Daily reminder that you are a zoomer/moron if you use PiHole

How is a device that sits in a Lan and filters using lists an attack surface? It isn't reachable by anyone not on my network.

>>what is hosts file
client side
>>what is network attack surface
something that would be public facing, which i don't know how bad at networking you'd have to be to assume such a case

It makes a nice target for any malware. And it has the hardware to do some snooping, participate in a botnet, or act as a C&C server.

>something that would be public facing, which i don't know how bad at networking you'd have to be to assume such a case
>what is defence in depth

>mfw zoomertards dont know what a hosts file is

Attached: smug.png (1171x1172, 785K)

this. pi-hole is a mess of shitty php and nasty shell scripts ducked taped together.

Not to mention it users memoryleakhttpd "light" my ass. So fucking shit, not sure why they still haven't switched to nginx

>>what is defence in depth
do keep in mind that we're discussing NETWORK security, not HOST security here
what was called into question is a network attack surface

just what kind of mismanaged access control list do you think is going to be needed for this

>network attack surface

It doesn't have to be external facing. It blocks for the normies that come over and my gf.

Yes I use ublock and yes I use adaway on my phone.

Its low effort sticking it to the kikes.

>It blocks for the normies that come over
pretty sure you have to configure your device to use it as a DNS server. so it's not really automatic or anything.

>zoomer

Attached: nutbladder_kaiji_s2_-_01_d721c8a703239419-31-42_resize.jpg (640x360, 46K)

The only problem I have with Pi-Hole is that I chose a preconfigured blacklist that blocks half of the websites I generally access.

Only real tofu-tartlets try to start threads to spread a Jow Forums moral panic that using one piece of software = you suck ten million dicks.

You can force DNS when dhcp is being leased.

For realsies, what's the benefit of pi-hole over browser ad blocking, besides memory and cpu usage?

b-but what about the hivemind
we r anomynus
we cant think

>setting up dnsmasq with a addn-hosts directive set to a hosts file periodically wgeted using cron is too hard
why are you even on Jow Forums

Its takes one minute to set up and its low effort.

Last time I used pi-hole, updating the source list manually wiped out /etc. Fuck that shit.

That's why you will never amount to anything. Some people think you need to take the hardest route possible to prove yourself when in fact just doing the most efficient thing is better and more reliable.

>blocks half of the websites I generally access
What kind of clickbait trash are you looking at?

I've had this thing set up for years now and I barely ever even notice the damn things, there have been times where I have wondered if it is even doing anything, then i turn it off and laugh at how bad it is.

God bless ad blockers.

>He doesn't understand scale...

Go back to somewhere not here.

>echo "listen-address=0.0.0.0\naddn-hosts=/etc/dnsmasq-hosts" >> /etc/dnsmasq.conf && echo "@daily wget -q -O /etc/dnsmasq-hosts someonewhocares.org/hosts/hosts" >> /etc/crontab && wget -q -O /etc/dnsmasq-hosts someonewhocares.org/hosts/hosts && sudo systemctl enable --now dnsmasq
wow so hard I sure will amount to nothing for pitting myself through fire and brimstone every day of my life

Its your life my dude.

I'm using PfBlockerNG on pfSense but noticed that it's getting really annoying to whitelist shit and reset my DNS cache.
I can't even reset my DNS cache on my phone, which makes my VPN totally useless.

How do I go about setting up a REAL firewall on pfSense, for ad-blocking purposes?
I mean that the firewall will literally stop requests from going through the network, like uMatrix or something.

the absolute state of Jow Forums. Zoomers would rather use lego blocks on their toy computers as a DNS server.

>What kind of clickbait trash are you looking at?
Porn.

>sudo
so much for security

Attached: 46a.png (645x729, 97K)

Attached: Get a Job.jpg (250x247, 5K)

but i use it so my parents dont get ads

They have to get into my network first faggot and at that point all my devices are at risk anyways

>sudo bash -c 'ALLDEMCOMMANDS'
I couldn't be bothered to replace shell redirections (which will be running in the user's shell rather than as root) with echo stuff | tee -a file >/dev/null 2>&1, fight me.

>what's the benefit of a [network DNS firewall] over browser adblocking, besides memory and CPU usage
every device on your network gets the same benefits without any of the hassle.

If Google or Apple were in charge of adblocking (lol) they'd hook up your adblock feeds and whitelist/blacklists to the fucking cloud so that they'll sync to all of your iCloud and Google accounts

>echo stuff | sudo tee -a file >/dev/null 2>&1
even

I just block ads on LEDE.

Buzzwords

I should note that this obviously doesn't serve empty pixels with an httpd to avoid broken images/ad banners and that my usage of wget doesn't fail well if the server is unreachable or whatever

>not using a pihole
wow, gay

Attached: 1539526744561.jpg (750x1000, 77K)

>making your life harder for yourself for no added benefits
Considered getting a job and move away from home?

Is that Femanon?

Are you dumb? How would it get malware?

>touches pussy faggots

it's certainly a girl but all things considered, it's probably a prostitute.
>that
>a girl's room
>who wears pink garterbelts and see-through tops
>two phones
>an ALL white color scheme

>hosts file
>setting up host files on every device in your network manually
LMAO.

Remember when Jow Forums was good? Me neither.

Attached: 1537507240255.jpg (592x841, 60K)

it's not public facing you fucking retard, you put it behind your firewall, like every other DNS server.

the actual state of g these days

I wonder why boomers have the need to tell everyone about their "mental superiority"

Attached: 1510812804531.gif (256x256, 352K)

*blocks your autism*

Attached: Annotation (3)11.png (1290x961, 316K)

Don't hostfiles have a significant performance impact.

>Jow Forums is one person
anyone remember when this user wasn't a retard?
Yeah, me neither.

I hope not

why is this board so fucking garbage

REEEEEEEEEEEEEEEEEEEEEE

Attached: Untitled.png (976x371, 57K)

You get an adblocking solution for your whole network.
Websites load faster than with browser-side adblocking due to DNS caching and connection with ad servers not being established.
It also blocks Windows/Office/Visual Studio tracking and telemetry.

Enjoy being tracked by Adguard and having your data sold.

I hate Jow Forums memes, but isn't pihole simply a onions-hardware firewall?

pi-hole is a dns forwarder/cache based on dnsmasq with support for filtering dns requests.

wow you must be so cool only using one device and filling your hosts file with stuff.

have you ever thought about that not everyone is giant faggot like you?

people have other devices that are not so easy modified like a pc when it comes to the hosts file but they can connect to your router and if you say your router use the pihole dns it just works, you my man are a stupid faglord, kys

Meh, I used the hosts file before but tried piHole and it's more comfy to find false positives and whitelist them.

> 5M on blocked lists

HOW?

firebog.net/
tspprs.com/

plus another site which has a bunch of block lists but i can't remember it. if i find it i'll respond to this

filterlists.com/

this is the other one

I used most lists from here:
firebog.net/

>Install Pi Hole a couple days ago because ads in mobile apps
>All these fucking devices on my network I can't see on my router page

Attached: 1526193029304.png (429x410, 11K)

I want to fuck Orizuru

You're correct. PiHole is for idiots who like pretty pictures instead of real security and don't know how to set up pfSense or OPNsense.

Same.
Router shows 3 connected and pihole shows 10.

>quick, shut it down, shut down the exit nodes

not in a 32mb of ram VM it doesn't, with a neatly configured fw.