I should clarify I wasn’t a upper level sys admin managing those servers, I just used them or maintained accounts being a rank and file technician

While I get the fundamental concept of DNS as a phonebook for your IPs. I am not sure why it is joked around if something goes haywire or someone breaks something.

Is it because if you get no DNS, people can’t log in through their AD accounts, browse the Internet?

Afaik DNS is a bit of a rabbit hole topic, maybe that’s why people joke about it due to DNS being this “No one really knows how this magic name matching box works”?

Please correct me, I’d genuinely like to know why this is prevalent from you guys.

  • @stupidcasey
    link
    528 days ago

    DNS isn’t supposed to control that much PIhole is a hack, it would be more accurate to say PIhole controls so much behind the scenes. DNS is supposed to do exactly this domain.com->1.2.3.4 nothing more and nothing less anything else is a hack when cloud flair runs all your traffic traffic through a proxy that is them hacking the system domain.com->change-1.2.3.4

    • thermal_shock
      link
      English
      128 days ago

      what do you think is pointing adservers to a black hole and not being able to reach my home network?

      • @[email protected]
        link
        fedilink
        4
        edit-2
        28 days ago

        what do you think is pointing adservers to a black hole and not being able to reach my home network?

        The actual answer is a hosts list file that Unbound is augmenting within PiHole as a daemon. The entire core function of PiHole is leveraging Unbound. Without it, PiHole remains a useless GUI and minimal linux OS.

        In fact, you can completely ditch PiHole, if you know what you’re doing, and simply run Unbound as a daemon in a minimal container and do exactly what PiHole does, or run it bare-metal on your own hardware instead of buying their overpriced devices.

          • @[email protected]
            link
            fedilink
            3
            edit-2
            28 days ago

            It’s crazy to read that when my Unbound has a 1.6 million host size block-list with regex filtered domains and uses at less than half that amount of RAM.

        • @[email protected]
          link
          fedilink
          128 days ago

          So happy to see someone explaining this because it’s always driven me crazy the amount of people pushing PiHole when you can do it so much more simply.

        • JackbyDev
          link
          fedilink
          English
          1
          edit-2
          28 days ago

          Does this block the ads itself or do I need additional configs?

            • JackbyDev
              link
              fedilink
              English
              1
              edit-2
              28 days ago

              Like, when I install uBlock it comes with everything it needs. If I run Unbound does it block ads out of the box or do I need to point it to some list?

              • @[email protected]
                link
                fedilink
                227 days ago

                Unbound is a high-level DNS server. It needs you to provide it hosts in a list or provide it with regex scripts (for dynamic and more efficient blocking). It can block ads at the DNS level just like PiHole (because that’s literally what PiHole and AdGuard use under the hood, but add their fancy GUIs)

                I would avoid it unless you know what you’re doing, and recommend reading the docs on their website and testing/breaking it within a Docker container.

                It’s the difference between buying a car from a dealership (PiHole, AdGuard, etc) or building your own from scratch (Unbound). One is very limited, whereas building it and running it yourself you get to do way more than what’s spoon fed to you.

                • JackbyDev
                  link
                  fedilink
                  English
                  227 days ago

                  Ah okay. Unbound is arch, pi hole is Ubuntu. I have gripes with pi hole but it’s never not worked for me. I might just do that instead (if I ever get around to it lmao)