It apprears that NextDNS has removed No Google, No Facebook, and other blocklist without notifying users. One person said the NSA blocklist was also down. The company had made no responses to complaints on the community server when I checked earlier. Crickets…
I noticed Android and Linux being unable to access the app and web interface to confirm connections, starting some time on November 4th. I was able to switch DNS providers on Android and switch back, after which NextDNS seemed to work. On Linux however, systemd confirmed it was enabled but it went right to google’s webpage with no block.
If you’re on NextDNS, go check your domain filters ASAP. I switched to RethinkDNS, and it’s been decent so far. What is everyones preferred solution?
From their git closed tickets:
NSA: https://github.com/nextdns/blocklists/pull/105
Google and Facebook:
https://github.com/nextdns/blocklists/issues/235
From the git activity (diff linked in case anyone wants to copy and paste):
Google and Facebook: https://github.com/nextdns/blocklists/compare/8e36cfa267930a7dba8e27b0501e199c8a02b0b3...439d8b5a053aab0f93a7ad4341798ebfd1f17a0b
I can’t see a lot of this. Might be MS outage.
Edit: Also, thanks for posting these. I’ll check them out later.
IMO if you want aggressive blocklists that the average person might get frustrated by like no google then running adguard home for yourself is the way to go.
I think I’m going to try redunant Pi Holes and maybe have one agressive for me and a fallback less aggressive for family members who can’t be bothered with the inconvenience of not funding fascists by using Facebook. My fallback would be less agressive one while it would be their primary. Just an idea. We’ll see how it goes.
Got two servers on the way!
Removed by mod
My Pihole couldn’t reach all the old NextDNS blocklists I subscribe to a few days ago. Makes sense now.
Bummer! Thanks for the heads up.
We should be able to manually enter them all. We should save them while we still can.
I shifted to ControlD long time ago and have been very satisfied. Also it is a Canada company instead of a US company.
This is a privacy Lemmy group, why are people using a third party DNS server? There is Adgaurd Home, I do not use it I tried it but did not like it more than the alternative but I hear people like it. There is also Pi-Hole, I do use this and I have finally tuned it. I actually have pihole’s one for primary DNS and one for secondary DNS.
*edit: I should appologize I should really have noticed the pihole was my gateway service into self hosting and privacy. It took years for me to notice how additing the simple ad blocking was and than some movements for me to start moving more services to self hosted. I just realized it has only been months that I have set up my firewall, and now I just cannot believe I have ever lived without it.
Because we can’t implement every change at once. Just degoogling is tough as hell. I still have an account I use on a really old laptop for dealing with work and the gov just to appear conformist.
Then we have to change email, figure out vpn, find alternatives for everything under the sun, figure out what Linux we can live with and how to maintain it. What phone to buy, how to keep google away from it and Facebook from hiding under every damn thing too.
Going as fast as I can and still be sane. I’m tired boss.
There is no such thing as a perfect solution that also keeps you sane and reasonably able to function in this society of ours. I switched to Proton for mailing service and VPN, Qwant, DNS4EU and you will find people everywhere complaining that their choices are much better and whatnot. I don’t believe it matters that much, it’s more important to decouple from google and big techs in general.
Pihole was my first venture into privacy, and it was years ago. Of course I did not realize that is what it was at the time, I thought it was just ad blocking. I still have a google account for youtube, and I hate that I am using it but that is where the creaters are. I currently do not have anything strong enough to do the whole YouTube without the google thing yet, I hope to be getting a new to me Mac mini that I will install Debian on next week where I will try invedious but right now I have a pi 5 running librewolf with adguard and sponser block. Do not get me wrong it hurts me knowing I am taking money away from creators doing this but it makes me feel better knowing that the Google is not selling me.
I have my own domain that hosts emails I have a wildcard email address so I can give out random emails to people so that I could stop using Apple’s hide my email as I was slowly moving away from Apple already. When Trump got in for his second term and the boycott the US movement started I started self hosting a lot of services.
I in no way meant to implement everything at once, it has taken me years to get where I am. The pihole was just my gateway drug into doing stuff.
Trump was the straw that broke the camels back for me too. I got off Facebook in 2012 and went back to promote my bands. When people start protecting and funding pedophiles and fascists, I’m checking out. It’s a lifestyle change for sure, but I regret nothing. I’ll take my $900 mid-grade Fairphone without the bells and whistles and be happy.
I got a OpenWRT router and some servers I have not set up yet. Bought a few Pis last night to host Pi Holes too. Just wish I had local buddies to nerd with and make our own internet with antennas and tell these fascists to get fucked and host it all myself. I still can but am lonely without nerd friends. People I know never know the meanings of the words I use so I quit trying and just learn on my own.
So I was using pihole with unbound, unbound was pointed at CIRA. So I thought my my stuff was secure, @randombullet@programming.dev pointed some things out to me so I spent some time trying to learn what ODoH was and a few minutes learning that unbound does not support ODoH, it does not support DoH, but it does support DoT. DNS over HTTPS was not new to me so I did not need to spend time learning what it was but unbound does not support it, DNS over TLS was new to me but unbound does support it. As a Canadian who has three different static IP addresses and currently 2 different .ca domains CIRA knows stuff about me but I am currently still cool with their up to 24 hour logging of my DNS requests, it is just my ISP knowing that I do not use port 80 or 443 for out going stuff as all my DNS requests go out through port 853.
This is the way.
why are people using a third party DNS server?
“I finished the marathon, why are people still running?”
Because not everyone is on the same part of the journey as you. Hopefully you apply this concept more widely…
You should realize that your piholes call to 3rd party DNS servers unless you use something like unbound which queries root DNS servers.
And by the way, those root queries are unencrypted too.
So when you say root DNS servers, does that mean the ones we host? Or Unbound just updates resolvers by using queries to external DNS servers?
I do use unbound with CIRA.
CIRA is hosted in Canada which is part of FVEY.
Sorry I’m not trying to nitpick. Everyone has their own threat tolerance.
I personally just use ODoH for now. Mostly using RethinkDNS with ODoH
I understand that CIRA is Canadian. I wanted to make sure it was not going to big tech if Unbound could not do its thing. I live here in Canada, with three static IP addresses so they know about me just as much as they already know about anyone who has a domain (or two) ending in .ca!
After you mentioned ODoH I looked it up, I read about it and was going to see if unbound supported it and at this point in time it does not appear that they do. I was not going to admit defeat so I looked up DoH, no dice unbound does not support it but they do support DoT, I spent the last few hours learning about and deploying DoT from unbound to CIRA.
When CIRA changes there retention standards I may look for something else.
I want to thank you for enlightening me on my journey for more privacy.
