News for hackers. Stuff that matters.
Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by mikestew on Thursday April 25, 2019 @02:06PM (#19750880)
IMO, it's just a DNS black hole with a slick interface.

And something, something some rsync and ftp and you've got Dropbox. Yes, Pi-Hole is just dnsmasq with a pretty face, which is precisely why I use it. $50 for a Pi starter kit, and as soon as it hits your mailbox, you are about 20 minutes away from living the #adfreelife (and most of that 20 minutes will be redirecting your network after install. Where the hell are the docs for this router?).

Sometimes I'm content to manually tweak JSON files all evening. And sometimes I just want to plug it in and pretty much works out of the box. Ad filtering on my network falls into the unsexy latter bucket of "just give me something that requires a minimum of yak shaving".

Are you using apps/services on these devices that don’t offer an ad-free option

Yes, the NYT as one example. The app still has ads. I continue to pay for the NYT to support good journalism. I don't get to pick both, so I choose to continue to pay.

A device in my house went nuts and decided it needed to ping an NTP server 1K a night. Not anymore.

In the end, I kind of get the impression you're spending more mental energy on arguments against, rather than ask yourself why someone might find it useful. I could come up with quite a list of reasons with just casual thought.

Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by nominated1 on Thursday April 25, 2019 @03:55PM (#19751882)
> A device in my house went nuts and decided it needed to ping an NTP server 1K a night. Not anymore.

Wait, Pi-hole was your solution here?

> In the end, I kind of get the impression you're spending more mental energy on arguments against, rather than ask yourself why someone might find it useful.

I’m asking because I believe there are better ways. I could be called out for baiting or pushing a “the only way to win is not to play” for IoT and creepy apps/services agenda. Yet, NYT, FB and many others can still be viewed and signed into with a mobile browser. The experience may not be as nice but it still works and sends the right message to these corps. When creepy app/device/service is the only option I recoil and reassess.

Besides, DNS blacklisting isn’t perfect and requires a fair amount of tweaking depending on how many thingies you’re using it with. Any compromise you make for one affects all others. I think we have the same goal of “having your cake and eating it too” just different methods. Either way, we’re both expending constant energy and compromising.

Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by paavoova on Thursday April 25, 2019 @04:45PM (#19752352)
> $50 for a Pi starter kit

And $35 for an OpenWRT router that does the same thing and also offers a web interface. Why pay more for a second standalone device?

Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by FredFS456 on Thursday April 25, 2019 @08:54PM (#19753946)
In my experience, the OpenWRT adblock package is not as powerful as Pihole. It's also annoying (involving some awk scripting) to add new lists that weren't added by the dev.
Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by drewmol on Thursday April 25, 2019 @08:10PM (#19753722)
>for a second standalone device?

Please clarify my understanding:

Wouldn't the OpenWRT router be a second standalone device as well?

Are you suggesting to use a $35 as the network's primary router?

If so, do you have a model to reccomend that you've had success with and an estimate of the load it could handle?

Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by paavoova on Friday April 26, 2019 @01:56AM (#19755147)
MT7621-based devices can all handle GbE and are supported by OpenWRT. Xiaomi among others sell routers based on this chipset, but personally I'd avoid them due to their locked-down bootloaders which complicate flashing. I myself purchased the YouHua WR1200JS, which is currently available rebranded on Aliexpress for under $35 USD as model "WR330" with OpenWRT pre-installed (although you should still reflash to be safe). It saturates LAN ethernet (~936mbps avg.) in my tests, but probably needs software/hardware offloading for Gb WAN, which I think is only enabled in snapshot versions of OpenWRT.

WLAN throughput is not so good, about 288mbps at 80mhz, but this was only one client device tested and not thoroughly because I don't know enough to diagnose bottlenecks. Regardless, this is more than enough to saturate my WAN connection - no issues with 6+ simultaneous wireless devices.