Configuring Split Horizon DNS with Pi-Hole and Tailscale

Re:Configuring Split Horizon DNS with Pi-Hole and Tailscale by elashri on Wednesday July 09, 2025 @06:10PM (#44515208)

I do force all plain DNS on port 53 to my local dns (Adguard home + unbound on a gl-inet router). And I block common DoH addresses. There are many lists on Github. I collect them using github action to have one big list of their IP and addresses and block them.

This is not a bullet proof solution in case there is a semi known custom DoH an application use. But it is the best that I can do without Enterprise network gear and more complex setup that I would like to maintain.

[ Parent | on HN ]

Re:Configuring Split Horizon DNS with Pi-Hole and Tailscale by baby_souffle on Wednesday July 09, 2025 @06:58PM (#44515561)

Would you be willing to share the list sources you use?

[ Parent | on HN ]

Re:Configuring Split Horizon DNS with Pi-Hole and Tailscale by metadat on Wednesday July 09, 2025 @07:43PM (#44515851)

And perhaps automate pushing to a gist or repository?

[ Parent | on HN ]

Re:Configuring Split Horizon DNS with Pi-Hole and Tailscale by bozhark on Wednesday July 09, 2025 @07:13PM (#44515662)

Seconded

[ Parent | on HN ]

Re:Configuring Split Horizon DNS with Pi-Hole and Tailscale by hk1337 on Thursday July 10, 2025 @01:26AM (#44517557)

I don’t know about their list but I would start with https://github.com/StevenBlack/hosts

[ Parent | on HN ]

[dead]

Re:Configuring Split Horizon DNS with Pi-Hole and Tailscale by vladvasiliu on Thursday July 10, 2025 @03:56AM (#44518478)

I don't know about GP's motivations in doing the blocking and redirections, but if they're anything like mine, Firefox is not one of them. The main issue is random "IoT" devices, think smart TVs and the like, phoning home for a fresh batch of ads and whatnot.

[ Parent | on HN ]