Thread

1. drnick1 · 1789925079 · focus · HN ↗

   My DNS server (which uses Hagezi's excellent blacklists) returns NXDOMAIN for bzr.openai.com. Serves OpenAI right.

   1. jsrozner · 1789925190 · focus · HN ↗

      I keep meaning to set this up but haven't. What's the simplest best setup for my own DNS blocker?

      1. drnick1 · 1789925997 · focus · HN ↗

         The easiest off-the-shelf option would be a router running OpenWrt. IIRC, it natively uses dnsmasq, and the relevant blacklists can be obtained from here:

         <a href="https:&#x2F;&#x2F;github.com&#x2F;hagezi&#x2F;dns-blocklists" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;hagezi&#x2F;dns-blocklists

         My own setup is DIY: a Debian box running Unbound (recursive DNS) with the RPZ blacklists from above. This gets rid of the upstream DNS service such as the ISP&#x27;s completely, and prevents tampering or censorship.

      2. kuerbel · 1789926040 · focus · HN ↗

         Hmmm Pihole I guess. Runs on a pi zero (1 or 2 but 2 is better ofc)
      3. eevahr · 1789926602 · focus · HN ↗

         For simplicity I highly recommend <a href="https:&#x2F;&#x2F;nextdns.io" rel="nofollow">https:&#x2F;&#x2F;nextdns.io. Supports most devices, and probably most, if not all, well known blacklists.

         1. Melatonic · 1789966693 · focus · HN ↗

            Also recommend NextDNS

            Forget if they have Hagezi though. Also it would be really nice if there was a way to export and import custom URL lists and rules....

      4. anygivnthursday · 1789934264 · focus · HN ↗

         For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).

Unofficial Hacker News client; not affiliated with Y Combinator.