dnsmasq VS hosts

That's when you connect to your VPN.

I have a network configuration with 2 dnsmasqs, 1 with pi-hole-style hosts block, and 1 without, and most of my devices get the ad-blocking DNS, 1 gets the "unfiltered" DNS, on dnsmasq you can tag MAC addresses and create different configurations (including which DNS they get) for each tag, e.g. https://github.com/imp/dnsmasq/blob/770bce967cfc9967273d0acf...

This seems like an improvement over my current solution in that it can keep multiple projects open simultaneously and route to each of them, but does add more complexity to the setup.

I'm using Dnsmasq (https://thekelleys.org.uk/dnsmasq/doc.html) to map anything at .lo to the currently running project, like so:

  brew install dnsmasq

I would use a simple dns proxy like Blocky if you want adblocking or dnsmasq if you don't.

The wild thing about this strip is that its real https://thekelleys.org.uk/dnsmasq/doc.html.

The pervious setup was much the same except the lab was under the UDMP without another gateway. I used UnifiOS to create networks(vLANs) and trusted that segregation to work. It did not. As I progressed in my home lab, I went through a few hypervisors and settled on EXSi and vSphere. 100% overkill but that is what labbing is for right? again progressing through and adding things like windows AD and many Home Automation things like Home Assistant, Node Red and MQTT. through all of this I struggled with DHCP/DNS, mostly conflicts with misconfigured vLANs etc. This led me to research the DHCP/DNS running on the UDMP, it is Dnsmasq which is very capable of doing the things I learned I needed like conditional forwarding and statics routes(yes the GUI has this, will get to that). After reading posts like this about the possibility of modifying dnsmasq through scripts, I was concerned about the viability of this long term as my 2nd use case(family) would be effected by any complications. This led me to the above design, which I then implemented.

If you can handle all these, then the easiest way to setup a local dev DNS is dnsmasq. You can install it via HomeBrew.

If you are still interested, I heartily suggest using dnsmasq to do the dhcp/tftp/PXE service. I’ve used it on airgapped networks to boot systems and install a base Linux OS or run diagnostic tools.

It turns out that this was a rather short-term problem for me, so I do not have any reason to try my hand at a solution at this time. However, dnsmasq provides a DBus interface, so it seems like it would be trivial to script up a resolved replacement and register/unregister nameservers in runit run/finish files. Unbound's control interface may be a viable option as well.

Not by default but a blocklist can be found here https://github.com/StevenBlack/hosts

While it is now unblocked, the Steven Black list has been blocking a lot of innocent CDNs.

jQuery: https://github.com/StevenBlack/hosts/issues/2520

How does this compare to using a hosts file with known ad servers?

like: https://github.com/StevenBlack/hosts

I use the Hosts file to block a ton of ads and that works really well. https://github.com/StevenBlack/hosts Something worth considering if your ad blocker isn't working well.

The no-tracking project used by RaspAP is shutting down, so we took the opportunity to search for open source blocklist alternatives. Among the best is Steven Black's hosts list: https://github.com/StevenBlack/hosts

No idea, api.radar.io is on the block list since January 2020.

The commit's comment is "major update from adaway.org"

https://github.com/stevenblack/hosts/commit/4fa0470

You can also use a declarative adblocker like uBlock Origin Lite [1], which only provides the browser with a list of elements to filter, but doesn't have any permissions to read content or perform requests. Or simply use your hosts file to apply OS-wide filtering with no browser add-ons needed: https://github.com/StevenBlack/hosts

Be aware that if you use these "passive" blocking methods, there are some sites like YouTube where you will see ads, because in these cases it's necessary to actually manipulate page content to hide them. What you can do is use a traditional adblocker but enable it only for these few sites where the declarative approach is not enough, take a look at [2] for more details.

[1] https://github.com/uBlockOrigin/uBOL-home

[2] https://seirdy.one/posts/2022/06/04/layered-content-blocking...

https://github.com/StevenBlack/hosts if you want to do it on your PC.

When I select my custom hosts file, it basically breaks internet. However, if I choose a custom hosts file that is a copy of the dev's default, or if I just add a few lines to it, it will work. If I add too many lines, or use a different hosts file altogether (like the ones recommended by the dev), all connectivity breaks. Of course the latest official LetMeBlock is installed and mDNSResponder killed/restarted. I'm using Dopamine on A12+.