Re:Pi-Hole – A black hole for Internet advertisements
by thatjeffrin on Tuesday February 26, 2019 @07:27PM
(#19259791)
Will you share high level steps of how to accomplish this, please? I'm a novice and haven't played with Raspberry Pi, but recently set up a Droplet running Ubuntu on DigitalOcean. Sharing with family intrigues me.
[ Parent
| on HN ]
Re:Pi-Hole – A black hole for Internet advertisements
by tdurden on Tuesday February 26, 2019 @07:39PM
(#19259856)
The steps should be the same regardless if running on a Pi or VPS: https://github.com/pi-hole/pi-hole/#one-step-automated-insta...
Re:Pi-Hole – A black hole for Internet advertisements
by DKnoll on Tuesday February 26, 2019 @10:57PM
(#19260746)
On a machine that isn't behind a firewall already you will want to set up strict firewall rules, including blocking inbound DNS from anywhere except trusted addresses. Other hardening steps should be taken as well but they're not specific to DNS resolvers.
Recursive DNS resolvers on the open Internet start getting abused really fast for DNS amplification DDoS attacks (for anyone unaware reading this).