Spawn

Administrator
Verified
Staff member
Homepage: Pi-hole®: A black hole for Internet advertisements
Blog: Pi-hole Web Interface: The Next Generation
Reddit: A subreddit dedicated to Pi-hole® • r/pihole
Discourse: Pi-hole Userspace

  • Block Over 100,000 Ad-serving Domains - Known ad-serving domains are pulled from third party sources and compiled into one list.
  • Block Advertisements On Any Device - Network-level blocking allows any device to block ads, regardless of hardware or OS.
  • Improve Overall Network Performance - Since ads are blocked before they are downloaded, your network will perform better.
  • Reduce Cellular Data Usage - Pair your Pi-hole with a VPN for on-the-go ad-blocking and save on data costs.
  • Monitor Performance And Statistics - The Web interface shows how many ads were blocked, a query log, and more.

Does anyone use this method for their own network? Ease of use? How to setup for inexperienced Linux users? Maintenance and upkeep? Best hardware to use?
 

ozone

Level 3
on youtube there are several guide how setup pihole
it should take around 1 hour or less to setup everything
for hardware it does not matter which raspberry model you use, but I would use model 2 or 3

this is "very basic" guide
1a) get minimum hardware: Raspberry Pi, 5V 2,5A+ power supply, microSD or get kit
1b) get accessories: case, network cable, (heatsink for model 3), ...
2) download OS Download Raspbian for Raspberry Pi and Etcher by resin.io to burn it on microSD card
3) update and set OS, and install pi hole (youtube guides)
4) set static IP for Raspberry Pi, change DNS in your router to that IP (again youtube guides)
5) you can access pihole via your browser (add some filters - e.g. The Big Blocklist Collection, change DNS, ...) (and again youtube guides)
 

Slyguy

Level 42
Verified
I shall refer to @Slyguy for this. He seems to have the most experience with Pi-hole.
Pi-Hole is the single most important, most secure thing anyone can do for their networks. Period. Bar None. It places DNS under your control. It gives you absolutely remarkable control over egress from your network. It protects every device on your network, phones, tablets, desktops, laptops, thermostats, etc. It speeds web page loading by at least 25-50% due to the local DNS resolution caching.

It takes an hour or less to study and setup a Pi-Hole.

Step 1: Buy this (and add an MicroSD card to it) https://www.amazon.com/gp/product/B01D92SSX6
Step 2: Wait for it to arrive.
Step 3: Burn a USB w/ Raspbian. Download Raspbian for Raspberry Pi
Step 4: Plug your Pi-Hole into a monitor or TV with HDMI w/Keyboard+Mouse, boot off the USB, install Raspbian.
Step 5: Once Raspbian is done open terminal, type: curl -sSL https://install.pi-hole.net | bash
Step 6: Point your router to the IP Address of Pi-Hole. Point Pi-Hole to a DNS Forwarder (9.9.9.9, etc)
Step 7: Go to any PC, login to Pi-Hole (IP Address\admin, aka 192.168.1.200\admin)
Step 8: Add curated blacklists. Mirrored Lists ¦ Firebog
Step 9: Enjoy life.

That's it.. Really. Now the secret is, to use good curated blacklists.. Such as the ones at Mirrored Lists ¦ Firebog as noted above.. I block about 700,000 ad/tracker/spyware/coinminer domains. On average, 40-50% of ALL of my DNS traffic is blocked by Pi-Hole as being either malicious/ad/tracker/spy/coin.. Without a Pi-Hole the vast majority of those would hit your network.

So yeah.. Everyone should spend the $60 and setup a Pi-Hole.

 

MeltdownEnemy

Level 6
Verified
Excellent ideas inspirated on the space blackhole to swallow surrounding cosmic material, pi-hole who's come to shields our affected router against harassers ads and exploiters miners, you can to arm an amazing hosts cocktail list (malware, trackers, spyware,botnets, everything what is shared by comunities at different hostings. I didn't know anything about that something like this could be done. everyone should spare money to buy a raspberry pi that will be dedicated only for this task ..
 
  • Like
Reactions: Slyguy

Slyguy

Level 42
Verified
Excellent ideas inspirated on the space blackhole to swallow surrounding cosmic material, pi-hole who's come to shields our affected router against harassers ads and exploiters miners, you can to arm an amazing hosts cocktail list (malware, trackers, spyware,botnets, everything what is shared by comunities at different hostings. I didn't know anything about that something like this could be done. everyone should spare money to buy a raspberry pi that will be dedicated only for this task ..
I almost consider it a requirement.

I have a SPARE Pi-Hole built out for myself that goes with me when I travel. I plug it into the AirBNB router, set the router to point to it, and relax.. Great on the move security you can take anywhere. Obviously it requires you to get into the router admin, if you can (and whatever way you can). If not, then you should be looking at something like a RATrap sitting in front of the router providing security. Or direct your clients to the Pi-Hole DNS manually on the network.
 

DavidLMO

Level 4
Anything similar that can run on a Windows PC?

When I make the move to Linux, I will be looking at this. What a wonderful idea.
 

MeltdownEnemy

Level 6
Verified
I almost consider it a requirement.

I have a SPARE Pi-Hole built out for myself that goes with me when I travel. I plug it into the AirBNB router, set the router to point to it, and relax.. Great on the move security you can take anywhere. Obviously it requires you to get into the router admin, if you can (and whatever way you can). If not, then you should be looking at something like a RATrap sitting in front of the router providing security. Or direct your clients to the Pi-Hole DNS manually on the network.
Excelent thank you my buddy Slyguy for tips,I will follow your recommendations firmly, and when the fortnight arrives, I will buy the raspberry pi, but i will have to purchase throuth the internet directly from store or amazon, where I live there are only basic things, those mini linux pcs are rare to get.
 

ozone

Level 3
Not pi-hole, but you can use dnscrypt-proxy in similar way.
Latest Simple Dnscrypt now allows configuring domain blacklist.
You will have system wide "adblocker".
You can also use filters for pi-hole.

Release 0.5.1 · bitbeans/SimpleDnsCrypt · GitHub

1) After installation click on gear (up left) and check Show "Domain Blacklist" Tab, you can also check block log tab
2) in Domain Blacklist Tab click on + symbol (second one, below; we want blacklist not whitelist)
add filters (must start with http or https) or single domain you want to block
3) click on button with "stars" ? to generate blacklist
4) now go to log tab and open some site with ads to check if it works
 
Last edited:

Slyguy

Level 42
Verified
I built a new Pi-Hole server this weekend. I was getting very aggressive with my blocklists, approaching a million domains. The poor little guy I had before was running 120'F-140'F range, probably too hot for the upcoming summer. The new guy has top and bottom heat sinks and a cooling fan. It's running only 82'F right now blocking about a million domains.