Pi Hole

[RpMz]

Ανοίγω το συγκεκριμένο θέμα, για να συζητάμε διάφορα για το pi-hole.

To Pi-Hole είναι ένας dns-server που κόβει τις διαφημίσεις από διάφορα web site.

Στην ουσία κάνει dns filtering.

Το site με οδηγίες και εγκατάσταση:

https://pi-hole.net

Προσωπικά το έχω εγκαταστήσει σε ένα raspberry.




Και μερικές custom ad-lists:

Η τελευταία λίστα κόβει και αρκετές διαφημίσεις (όχι όλες) από το YouTube.

https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts_without_controversies.txt

https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts

https://v.firebog.net/hosts/static/w3kbl.txt

https://raw.githubusercontent.com/matomo-org/referrer-spam-blacklist/master/spammers.txt

https://raw.githubusercontent.com/vokins/yhosts/master/hosts

https://winhelp2002.mvps.org/hosts.txt

https://hosts.nfz.moe/basic/hosts

https://raw.githubusercontent.com/RooneyMcNibNug/pihole-stuff/master/SNAFU.txt

https://ssl.bblck.me/blacklists/hosts-file.txt

https://adaway.org/hosts.txt

https://v.firebog.net/hosts/AdguardDNS.txt

https://v.firebog.net/hosts/Admiral.txt

https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt

https://v.firebog.net/hosts/Easylist.txt

https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext

https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts

https://raw.githubusercontent.com/bigdargon/hostsVN/master/hosts

https://v.firebog.net/hosts/Easyprivacy.txt

https://v.firebog.net/hosts/Prigent-Ads.txt

https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-blocklist.txt

https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts

https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt

https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt

https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt

https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt

https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt

https://v.firebog.net/hosts/Prigent-Crypto.txt

https://v.firebog.net/hosts/Prigent-Malware.txt

https://mirror.cedia.org.ec/malwaredomains/immortal_domains.txt

https://www.malwaredomainlist.com/hostslist/hosts.txt

https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txt

https://phishing.army/download/phishing_army_blocklist_extended.txt

https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt

https://v.firebog.net/hosts/Shalla-mal.txt

https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt

https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts

https://urlhaus.abuse.ch/downloads/hostfile/

https://raw.githubusercontent.com/kboghdady/youTube_ads_4_pi-hole/master/youtubelist.txt

[skel]

πολύ ενδιαφέρον
θα ήθελα να το εγκαταστήσω σε raspberry pi

θα έχω πρόβλημα εφόσον έχω dynamic ip στο ρουτερ ?

[RpMz]

Κανένα πρόβλημα, και εγώ dynamic ip έχω.

Το μόνο που θα πρέπει να αλλάξεις, είναι τους dns server στον router σου και να βάλεις αυτή του raspberry.

[skel]

Κανένα πρόβλημα, και εγώ dynamic ip έχω.

Το μόνο που θα πρέπει να αλλάξεις, είναι τους dns server στον router σου και να βάλεις αυτή του raspberry.

Μια χαρά

από περιπτώσεις Ping σε παιχνίδια γνωρίζουμε αν θα έχουμε επιπτώσεις ?

[RpMz]

Μια χαρά

από περιπτώσεις Ping σε παιχνίδια γνωρίζουμε αν θα έχουμε επιπτώσεις ?

Λογικά δεν θα έχεις επιπτώσεις!

- - - Updated - - -

New version! Dark mode added !!

https://pi-hole.net/2020/07/15/pi-hole-5-1-released/

[griniaris]

Εγω παντως τα ξηλωσα ολα.... και Pihole και adguard κλπ κλπ

Ειχα πολλες γκρινιες γιατι στα παιχνιδια στα κινητα ΔΕΝ δουλευαν οι διαφημισεις και δεν μπορουσαν να παρουν τα bonus και credits .

Οποτε στους υπολογιστες εβαλα τα plugins AdBlock σε καθε browser και ηρεμησα.

Κατα τα αλλα οποιος δεν παιζει παιχνιδια με διαφημισεις... θα κανει μια χαρα την δουλιτσα του.

[skel]

Εγω παντως τα ξηλωσα ολα.... και Pihole και adguard κλπ κλπ

Ειχα πολλες γκρινιες γιατι στα παιχνιδια στα κινητα ΔΕΝ δουλευαν οι διαφημισεις και δεν μπορουσαν να παρουν τα bonus και credits .

Οποτε στους υπολογιστες εβαλα τα plugins AdBlock σε καθε browser και ηρεμησα.

Κατα τα αλλα οποιος δεν παιζει παιχνιδια με διαφημισεις... θα κανει μια χαρα την δουλιτσα του.

λίστα εξαιρέσεων δεν έχει το πρόγραμμα ?

[griniaris]

εχει. αλλα τι να πρωτο εξαιρεσεις ?

Εκει που παιζουν ενα παιχνιδι , πατανε να δουnε το βιντεακι να παρουν +1 ζωη ... αλλα δεν παιζει. και τα "ακουω" . Υποθετω αλλαζουν .

ασε που πρεπει να ψαξεις να βρεις τι πρεπει να ανοιξεις. και σε καθε καινουριο παιχνιδι θα κανω τα ιδια ?? μπα.. με κουρασε.

Οποτε οπως ειπα... για οσουν δεν παιζουν τετοια παιχνιδια στο κινητο με βιντεακια διαφημισεων .... ειναι τελειο.

Κοβει παρα πολλα , και ειναι και πολυ ελαφρυ. Ειτε σε VM ειτε σε docker ειτε σε Ρi , τρεχει smooth.

Ομορφο περιβαλλον , απλο και κατανοητο.

[StarDuke]

καλησπέρα, πως καταχωρώ την λιστα που εχεις παραθέσει ;;

ευχαριστώ!

[Aligator21]

καλησπέρα, πως καταχωρώ την λιστα που εχεις παραθέσει ;;

ευχαριστώ!

Από το Group Manager --> Adlists.
Σου προτείνω πρώτα όμως να φτιάξεις τα Groups που θες, εαν θες παραπάνω από το default και να προσθέσεις τις συσκευές που έχεις στο κάθε Group.
Για παράδειγμα μπορείς να έχεις όσες λίστες θες και οι λίστες αυτές να είναι ενεργές μόνο σε όσα groups θες εσύ.

Έτσι μπορείς να έχεις 1 group με συσκευές που χρησιμοποιούν παιδιά και να είναι πιο αυστηρές και 1 group για εσένα όπου θα είναι πιο "χαλαρά"

[johann69]

Καλημέρα σας τελικά μετά από καιρό το εγκατέστησα και εγώ το pi-hole σε ένα raspberry.

Έβαλα τις παραπάνω λίστες αυτές ανανεώνονται αυτόματα;;;;

Έχετε κάνα δυο site να δω αν δουλεύει σωστά το AdBlocker και από τα κινητά και από τους υπολογιστές;;;

Επίσης το pihole αναβαθμίζεται αυτόματα ή όχι;; Θα πρέπει να τρέξουμε καμία εντολή στο raspberry???

[skoupas]

Το έχω βάλει κι εγώ εδώ και καιρό. Κυρίως για δοκιμή αλλά το άφησα γιατί μου κόβει διαφημίσεις στο iphone που δεν έχω adblock. Μια χαρά δουλεύει και με wifi μιας και δεν έχω κενή θύρα στο switch.

[RpMz]

Οι λίστες γίνονται αυτόματα update.

Σχετικά για το version θα πρέπει να το κάνετε χειροκίνητα.

https://discourse.pi-hole.net/t/how-...te-pi-hole/249

[RpMz]

Pi-hole Core/Web v5.2 and FTL v5.3 released!

Pi-hole Core/Web v5.2 and FTL v5.3 released!

Highlights

Upgrade RegEx engine #815
Adding approximate matching (catch URL typos), back-references, more character classes for bracket expressions, type-specific filtering (e.g. regex only for type AAAA queries), and more. See this Discourse discussion for further details.
Analyze EDNS(0) records #851
We highlight the Client Subnet (ECS) feature to obtain client IPs even when they are hidden behind a NAT or a deputy DNS server. See this Discourse discussion for further technical details. This feature can be used to unveil the real IP addresses of clients even when there used to be the router’s IP address for all clients (if supported by the router).
Allow defining clients by their MAC address #762 (FTL) / #1285(Web)
This allows you to use MAC addresses to automatically identify clients immediately connected you the Pi-hole. This will make the configuration for clients changing their addresses frequently (non-deterministic DHCP server, IPv6 privacy extension, non-constant ISP IPv6 prefixes, etc.) easier than before.
Add dhcp-discover feature #883
A new feature to actively scan all interfaces for available DHCP servers
It can be invoked using sudo pihole-FTL dhcp-discover
Add additional pre-compiled ARMv4, ARMv5 and ARMv8 binaries #903
Add new query retried status (12 and 13) #901
Differentiate upstream servers by address and port #923
This allows the statistics to tell apart servers on the same IP address running on different ports.
Add API callback to remove DHCP leases without the need for a restart #932
This removes an active lease from the server. Note, however, that the clients also actively need to ask for a new lease (reconnection, restart) as it may otherwise continue to use its old (even if now invalid) configuration until the lease time expires. Unfortunately, Pi-hole cannot do anything about this.
Added support for CNAME records add/remove on the web interface #1278 (@marank)
Add cache busting variable to Pi-hole js/css #1550 (@tjeffree)
You should no longer have to clear your browser cache when updating to a new version of Pi-hole!
Simplify query log filter to make it more user friendly #1602(@PromoFaux)
Good news mobile users – you no longer need to hold down a modifier key to use the query log filter! Desktop users, you do not need to either. Simply click to add/remove from the filter. Modifier keys can be held down to copy a domain
Other notes:
This is likely the last version of the web interface to officially support Internet Explorer 11.


Complete Changelog:

Core
Use gravity’s adlist_id in filename when saving downloaded adlist locally #3534 (@yubiuser)
(README.md): Grammar fix #3581 (@jokajak)
Create custom.list during install/update if it doesn’t exist #3608 (@yubiuser)
Fix pihole status to not rely on a TCP port test #3524 (@DL6ER)
Add default locations to PATH to assure that all basic commands are available #3527 (@MichaIng)
Update “About Pi-hole” link on “Website Blocked” page #3639 (@nfriend)
Use compression (if available) when downloading the ad lists. #3641 (@PromoFaux / @DL6ER)
Check for compression only once and print result #3646 (@yubiuser)
Change default value of temp_unit to ‘C’ #3665 (@scboucher)
Remove broken youtube link #3678 (@yubiuser)
Revert “fix #3336 by creating adlist file even if no list was selected #3673 (@yubiuser)
Tweaks to os_check() Redux #3688 (@dschaper)
Display more meaningful exit message if dig command fails during os_check #3702 (@PromoFaux)
Remove extra gravity optimization flag #3739 (@DL6ER)
added instructions for forking and rebase #3178 (@jlagermann)
basic-install: document how to continue after SELinux check #3607 (@cgzones)
Add CACHE_SIZE to setupVars #3170 (@DirkJanIT)
Remove check for free disk space and associated variables #3698 (@yubiuser)
Remove traces of previous default adlists #3763 (@yubiuser)
Print tail of logs in /var/log/lighttpd in debug run as well #3776 (@yubiuser)
Discover active DHCP servers during debugger run #3741 (@DL6ER)
Add date_updated field to adlist table #3740 (@DL6ER)
web server question enhancements #3225 (@MichaIng)
add FirewallD configuration checks to debug script #3798 (@bcambl)
Remove references to privacy level 4 (no longer functional) #3803 (@PromoFaux)
Add native ARMv4T, ARMv5TE and ARMv8-A support #3801 (@DL6ER)
Security enhancement for the “never forward non-FQDNs” feature #3794 (@DL6ER)
Update Test suite #3625 (@PromoFaux)
Fixed potential security issue with $landPage receiving variables #3819 (@craigmayhew)
Fix for pihole -w –nuke displaying help info even if command is exec… #3349 (@Forceflow)
Be more specific about what pihole -d -a does #3843 (@yubiuser)
Re-run the script as root instead of piping to bash #3827 (@hvnsweeting)
Change icon from cross to [i] for root user check #3825 (@yubiuser)
Add test cases for all supported OS #3818 (@pvogt09)
Add some output to the –nuke command #3847 (@PromoFaux)
Fix/unattended install #3848 (@chubchubsancho)
read REV_SERVER_CIDR from environment #3761 (@BastiG)
Include secondary upstream DNS for Quad9+Filter+ECS #3851 (@tullo-x86)
Add DNSSEC info to OpenDNS description #3863 (@yubiuser)
Include the raw messages from the Pi-hole diagnosis systems in debug logs #3862 (@DL6ER)
Add systemctl status –full –no-pager pihole-FTL.service to the debug log #3859 (@yubiuser)
Web
Added support for CNAME records add/remove #1278 (@marank)
Remove duplicate DNSSEC explanation #1494 (@vmstan)
Show date and time FTL started in settings page #1501 (@yubiuser)
Remove duplicated sidebar entry for Local DNS Records #1500 (@yubiuser)
Fix sidebar animation angle for Local DNS entry #1507 (@yubiuser)
fix(settings): typo in conditional forwarding #1522 (@Epoxide)
Add “ALL” to list selector in Local DNS Records and CNAME Records #1532 (@yubiuser)
Change timePicker to 24h format in dateragepicker #1529 (@yubiuser)
Fixes formatting of unknown host in DHCP leases table #1509 (@yubiuser)
Fix a few UI issues #1541 (@DL6ER)
Fix typo in DNS Settings #1565 (@MatthewBooth)
Remove degree symbol from Kelvin #1566 (@yubiuser)
Make login form button more mobile friendly #1564 (@Ninjaclasher)
Login page tweak #1583 (@PromoFaux)
Allow defining clients by their MAC address #1285 (@DL6ER)
Add cache busting variable to Pi-hole js/css #1550 (@tjeffree)
Fix bug with secs/mins buttons on disable menu caused by addition of theming. #1588 (@PromoFaux)
Show last update time of an adlist #1579 (@DL6ER)
Fix symbol for devices that do not use Pi-hole #1601 (@DL6ER)
Simplify query log filter to make it more user friendly #1602 (@PromoFaux)
Show detailed upstream destination in Query Log(s) #1627 (@PromoFaux)
Fix HTML validation errors in header.php #1489 (@XhmikosR)
Be more explicit about flushing logs #1604 (@yubiuser)
Use two different divs for mobile and desktop instead of a JS solution #1284 (@Th3M3)
Fix initial visibility of group selector on simplified black- and whitelist pages #1393 (@DL6ER)
Remember last used sort column/direction on Local DNS Records table and CNAME table #1563 (@yubiuser)
Fix UI Remaining Disabled in Groups & Adlists Pages #1600 (@rickbau5)
Add new query status 12 and 13 (retried queries) #1610 (@DL6ER)
Fix html escaping showing up in input fields. (#1584) #1603 (@thislooksfun)
Added check for NULL value in PHP internal error handling #1618 (@JonFStr)
Print fatal dnsmasq errors #1630 (@DL6ER)
Show detailed upstream destination in Query Log(s) #1627 (@DL6ER)
Ensure empty clients/groups/adlists/audits cannot be added #1626 (@DL6ER)
Summarize the names of DNS servers which support DNSSEC #1635 (@yubiuser)
Make it clearer that the option DHCP rapid commit only applies to IPv4 #1636 (@yubiuser)
Add new replace_domain action to allow adding domain(s) exclusively to a specific list #1625 (@DL6ER)
Add button to remove dynamic DHCP leases #1634 (@DL6ER)
FTL
Upgrade RegEx engine #815
Add support for install-time DESTDIR and delay expansion of CMAKE_INSTALL_PREFIX #844 (@DDoSolitary)
Analyze EDNS(0) records #851
Explicitly cast time_t #865
Add ability to show only blocked queries for a specific client #856
Show also IPv6 nameservers in DEBUG_RESOLVER #866
Allow defining clients by their MAC address #762
Fix error displaying if the upstream server failed #875
Add dhcp-discover feature #883
Request a lease with validity of 1 second in the DHCPDISCOVER packet #885
Only resolve active clients #872
Fix GCC9 regression for printing the same buffer into itself #884
Extend domain filtering to also check the CNAME domain #878
Try to obtain host names from another address of the same device when nothing else is available #879
Add event queue for signal handling #881
Do not block shared memory when inactive clients are skipped #889
Clean network addresses #871
Do not block shared memory when inactive upstreams are skipped #893
Log disk usage in /dev/shm #894
Always update database hostnames #874
Upload FTL log to tricorder.pi-hole.net #890
Add more verbose version output (./pihole-FTL -vv) #892
Allocate shared memory instead of only reserving it #898
Add pre-compiled ARMv4, ARMv5 and ARMv8 binaries to CI workflow #903
Make timer output at termination of FTL human readable #907
Keep FTL database open #896
Mark database as being available when creating a new database #908
Fix for the shm_per_client_regex shmem object #873
Add new query retried status #901
ECS: Ignore distant loopback address #909
Verify CI-generated binaries after uploading #910
Add DEBUG_HELPER #914
CMake install: update setcap #916 (@AlaricSenat)
Log process owner details #922
Differentiate upstream servers by address AND port #923
Log dnsmasq config errors to pihole-FTL.log #926
Keep upper case characters in host names #935
Add API callback to remove DHCP leases without the need for a restart #932
Skip clients with no active counts at all (may be old IPv6 addresses) #934
Implement special handling for “pihole-FTL — –help dhcp” and “pihole-FTL — –help dhcp6” #938
Analyze all DHCP options dnsmasq is aware of #937

[lefteriz]

Καλησπέρα. Τρέχω Pihole σε ενα raspberry4. Έχω βάλει DNS της google, μπλοκάρει τα ads όλα οκ.

Το πρόβλημα είναι οτι δε μπορώ να μπω στο subs4free, το μπλοκάρει η ΕΔΠΠΙ.

Αν βάλω manual 8.8.8.8 dns στο PC μπαινει κανονικά. Τι θα μπορούσα να κάνω στo pihole;;