alt Hacker NewsI keep meaning to set this up but haven't. What's the simplest best setup for my own DNS blocker?
Replies
drnick1 • today at 5:39 PM
The easiest off-the-shelf option would be a router running OpenWrt. IIRC, it natively uses dnsmasq, and the relevant blacklists can be obtained from here:
https://github.com/hagezi/dns-blocklists
My own setup is DIY: a Debian box running Unbound (recursive DNS) with the RPZ blacklists from above. This gets rid of the upstream DNS service such as the ISP's completely, and prevents tampering or censorship.
eevahr • today at 5:50 PM
For simplicity I highly recommend https://nextdns.io. Supports most devices, and probably most, if not all, well known blacklists.
kuerbel • today at 5:40 PM
Hmmm Pihole I guess. Runs on a pi zero (1 or 2 but 2 is better ofc)
For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).