Hacker News Reader

Comment by sebastiennight | Hacker News Reader

> My phone is always VPNed into my home network which has DNS-level ad and tracker blocking.

I've been looking to do this setup. Would you share a few details of which tools you've used?

RethinkDNS does everything for me. You're tied to their DNS server if you want to use the in-app interface to make changes to the blocklists in use, but that's not a hard requirement. As a bonus, it also supports actual VPNs (wireguard, http connect, and socks proxy). If you don't care to micro-manage it, trackercontrol is also pretty good. There's other apps as well, like personalDNSfilter.

In this setup you're explaining, the phone is doing all the work though right? Filtering DNS and sending traffic to a wireguard VPN, is all done on the phone.

But it's not tunnelling traffic to a desktop station which then processes that traffic like its own (filters DNS as set up on the desktop, and forwards traffic through the same VPN that is set up on the desktop). Am I getting this right?

My setup is similar: A server at home runs Unbound for recursive DNS, filtered by Hagezi's blacklists. The phone (running GrapheneOS) consumes the DNS service through a Wireguard tunnel. This is 100% self-hosted and does not rely on Tailscale or a third-party DNS service. All the mobile carrier or WiFi hotspot used sees is a single encrypted connection to the server.

I absolutely love this. I thought Tailscale was necessary to establish that kind of wireguard tunnel. Would you have a link to a tutorial or write-up on how you got this set up?

I'm also interested. I use tailscale and there is supposed to be a way to configure it to use my pihole DNS, but there is something in Android that prevents that. I think I have to set a custom DNS on the phone.

Reply on news.ycombinator.com