Remote pihole/adguard at parents house reddit / selfhosted ---------------------------------------------------------------------- SuicidalSparky 路 2023-12-27 17:15 Just looking for some ideas here, been at the parents this week and mum was telling me how she wanted to learn about bitcoin, did some clicking around on her ipad and now she gets a load of emails she doesn't want 馃檮 lol. Clearly more education needed which we are working on as a family but also I'd like to stick in either pihole or adguard. I could put pihole on an rpi and stick wireguard on it then leave it round there so I can access it remotely for maintenance etc. I just want to know if that's my only option here? Anyone else running something similar remotely? Interested to know about any other hardware solutions I could use here. ---------------------------------------------------------------------- [deleted] 路 2023-12-27 17:31 [removed] ---------------------------------------------------------------------- tstepka 路 2023-12-27 17:34 If you鈥檙e ok with adding/replacing hardware, I might suggest a router with vpn capability and just keep everything onsite at your house. Personally I run a vpn & Pihole using Ionos vps for 2$ each a month. Setup a script to resolve a ddns name to an ip and write that to ufw and whammo only your house and your parents house can access anything. ---------------------------------------------------------------------- apnorton 路 2023-12-27 17:46 Just make sure you have failover/a backup dns configured in case the internet goes out at your house --- wouldn't want that to take out the offsite (your parent's) DNS capability. ---------------------------------------------------------------------- 2cats2hats 路 2023-12-27 22:31 You could open a port to your own pihole and point their DNS to your public IP. Just an idea, hope this helps. ---------------------------------------------------------------------- stupv 路 2023-12-27 22:51 I have an old laptop running proxmox at my parents, has a pihole container and tailscale amongst other things ---------------------------------------------------------------------- UmbroSockThief 路 2023-12-28 00:26 If you add two DNS addresses to router/device settings, is the second address only used if the first doesn鈥檛 respond? Or is there some load balancing? ---------------------------------------------------------------------- AudioDoge 路 2023-12-28 02:16 Don't expose port 53 to the world... ---------------------------------------------------------------------- 2000nesman 路 2023-12-28 03:34 make yourself a VPN and do it from there, that's what I do. ---------------------------------------------------------------------- Shotokant 路 2023-12-28 04:16 I had pihole on a pi. Moved to adguaed after upgrade issues. Running on a container on a synology. Single DNS server. Single point of failure. NAS went down and sod all worked. After.mucking about with a pihole on AWS. I settled for an adguaed subscription in the cloud and on on the docker. It's a pittance for the sub and just peace of mind in case there's a failure. Suggest you look into adguaed online and do a 7 day test. Block ads also and sub to the whitelist DNS services. ---------------------------------------------------------------------- apnorton 路 2023-12-28 07:10 I believe it's only a failover for most routers --- I've had one of mine pointing to a local DNS server and the second address pointing to [8.8.8.8](https://8.8.8.8) for a while now and I've never had a failed local lookup/something I'd expect if there was load balancing. I'd imagine this could be router OS specific, though. ---------------------------------------------------------------------- ragibkl 路 2023-12-28 07:15 Does it have to be pihole? Could you just maybe point the wan dns on the router at your parents' home to a public AdBlock dns server? That should be the least maintenance burden on yourself. ---------------------------------------------------------------------- mqmq0 路 2023-12-28 07:58 [Dont](https://www.cloudflare.com/learning/ddos/dns-amplification- ddos-attack/) ---------------------------------------------------------------------- SuicidalSparky 路 2023-12-28 08:56 Well partially Mum is worried about using the Alexa/Ring doorbell we bought her which makes her life much easier but that she's suspicious of. So showing her that a lot of their queries are stopped would be helpful. Doesn't need to be pihole if adblock also achieves it that that's fine too. Pihole just came to mind because it's what I use at home and I have a few pi 4's sitting around doing nothing since building up a home server. ---------------------------------------------------------------------- ragibkl 路 2023-12-28 09:24 Oh yeah. Pihole would give you more control and visibility. What might be a hassle is that if the pi goes down at your mum's place, you'll have to drive over to fix it. I'm sure AdBlock dns can do the same. Maybe you can give my project a try. I also provide logs for originating IP, but they are flushed every 10 minutes. If it does something you like, maybe you can rent a vps and host it yourself. https://github.com/ragibkl/adblock-dns-server#production-live- environment ---------------------------------------------------------------------- SuicidalSparky 路 2023-12-28 10:20 Interesting, thank you, I had a quick look and will sit down again later to read over it in more detail. ---------------------------------------------------------------------- tech2but1 路 2023-12-28 10:37 > I believe it's only a failover for most routers No it isn't. It would usually be whichever is quickest or less common round robin. > I've had one of mine pointing to a local DNS server and the second address pointing to 8.8.8.8 for a while now and I've never had a failed local lookup/something I'd expect if there was load balancing. That isn't a conclusive "test". If it was sending requests to all servers and receiving the first response then of course the local server would probably be the first to respond every time. Also even if it did receive a response from the Google DNS once in a while it would be a 1 in a million chance that the response there would be when you request a local address. ---------------------------------------------------------------------- tech2but1 路 2023-12-28 10:39 So she's worried about the Ring doorbell but is happy to randomly stick her details into whatever sketchy site she finds on the internet that mentions "bitcoin"? I don't think AdGuard or PiHole is the answer here. ---------------------------------------------------------------------- SuicidalSparky 路 2023-12-28 10:43 No shit Sherlock.