Hacker News Reader

Comment by poisonborz | Hacker News Reader

My problem with network-level adblockers, also PiHole is that they break a lot of services (yeah it's mostly sloppy or malicious intent from service provider but still). On a browser you can quickly disable uBlock for that site, it is much more tedious for these services - also because it's not even clear that the filtering is causing the problem, also because it maybe someone else on the network experiencing the problem.

View on HN

I have a handful of different wifi SSIDs set up on my network at home to help with this, some route their DNS queries through a pihole instance and others (say, without the “AB” for ‘adblock’ suffix on their ssid names), don’t. Each ssid is their own vlan and each has their own dhcp listening that doles out the pihole instance address on the Adblock-enabled nets.

It’s easy enough to just connect to a different ssid if I see anything breaking, but it’s rare enough that I keep it connected to the pihole/adblock network at all times. Works super well.

That is a great idea. What do you use to run multiple wifis with separate vlan?

An AP or wlan router that supports vlan to ssid mapping.

I use some of the lower-end wifi 6 APs, coupled with an AC (controller), from fs.com, they work solidly, and with seamless roaming around the house, after figuring out some of the rather odd translation in the AC web interface. After some annoying small steps, the ssh consoles on both the AC and the APs are all that I use.

They’re mated to a Juniper EX switch running stock JunOS over PoE, primarily one AP for each floor and another one or two to fill in dead spots. I haven’t had to touch it since I’ve set it up, just keeps chugging along.

Slight over-kill for the environment, but I’m so damn tired of using bad wifi I just wanted to do it right!

I’ve been using https://oisd.nl/ on my network for some time (just cronned into an unbound config file) and nothing breaks.

If you report a website breaking to the maintainer, he removes the offending block.

Works well, I can recommend it.

And it reminds my to send them a little money in thanks.

This looks really good. Thanks for suggesting it.

I have a silly "trick" for this. In Firefox you can add a SOCKS5 proxy and click "Proxy DNS with SOCKS5 proxy". This bypasses the system DNS.

So for example, if you make a container with this, then you can just quickly open the URL that's blocked in the other container and it will bypass the network-level DNS adblock.

There are other ways to do it without a container, I'm sure, maybe with an add-on/toggle or something.

My VPN provider gives free SOCKS5 access to a few servers, so it didn't cost me anything more.

That's a clever trick. It's also pretty trivial to set up a SOCKS5 proxy with Shadowsocks if it's desirable to keep that DNS resolution local.

How are you using a different proxy per container tab? I've tried FoxyProxy but it leaked DNS requests through the local network resolver even with SOCKS5 proxies.

Go into the main extension settings of 'Firefox Multi-Account Containers' that lists your containers and click on 'Manage containers'. Select any container and the last option on the new page is 'Advanced Proxy Settings'. This setting is per container.

ah, that would be way too much work for a one-off proxy switch for one site

I created a bit.ly link that points to http://yourpiholehost/admin/api.php?disable=300&auth=api_key

Bookmark it for myself and other people in the house and then turn it off for five mins whenever there is an issue.

Would be fun to hook this up to one of those IoT Amazon buttons.

Home Assistant can definitely do this. I just now successfully got my HA connected to an Aqara Zigbee button (which, hilariously, only briefly functioned when I was using it with Aqara's garbage hub).

Or say “hey google disable ad blocking” and triggering it. Then google learning of this and doing it all the time behind your back

What annoyed me the most is actually clicking on ads from Google Search. Sometime I searched a product and I couldn't clicked on the first result because they are advertisements.

Every time threads like this come up I am reminded that Google has ads. I don't see them, presumably because of uBlock Origin.

I'm typing this response not to smugly boast, but because it's a lead in to the question that your comment raised within me:

Are you using Pihole to block ads at a network level, but not also using a browser extension to block them at the client?

I'm in the same boat as you, but taking it a step further, I'm completely blind to the first 1/3rd of google search results. The first 3 are already ads, and then there's the "quick info" card on most searches. I've subconsciously trained myself to just flat out skip over those results.

So in my case, I don't know that an ad blocker really even helps me on google, because I'm ignoring those first results anyway.

Yup, skip all sponsored and ad content. I do the same on Amazon and ebay - even when the advertised product is _exactly_ what I want, and the best price available, I refuse to purchase from a sponsored listing.

100%.

> Are you using Pihole to block ads at a network level, but not also using a browser extension to block them at the client?

A lot of Pihole users don't bother with browser extensions. In extension-only use cases, these results would just not show up. With Pihole, you have to copy and paste the URL and just enter directly in the browser. It's not like a huge roadblock.

Ads exist on mobile devices. In iOS games. All sorts of places/devices that can't run uBlock origin. That's why you use a DNS level blocker as well.

personally i use both. PiHole and uBlock. But PiHole is network wide so smart TVs iPads, etc in the house also get the benefit.

Honestly, I love this aspect of my Pihole. Stops Google stealing those pennies from the businesses who were already gonna be the #1 result anyways.

The "sponsored ads on your own name" extortion racket really is the worst.

I've had the most luck with OISD as the blocklist; others have the exact problems you describe (in fact all other blocklists I've tested have had frequent issues). Since changing, I've had maybe 2 sites that didn't play nice with the filtering. These issues are not inherent to network-level blockers, but the configuration of those blockers.

PiHole has an API that can be used to enable and disable the ad blocker.

I have a bunch of home automation set up, and through the use of HomeBridge and a plug-in I have a button in my Apple Home app on my iPhone to enable or disable the ad blocker. Since it's exposed as a smart home thing, you could hook it up to a voice assistant like Siri or Alexa.

I built an integration once for an Elgato StreamDeck.

You can also download apps that do the same thing; I have one called "Pi-Hole Remote" that works great.

Yes, ad blocker blockers are annoying, but they are trivially worked around.

I’ll definitely implement this as soon as I have the pihole pc back up. My girlfriend will be very happy

Is that your experience? Honest question, because only yesterday, after several years with PiHole and uBlock Origin, I found that a Shopify shop wasn't working for me. But that's probably the only issue I encountered after all those years...

Unfortunately yes, there are features on big websites which just don't work.

Now every time, I have an issue with any website, my first instinct is to turn off pi-hole. Most of the time, pi-hole is not the even the issue, but sometimes it is. It's annoying to browse the internet while constantly thinking "Maybe there is an issue on my side".

> Unfortunately yes, there are features on big websites which just don't work.

It is very rare that I find something stalker-blocking (pihole on my local network & VPN) causes to break that I care enough to turn blocking off for. It might have happened as little as twice, one of those occurrences predating PiHole. Information is usually in many other places or I really don't care that much, and shopping sites that break are waving a red flag by being broken so I'll go look elsewhere.

I do have a bookmarklet on my devices to turn it off for a few minutes, but that was used more when testing it then it has been since.

I mostly live alone so don't have the problem of other users, such as a spouse or kids, having trouble. Guests always have the option of using their normal mobile access instead of the local wireless if they experience insurmountable problems.

That's good to hear. I'm going to try oisd, hoping for fewer false positive :).

Not parent but yes, that's exactly why I stopped using PiHole

I've come across a few borking issues, including online banking because card rewards are counted as advertising in the list(s) I use.

Such problems are few and far between, though, and it wasn't that hard to figure out what to whitelist (granted I'm a computer nerd, not everyone is).

Home Depot search breaks for me when using Blocky, and is the only consistent issue I observe.

Home Depot is the most fragile website I'm forced to deal with. It regularly breaks in novel ways for me when it can't load some random dependency that it doesn't actually need the functionality from.

And it doesn’t load at all from outside the US! I once wanted to purchase before coming back, to learn I need to vpn back in to the US to order something. Crazy.

Thank the GDPR for that, probably.

I use both Pihole and ublock. While ublock is fine for desktop browser , pihole is useful for mobile devices, as well as blocking access for devices and apps that tend to be chatty with data it sends out. For example - I unfortunately bought a few Eufy security cams long before it was found that Eufy was sending user data out to its AWS instance. It was easy to block that access via AWS in Pihole. Of course, it doesn't always work. I've found some devices absolutely need to call home before they'll function.

I use a quick setting to quickly switch between ad blocking dns and normal dns for bad websites or captive portal.

https://f-droid.org/en/packages/com.jpwolfso.privdnsqt/

Pretty cool. If you have adguard home and google assistant, you have access to a switch that can enable/disable adguard home protection. So with the homeassistant app you can add that as a quick tile as well. The only caveat is that this will disable it across all devices.

It's not that tedious.

In adguard home you have a switch on/off in the web UI. You can also expose that switch to homeassistant.

And there are some other good ideas in this thread as well for android and ios.

After disabling it on the UI, your device may still cache the DNS records for a few minutes. There's no immediate feedback on whether disabling adblocking changed anything. It is extremely tedious especially for non-technical users, and adds "tech-support" burden to their technical friend/family who set it up in the first place.

Yes, I ran into these issues when I installed PiHole in my family home.

Most issues were with Google Ads inside Google Search. Often these are relevant and actually what you're looking for. But they don't work.

I tried rewriting the "this is blocked" page that PiHole would serve so it included a button to temporarily disable blocking for said url but it turned out to be harder than I thought.

Pi-hole Remote for iOS has a disable for X minutes feature which is invaluable when you do run into one of these sites. I use it maybe once a week.

https://apps.apple.com/nl/app/pi-hole-remote/id1515445551?l=...

Pi-Hole Remote (iOS app) is your friend

Yep. There are also browser extensions that will allow pausing pihole blocking temporarily.

or simply these URLs:

Disable URL : http://<pihole ip address or hostname>/admin/api.php?disable&auth=[your pihole password]

Enable URL : http://<pihole ip address or hostname>/admin/api.php?enable&auth=[your pihole password]

Disable for [X] Seconds: http://<pihole ip address or hostname>/admin/api.php?disable=[X]&auth=[your pihole password]

Yeah, this is always my hurdle implementing house wide. I can toggle it on and off when I have the stubborn link but my girlfriend just gets utterly annoyed. I just manually point some of my devices at my local server and leave it at that. Guess I should look into aws free tier and set it up there as well or just say screw it and use dns.adguard.com again.

Reply on news.ycombinator.com