Hello,
I find many different statements about how to specify a local DNS server as default for all devices that go to the Internet. I do not want to specify a DNS on all devices separately.
I have 200MBit/s cable from TeleColumbus. OpenWRT on a R7800 is connected directly behind the modem.
I have unchecked the checkbox "Use DNS servers advertised by peer" at "Interfaces -> Wan -> Advanced Settings".
At "Use custom DNS servers" I have entered 192.168.1.8.
Now the DNS setting works fine. But if I deactivate Pihole (192.168.1.8 not reachable anymore), the DNS from the provider is used again. So I guess there is still a fallback somehow. ONLY 192.168.1.8 should be used.
Not OP. but if you have a large DNS block list, and your device doesn't have plenty of RAM, dnsmasq might, in some rare scenarios, allocate all of the routers available RAM, causing it to freeze/crash.
The percentage blocked is misleading, since I'm currently being hammered by devices making RRSIG requests for the domain pizzaseo.com.
And yes, it's obviously public.
OK, then it is because of implementation details. In my simple basic Parental Control, I have about 1 Mio. blocked domains, managed on openwrt router with 128MB RAM.
At first glance, 8 Mio. should fit into 512MB.
Thank you very much. After executing it, the message "udhcpc: no lease, failing" appears, is this not so bad? I have done some research and think that is correct.
OK, for 16 Mio. I would need external storage, like USB-stick. But I doubt, it really will be worth it. Actually, using shallalist adv and trackers list, result looks good enough for me.
GUI is a completely other story. "Cosmetics" is not so interesting for a good old German engineer. Although I am open for joint enhancements regarding interface.
More interesting for me was to use the same solution from mobile connection, too.
Which is done already for Android, effectively using my openwrt device as DNS server for my mobile phone (both cell connection and WiFi).
Ah, did not think about this. So you are running the Pis in a VM ?
Actually, my mobile device and the DNS server on openwrt-box at home behind ISP-router communicate via my public web server thru VPN tunnel. No need to mess around with firewall or DDNS.
Yes, two of them .... redundancy, and the the free account included two VMs
It also lets me tinker with different OSes and versions of pihole, since I can switch off/reimage one,
and no one will ever notice.
Thank you all for your responses. It works wonderfully now.
I wish there was a way to reliably include Pihole via the web interface. A setting "use external DNS" that does everything in the background. I now don't know how to reset the settings via the console. If at some point Pihole breaks I would have a serious problem. (I have made a backup). There are 100 different ways to do this in this forum and on the internet, it is often not complete.