklist1 link> > templist
curl <blocklist2 link> >> templist
grep '^0\.0\.0\.0' templist | awk '{print "local-zone: \""$2"\" always_refuse"} > blocklist.conf
systemctl restart unbound.service

and an include blocklist.conf at the bottom of unbound.conf (awk to convert it from the "0.0.0.0 " format to "local-zone: always_refuse").

permalink

fedilink

source

parent

[–] EncryptKeeper@lemmy.world 1 point 6 hours ago (1 child)

Because you have to mess with it all the time. It’s easier to get in and get out to make changes with the nice interface. It’d be different if it was set it and forget it but realistically it’s not.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Ooops@feddit.org 1 point 4 hours ago* (last edited 4 hours ago)

It literally is a cron job or systemd timer to load an updated blocklist from time to time and I haven't looked at it for years (well... other an changing a path when I switched from unbound to dnsproxy, because that one is even simpler, doesn't even need a config other than a few parameters at startup and can provide DoH, DoT and/or DoQ access for when I'm not at home)

permalink

fedilink

source

parent