Forever free pihole blocking on google cloud compute

[yusoffb01]

Pihole not only blocks advertisements, you can use it to block malware, tracking, dangerous websites and tld. You can also detect if a virus is running in your network by looking at which unknown website it is trying to connect to. by using regex, you can make a virus useless as it cannot connect to its domain

Setting up:
Setup is easy because someone already has created a script. Just go straight to option A
https://github.com/rajannpatel/Pi-H...Tunnel-and-Split-Tunnel-Wireguard-VPN-Configs

One additional step (at step 1) you need to do is to add port 80 and 53 to your home ip address
eg your home ip 154.205.95.36 (dynamic, isp change every 2 weeks)
put in firewall 154.205.0.0/16 so that it covers wider range
https://console.cloud.google.com/networking/firewalls/

Spoiler

After you setup everything (takes less than 5min), you can go to your free google public ip address to access your pihole admin

If you can access successfully, then everything is working.

second last step is from web browser also change settings > listening interface
Listen on all interfaces, permit all origins

FINALLY set your router wan and lan primary dns to be your google public address. use adguard (94.140.14.14) as secondary dns to cover period of downtime

 

[yusoffb01]

The forever free servers are located in the us, so response time is about 200ms.

Having millions of blocked domains do not slow down the dns resolution of the pihole. So you can go crazy adding as many dns list as possible from here or other sources. Then update gravity in settings.

https://firebog.net/

The order of resolving is whitelist > whitelist regex > blacklist > blacklist regex
If the url doesnt get blocked, it will get forwarded to the upstream dns server of.your choice

[/IMG]
Here in my worst case scenario, if you access a new site, it takes 200ms to go thru the filters, forward to upstream dns server, get an answer and reply back the ip address of the website to the client. If it is not the first time you are accessing, then reply takes 0ms as it has cache in ram

adding these lists to group management > adlists will increase by a few million.
https://hosts.oisd.nl/
https://dbl.oisd.nl/
https://raw.githubusercontent.com/mkb2091/blockconvert/master/output/domains.txt
https://raw.githubusercontent.com/tankmohit/UnifiedHosts/master/hosts.all
https://block.energized.pro/unified/formats/hosts.txt

Other categories to consider: https://github.com/blocklistproject/Lists

 

[yusoffb01]

regex is powerful because you can use it to block using wildcards. Helps to save writing individual domain entries into your blocklist. Can also block new domains not yet in your blocklist.

Try not to have too many regex as this is much slower than blocklists.

To block tld and new domains, this is what I use

\.(AC|AD|AE|AERO|AF|AG|AI|AL|AM|AN|AO|AQ|AR|AS|AT|AW|AX|AZ|BA|BB|BD|BF|BG|BH|BI|BID|BIZ|BJ|BM|BO|BR|BS|BV|BW|BY|BZ|CAM|CAT|CD|CF|CG|CI|CK|CL|CM|COOP|CR|CU|CV|CX|CY|CZ|DJ|DM|DO|DZ|EC|EG|EH|ER|ES|ET|FI|FJ|FK|FM|FO|GA|GD|GE|GF|GG|GH|GI|GL|GM|GN|GP|GQ|GR|GS|GT|GU|GW|GY|HM|HN|HR|HT|HU|ICU|IE|IM|INFO|INT|IQ|IR|IS|JE|JM|JO|JOBS|KE|KG|KH|KI|KM|KN|KP|KY|KZ|LA|LB|LC|LI|LK|LR|LS|LT|LU|LV|LY|MA|MC|MD|ME|MG|MH|MIL|MK|ML|MM|MN|MO|MP|MQ|MR|MS|MT|MU|MUSEUM|MV|MW|MX|MZ|NA|NAME|NC|NE|NF|NG|NI|NO|NP|NR|NU|OM|PA|PE|PF|PG|PK|PM|PN|PR|PRO|PS|PT|PW|PY|QA|RE|REVIEW|RO|RS|RU|RW|SB|SC|SD|SE|SH|SI|SJ|SL|SM|SN|SO|SR|ST|SU|SV|SY|SZ|TC|TD|TF|TG|TJ|TK|TL|TM|TN|TO|TP|TR|TRADE|TRAVEL|TT|TV|TW|TZ|UG|UM|UY|UZ|VA|VC|VE|VG|VI|VU|WF|WTF|WS|YE|YT|YU|ZA|ZM|ZW|AAA|AARP|ABARTH|ABB|ABBOTT|ABBVIE|ABC|ABLE|ABOGADO|ABUDHABI|ACADEMY|ACCENTURE|ACCOUNTANT|ACCOUNTANTS|ACO|ACTIVE|ACTOR|ADAC|ADS|ADULT|AEG|AETNA|AFAMILYCOMPANY|AFL|AFRICA|AGAKHAN|AGENCY|AIG|AIGO|AIRBUS|AIRFORCE|AIRTEL|AKDN|ALFAROMEO|ALIBABA|ALIPAY|ALLFINANZ|ALLSTATE|ALLY|ALSACE|ALSTOM|AMERICANEXPRESS|AMERICANFAMILY|AMEX|AMFAM|AMICA|AMSTERDAM|ANALYTICS|ANDROID|ANQUAN|ANZ|AOL|APARTMENTS|APP|APPLE|AQUARELLE|ARAB|ARAMCO|ARCHI|ARMY|ART|ARTE|ASDA|ASSOCIATES|ATHLETA|ATTORNEY|AUCTION|AUDI|AUDIBLE|AUDIO|AUSPOST|AUTHOR|AUTO|AUTOS|AVIANCA|AWS|AXA|AZURE|BABY|BAIDU|BANAMEX|BANANAREPUBLIC|BAND|BANK|BAR|BARCELONA|BARCLAYCARD|BARCLAYS|BAREFOOT|BARGAINS|BASEBALL|BASKETBALL|BAUHAUS|BAYERN|BBC|BBT|BBVA|BCG|BCN|BEATS|BEAUTY|BEER|BENTLEY|BERLIN|BEST|BESTBUY|BET|BHARTI|BIBLE|BID|BIKE|BING|BINGO|BIO|BLACK|BLACKFRIDAY|BLANCO|BLOCKBUSTER|BLOG|BLOOMBERG|BLUE|BMS|BMW|BNL|BNPPARIBAS|BOATS|BOEHRINGER|BOFA|BOM|BOND|BOO|BOOK|BOOKING|BOOTS|BOSCH|BOSTIK|BOSTON|BOT|BOUTIQUE|BOX|BRADESCO|BRIDGESTONE|BROADWAY|BROKER|BROTHER|BRUSSELS|BUDAPEST|BUGATTI|BUILD|BUILDERS|BUSINESS|BUY|BUZZ|BZH|CAB|CAFE|CAL|CALL|CALVINKLEIN|CAM|CAMERA|CAMP|CANCERRESEARCH|CAPETOWN|CAPITAL|CAPITALONE|CAR|CARAVAN|CARDS|CARE|CAREER|CAREERS|CARS|CARTIER|CASA|CASE|CASEIH|CASH|CASINO|CATERING|CATHOLIC|CBA|CBN|CBRE|CBS|CEB|CENTER|CEO|CERN|CFA|CFD|CHANEL|CHANNEL|CHARITY|CHASE|CHAT|CHEAP|CHINTAI|CHRISTMAS|CHROME|CHRYSLER|CHURCH|CIPRIANI|CIRCLE|CISCO|CITADEL|CITI|CITIC|CITY|CITYEATS|CLAIMS|CLEANING|CLICK|CLINIC|CLINIQUE|CLOTHING|CLOUD|CLUB|CLUBMED|COACH|CODES|COFFEE|COLLEGE|COLOGNE|COMCAST|COMMBANK|COMMUNITY|COMPANY|COMPARE|COMPUTER|COMSEC|CONDOS|CONSTRUCTION|CONSULTING|CONTACT|CONTRACTORS|COOKING|COOKINGCHANNEL|COOL|CORSICA|COUNTRY|COUPON|COUPONS|COURSES|CPA|CREDIT|CREDITCARD|CREDITUNION|CRICKET|CROWN|CRS|CRUISE|CRUISES|CSC|CUISINELLA|CYMRU|CYOU|DABUR|DAD|DANCE|DATA|DATE|DATING|DATSUN|DAY|DCLK|DDS|DEAL|DEALER|DEALS|DEGREE|DELIVERY|DELL|DELOITTE|DELTA|DEMOCRAT|DENTAL|DENTIST|DESI|DESIGN|DEV|DHL|DIAMONDS|DIET|DIGITAL|DIRECT|DIRECTORY|DISCOUNT|DISCOVER|DISH|DIY|DNP|DOCS|DOCTOR|DODGE|DOG|DOHA|DOMAINS|DOOSAN|DOT|DOWNLOAD|DRIVE|DTV|DUBAI|DUCK|DUNLOP|DUNS|DUPONT|DURBAN|DVAG|DVR|EARTH|EAT|ECO|EDEKA|EDUCATION|EMAIL|EMERCK|ENERGY|ENGINEER|ENGINEERING|ENTERPRISES|EPOST|EPSON|EQUIPMENT|ERICSSON|ERNI|ESQ|ESTATE|ESURANCE|ETISALAT|EUROVISION|EUS|EVENTS|EVERBANK|EXCHANGE|EXPERT|EXPOSED|EXPRESS|EXTRASPACE|FAGE|FAIL|FAIRWINDS|FAITH|FAMILY|FAN|FANS|FARM|FARMERS|FASHION|FAST|FEDEX|FEEDBACK|FERRARI|FERRERO|FIAT|FIDELITY|FIDO|FILM|FINAL|FINANCE|FINANCIAL|FIRE|FIRESTONE|FIRMDALE|FISH|FISHING|FIT|FITNESS|FLICKR|FLIGHTS|FLIR|FLORIST|FLOWERS|FLSMIDTH|FLY|FOO|FOOD|FOODNETWORK|FOOTBALL|FORD|FOREX|FORSALE|FORUM|FOUNDATION|FOX|FREE|FRESENIUS|FRL|FROGANS|FRONTDOOR|FRONTIER|FTR|FUJITSU|FUJIXEROX|FUN|FUND|FURNITURE|FUTBOL|FYI|GAL|GALLERY|GALLO|GALLUP|GAME|GAMES|GAP|GARDEN|GAY|GBIZ|GDN|GEA|GENT|GENTING|GEORGE|GGEE|GIFT|GIFTS|GIVES|GIVING|GLADE|GLASS|GLE|GLOBAL|GLOBO|GMBH|GMO|GMX|GODADDY|GOLD|GOLDPOINT|GOLF|GOO|GOODHANDS|GOODYEAR|GOP|GOT|GRAINGER|GRAPHICS|GRATIS|GREEN|GRIPE|GROCERY|GROUP|GUARDIAN|GUCCI|GUGE|GUIDE|GUITARS|GURU|HAIR|HAMBURG|HANGOUT|HAUS|HBO|HDFC|HDFCBANK|HEALTH|HEALTHCARE|HELP|HELSINKI|HERE|HERMES|HGTV|HIPHOP|HISAMITSU|HITACHI|HIV|HKT|HOCKEY|HOLDINGS|HOLIDAY|HOMEDEPOT|HOMEGOODS|HOMES|HOMESENSE|HONDA|HONEYWELL|HORSE|HOSPITAL|HOST|HOSTING|HOT|HOTELES|HOTELS|HOTMAIL|HOUSE|HOW|HSBC|HUGHES|HYATT|HYUNDAI|IBM|ICBC|ICE|ICU|IEEE|IFM|IINET|IKANO|IMAMAT|IMDB|IMMO|IMMOBILIEN|INC|INDUSTRIES|INFINITI|ING|INK|INSTITUTE|INSURANCE|INSURE|INTEL|INTERNATIONAL|INTUIT|INVESTMENTS|IPIRANGA|IRISH|ISELECT|ISMAILI|IST|ISTANBUL|ITAU|ITV|IVECO|IWC|JAGUAR|JAVA|JCB|JCP|JEEP|JETZT|JEWELRY|JIO|JLC|JLL|JMP|JNJ|JOBURG|JOT|JOY|JPMORGAN|JPRS|JUEGOS|JUNIPER|KAUFEN|KDDI|KERRYHOTELS|KERRYLOGISTICS|KERRYPROPERTIES|KFH|KIA|KIM|KINDER|KINDLE|KITCHEN|KIWI|KOELN|KOMATSU|KOSHER|KPMG|KPN|KRD|KRED|KUOKGROUP|KYOTO|LACAIXA|LADBROKES|LAMBORGHINI|LAMER|LANCASTER|LANCIA|LANCOME|LAND|LANDROVER|LANXESS|LASALLE|LAT|LATINO|LATROBE|LAW|LAWYER|LDS|LEASE|LECLERC|LEFRAK|LEGAL|LEGO|LEXUS|LGBT|LIAISON|LIDL|LIFE|LIFEINSURANCE|LIFESTYLE|LIGHTING|LIKE|LILLY|LIMITED|LIMO|LINCOLN|LINDE|LINK|LIPSY|LIVE|LIVING|LIXIL|LLC|LOAN|LOANS|LOCKER|LOCUS|LOFT|LOL|LONDON|LOTTE|LOTTO|LOVE|LPL|LPLFINANCIAL|LTD|LTDA|LUNDBECK|LUPIN|LUXE|LUXURY|MACYS|MADRID|MAIF|MAISON|MAKEUP|MAN|MANAGEMENT|MANGO|MAP|MARKET|MARKETING|MARKETS|MARRIOTT|MARSHALLS|MASERATI|MATTEL|MBA|MCKINSEY|MED|MEDIA|MEET|MELBOURNE|MEME|MEMORIAL|MEN|MENU|MEO|MERCKMSD|METLIFE|MIAMI|MICROSOFT|MINI|MINT|MIT|MITSUBISHI|MLB|MLS|MMA|MOBILE|MOBILY|MODA|MOE|MOI|MOM|MONASH|MONEY|MONSTER|MOPAR|MORMON|MORTGAGE|MOSCOW|MOTO|MOTORCYCLES|MOV|MOVIE|MOVISTAR|MSD|MTN|MTPC|MTR|MUTUAL|MUTUELLE|NAB|NADEX|NAGOYA|NATIONWIDE|NATURA|NAVY|NBA|NEC|NETBANK|NETFLIX|NETWORK|NEUSTAR|NEW|NEWHOLLAND|NEWS|NEXT|NEXTDIRECT|NEXUS|NFL|NGO|NHK|NICO|NIKE|NIKON|NINJA|NISSAN|NISSAY|NOKIA|NORTHWESTERNMUTUAL|NORTON|NOW|NOWRUZ|NOWTV|NRA|NRW|NTT|NYC|OBI|OBSERVER|OFF|OFFICE|OKINAWA|OLAYAN|OLAYANGROUP|OLDNAVY|OLLO|OMEGA|ONE|ONG|ONL|ONLINE|ONYOURSIDE|OOO|OPEN|ORACLE|ORANGE|ORGANIC|ORIENTEXPRESS|ORIGINS|OSAKA|OTSUKA|OTT|OVH|PAGE|PANASONIC|PANERAI|PARIS|PARS|PARTNERS|PARTS|PARTY|PASSAGENS|PAY|PCCW|PET|PFIZER|PHARMACY|PHD|PHILIPS|PHONE|PHOTO|PHOTOGRAPHY|PHOTOS|PHYSIO|PIAGET|PICS|PICTET|PICTURES|PID|PIN|PING|PINK|PIONEER|PIZZA|PLACE|PLAY|PLAYSTATION|PLUMBING|PLUS|PNC|POHL|POKER|POLITIE|PORN|PRAMERICA|PRAXI|PRESS|PRIME|PROD|PRODUCTIONS|PROF|PROGRESSIVE|PROMO|PROPERTIES|PROPERTY|PROTECTION|PRU|PRUDENTIAL|PUB|PWC|QPON|QUEBEC|QUEST|QVC|RACING|RADIO|RAID|READ|REALESTATE|REALTOR|REALTY|RECIPES|RED|REDSTONE|REDUMBRELLA|REHAB|REISE|REISEN|REIT|RELIANCE|REN|RENT|RENTALS|REPAIR|REPORT|REPUBLICAN|REST|RESTAURANT|REVIEW|REVIEWS|REXROTH|RICH|RICHARDLI|RICOH|RIGHTATHOME|RIL|RIO|RIP|RMIT|ROCHER|ROCKS|RODEO|ROGERS|ROOM|RSVP|RUGBY|RUHR|RUN|RWE|RYUKYU|SAARLAND|SAFE|SAFETY|SAKURA|SALE|SALON|SAMSCLUB|SAMSUNG|SANDVIK|SANDVIKCOROMANT|SANOFI|SAP|SAPO|SARL|SAS|SAVE|SAXO|SBI|SBS|SCA|SCB|SCHAEFFLER|SCHMIDT|SCHOLARSHIPS|SCHOOL|SCHULE|SCHWARZ|SCIENCE|SCJOHNSON|SCOR|SCOT|SEARCH|SEAT|SECURE|SECURITY|SEEK|SELECT|SENER|SERVICES|SES|SEVEN|SEW|SEX|SEXY|SFR|SHANGRILA|SHARP|SHAW|SHELL|SHIA|SHIKSHA|SHOES|SHOP|SHOPPING|SHOUJI|SHOW|SHOWTIME|SHRIRAM|SILK|SINA|SINGLES|SITE|SKI|SKIN|SKY|SLING|SMART|SMILE|SNCF|SOCCER|SOCIAL|SOFTBANK|SOFTWARE|SOHU|SOLAR|SOLUTIONS|SONG|SONY|SOY|SPACE|SPIEGEL|SPORT|SPOT|SPREADBETTING|SRL|SRT|STADA|STAPLES|STAR|STARHUB|STATEBANK|STATEFARM|STATOIL|STC|STCGROUP|STOCKHOLM|STORAGE|STORE|STREAM|STUDIO|STUDY|STYLE|SUCKS|SUPPLIES|SUPPLY|SUPPORT|SURF|SURGERY|SUZUKI|SWATCH|SWIFTCOVER|SWISS|SYDNEY|SYMANTEC|SYSTEMS|TAB|TAIPEI|TALK|TAOBAO|TARGET|TATAMOTORS|TATAR|TATTOO|TAX|TAXI|TCI|TDK|TEAM|TECHNOLOGY|TELECITY|TELEFONICA|TEMASEK|TENNIS|TEVA|THD|THEATER|THEATRE|TIAA|TICKETS|TIENDA|TIFFANY|TIPS|TIRES|TIROL|TJMAXX|TJX|TKMAXX|TODAY|TOOLS|TORAY|TOSHIBA|TOTAL|TOURS|TOWN|TOYOTA|TOYS|TRADE|TRADING|TRAINING|TRAVELCHANNEL|TRAVELERS|TRAVELERSINSURANCE|TRUST|TRV|TUBE|TUI|TUNES|TUSHU|TVS|UBANK|UBS|UCONNECT|UNICOM|UNIVERSITY|UNO|UOL|UPS|VACATIONS|VANA|VANGUARD|VEGAS|VENTURES|)$

To block non alphabet url use

(^|\.)xn--.*$

To block number only url

^[0-9][^a-z]+\.((com)|(net))$

To block ad or tracking domains that begins with these words

^(beacons|analytics|counter|counters|stat|stats|statistics|adtrack|adtracker|adtracking|advert|adverts|advertising|advertisements|adserver|adservice|affiliates|affiliate|affiliation)?[0-9]*[_.-]

If you feel websites load slowly, add your commonly used websites to your whitelist so that it bypasses regex filtering

 

[yusoffb01]

Filtering on your phone when outside your home.

If you followed the instructions, you would have opened up udp port for wireguard and took a picture of qr code for your wireguard setting on phone. This is not a full vpn and it only redirect your dns traffic to the google cloud compute for filtering. As it is prone to getting closed by memory managing apps, you need to lock it so the app doesnt get killed. This option also doesnt use battery significantly

on recents app view, press and hold wireguard app to open this option, then click on the lock

Another way to get filtering on your phone is to run an openvpn server on your router which your phone connects to. If.you have a supported asus router that can run merlin, flash the firmware.

 

[lumpyme]

can you use this to surf xxx at home?

 

[yusoffb01]

If all this seems complicated, a commercial option is using mynextdns.io

It is a pihole, free for first 300k queries (enough for 2 ppl), unlimited is $2 a month

If you just want adblocking, you can also use adguard dns servers

old address expiring in 2021
176.103.130.130
176.103.130.131

new address as at sep 2020
94.140.14.14
94.140.15.15

DoH/DoT: dns.adguard.com

 

[yusoffb01]

can you use this to surf xxx at home?

you can set different blocklist for different group

 

[TanKianW]

can you use this to surf xxx at home?

You dun need this to surf XXX at home. This one could be used to block your XXX though. Hahaha.

Either change your default ISP's DNS at router side or just install cloudflare 1.1.1.1 app on your mobile will do.

 

[uncle_josh]

If all this seems complicated, a commercial option is using mynextdns.io

It is a pihole, free for first 300k queries (enough for 2 ppl), unlimited is $2 a month

If you just want adblocking, you can also use adguard dns servers

176.103.130.130
176.103.130.131

DoH/DoT: dns.adguard.com

can feel that it is effective in block the ads, at the same time there is also some lag when opening links .

Sent from 天作孽 犹可恕 自作孽 不可活 using GAGT

 

[yusoffb01]

can feel that it is effective in block the ads, at the same time there is also some lag when opening links .

Sent from 天作孽 犹可恕 自作孽 不可活 using GAGT

Adguard feels slow because it is a public dns and many people using. If you setup your own and dont share your address, it will be faster

 

[Proximus]

can feel that it is effective in block the ads, at the same time there is also some lag when opening links .

Sent from 天作孽 犹可恕 自作孽 不可活 using GAGT

Nothing beats running pihole running locally in your own network.
Plus you are in control of your own data and traces....

 

[TanKianW]

Nothing beats running pihole running locally in your own network.
Plus you are in control of your own data and traces....

Yes. I have the same thoughts too.

If you are already running the much extensive pfblockerNG on your pfsense router/firewall, you can skip this. Running a "sinkhole/blocker" locally through pfsense is also much faster since it was build for such purpose.

For users not running pfsense or equivalent routing/firewall solutions, running it from a Rasp PI (get from Amazon or Taobao) unit locally works well too. I think it is a good solution to boost up the security of most home network during this WFH period.

 

[bunnypangsai]

is there any way to block youtube ads through pi-hole? I tried the other time and my youtube vids took too long to load

 

[badsector]

Adguard feels slow because it is a public dns and many people using. If you setup your own and dont share your address, it will be faster

have you tried using Adguard Home + SmartDNS?

 

[uncle_josh]

For PC, use Ublock origin extension on your browser.

For mobile phones, follow post #6, set private dns to : dns.adguard.com
very effective.

is there any way to block youtube ads through pi-hole? I tried the other time and my youtube vids took too long to load

 

[yusoffb01]

is there any way to block youtube ads through pi-hole? I tried the other time and my youtube vids took too long to load

no way except ublock origin for computer, or youtube.vanced for android phone

 

[yusoffb01]

have you tried using Adguard Home + SmartDNS?

nope only the public address

 

[YouHeypiCanLiao]

Bro if install on gcp is it fast or not ? 200ms is fast compared to those third party dns server

 

[Proximus]

Yes. I have the same thoughts too.

If you are already running the much extensive pfblockerNG on your pfsense router/firewall, you can skip this. Running a "sinkhole/blocker" locally through pfsense is also much faster since it was build for such purpose.

For users not running pfsense or equivalent routing/firewall solutions, running it from a Rasp PI (get from Amazon or Taobao) unit locally works well too. I think it is a good solution to boost up the security of most home network during this WFH period.

I re-purpose Raspberry Pi to run pihole/unbound/Wireguard(PiVPN).

With PiVPN, I can use pihole on the go.

The latency is very good compared to the major DNS.

 

[zuoom]

Nothing beats running pihole running locally in your own network.
Plus you are in control of your own data and traces....

Got to be careful though. Some packages hiject the links thru some ad redirection links.