Proximus
Supremacy Member
- Joined
- May 21, 2001
- Messages
- 7,004
- Reaction score
- 93
Do not get you. Any examples to share?
Forever free pihole blocking on google cloud compute
- Thread starter yusoffb01
- Start date
Do not get you. Any examples to share?
yusoffb01
Arch-Supremacy Member
- Joined
- Jun 17, 2008
- Messages
- 16,833
- Reaction score
- 1,780
It keeps a cache so it is fast if you visit the same site multiple times a day. the moment i press enter, can see chrome browser change from resolving host to waiting for server.
Anyway the purpose of this isn't speed.
You can monitor what goes on in your network without buying a separate hardware firewall
You can secure your network if you block tld that you never use. eg if have an app/virus you download and it tries to send data to a .za domain, it will fail and you can see the logs.
You can also get the same blocking on your phone if you follow the steps
You will also find out interesting things like why your phone drain so much battery at night
Wifi off, almost no activity in the network
Wifi on but ppl still sleeping, have 400 connections in 1 hour
Wifi on but ppl still sleeping, have 400 connections in 1 hour
If you play shitty mobile games or use free mobile apps or use xiaomi built in apps that spam you with video/ads, all that is filtered. no need to pay for premium version for ad free experience. no more mafia city ads
You will also be surprised to find out that asus routers send a lot of data to their servers even when you opt out and disable the ai functions. mine was sending 6000 times a day. huawei routers surprisingly dont send out much
Last edited:
tho you need a vps.
yusoffb01
Arch-Supremacy Member
- Joined
- Jun 17, 2008
- Messages
- 16,833
- Reaction score
- 1,780
forcing google safe search
https://github.com/jaykepeters/PSS
https://github.com/jaykepeters/PSS
- Joined
- Sep 16, 2018
- Messages
- 36,335
- Reaction score
- 12,302
How many block lists are you using to reach that 4.1 million number?
Pihole not only blocks advertisements, you can use it to block malware, tracking, dangerous websites and tld. You can also detect if a virus is running on one of your computers by looking at which unknown website it is trying to connect to
Just setting up a vanilla pihole server (without wireguard stuff) on free Google Cloud VM instance and it seems to work fine.
Last edited:
yusoffb01
Arch-Supremacy Member
- Joined
- Jun 17, 2008
- Messages
- 16,833
- Reaction score
- 1,780
wireguard is for mobile phone when u are outside. at 5million now. the basic one only block ads. you can block tracking and malware sites
once you start blocking tracking, your % blocked shouod be more than 50%.
adding this lists will increase by a few million.
https://hosts.oisd.nl/
https://dbl.oisd.nl/
https://raw.githubusercontent.com/mkb2091/blockconvert/master/output/domains.txt
https://raw.githubusercontent.com/tankmohit/UnifiedHosts/master/hosts.all
https://block.energized.pro/unified/formats/hosts.txt
Last edited:
yusoffb01
Arch-Supremacy Member
- Joined
- Jun 17, 2008
- Messages
- 16,833
- Reaction score
- 1,780
whitelisting helps speed up resolution, plus removes wrongly added addresses
Torrent trackers
common websites
sg websites regex
(\.|^)gov\.sg$
(\.|^)edu\.sg$
(\.|^)org\.sg$
If you use apple products
Torrent trackers
Code:
1337.abcvg.info
6ahddutb1ucc3cp.ru
9.rarbg.me
9.rarbg.to
aaa.army
adm.category5.tv
admin.videoenpoche.info
adminion.n-blade.ru
anidex.moe
api.bitumconference.ru
aruacfilmes.com.br
atrack.pow7.com
bclearning.top
benouworldtrip.fr
bitsparadise.info
bt.firebit.org
bt.henbt.com
bt.pusacg.org
bt.xxx-tracker.com
bt1.archive.org
bt2.54new.com
bt2.archive.org
bt2.careland.com.cn
btt.royalquest.ru
bubu.mapfactor.com
camera.lei001.com
cdn-1.gamecoast.org
cdn-2.gamecoast.org
chanchan.uchuu.co.uk
code2chicken.nl
concen.org
daveking.com
discord.heihachi.pw
dpiui.reedlan.com
drumkitx.com
eddie4.nl
edu.uifr.ru
eliastre100.fr
engplus.ru
exodus.desync.com
explodie.org
fe.dealclub.de
forever-tracker.zooki.xyz
free-tracker.zooki.xyz
git.vulnix.sh
h4.trakx.nibba.trade
handrew.me
inferno.demonoid.is
inferno.demonoid.pw
ipv4.tracker.harry.lu
jsb.by00
kanal-4.de
koli.services
line-net.ru
ln.mtahost.co
mail.realliferpg.de
mgtracker.org
movies.zsw.ca
mts.tvbit.co
nagios.tks.sumy.ua
ns-1.x-fins.com
ns389251.ovh.net
open.acgnxtracker.com
open.acgtracker.com
open.lolicon.eu
open.stealth.si
open.touki.ru.php
opentor.org
opentracker.arg.bz
opentracker.i2p.rocks
p4p.arenabg.ch
p4p.arenabg.com
pow7.com
public.popcorn-tracker.org
public.publictracker.xyz
publictracker.xyz
public-tracker.zooki.xyz
qg.lorzl.gq
retracker.akado-ural.ru
retracker.gorcomnet.ru
retracker.krs-ix.ru
retracker.lanta-net.ru
retracker.local.msn-net.ru
retracker.netbynet.ru
rt.tace.ru
rutorrent.frontline-mod.com
sd-161673.dedibox.fr
secure.pow7.com
shadowshq.eddie4.nl
shadowshq.yi.org
storage.groupees.com
t.acg.rip
t.nyaatracker.com
t.overflow.biz
t1.leech.ie
t1.pow7.com
t2.leech.ie
t2.pow7.com
t3.leech.ie
teamspeak.value-wolf.org
thetracker.org
torrent.gresille.org
torrentsmd.com
tr.bangumi.moe
tr.cili001.com
tracker.aletorrenty.pl
tracker.anonwebz.xyz
tracker.army
tracker.baravik.org
tracker.bittor.pw
tracker.bittorrent.am
tracker.blacksparrowmedia.net
tracker.bt4g.com
tracker.calculate.ru
tracker.coppersurfer.tk
tracker.cyberia.is
tracker.dler.org
tracker.ds.is
tracker.dutchtracking.com
tracker.dutchtracking.nl
tracker.dyne.org
tracker.eddie4.nl
tracker.edoardocolombo.eu
tracker.ex.ua
tracker.filemail.com
tracker.filetracker.pl89
tracker.flashtorrents.org
tracker.fortu.io
tracker.gbitt.info
tracker.grepler.com
tracker.hama3.net
tracker.ilibr.org
tracker.imgoingto.icu
tracker.internetwarriors.net
tracker.kali.org
tracker.kamigami.org
tracker.kicks-ass.net
tracker.kuroy.me
tracker.leechers-paradise.org
tracker.lelux.fi
tracker.mg64.net
tracker.moeking.me
tracker.nitrix.me
tracker.noobsubs.net
tracker.opentrackr.org
tracker.piratepublic.com
tracker.publictracker.xyz
tracker.shkinev.me
tracker.sktorrent.net
tracker.skynetcloud.site
tracker.skyts.net
tracker.sloppyta.co
tracker.tamersunion.org
tracker.tfile.me
tracker.tiny-vps.com
tracker.torrent.eu.org
tracker.tvunderground.org.ru
tracker.uw0.xyz
tracker.v6speed.org
tracker.vulnix.sh
tracker.ygsub.com
tracker.yoshi210.com
tracker.zemoj.com
tracker.zerobytes.xyz
tracker.zum.bi
tracker0.ufibox.com
tracker1.itzmx.com
tracker1.wasabii.com.tw
tracker2.dler.org
tracker2.indowebster.com
tracker2.itzmx.com
tracker2.wasabii.com.tw
tracker3.itzmx.com
tracker4.itzmx.com
tracker4.piratux.com
tracker6.dler.org
tracker-udp.gbitt.info
trakx.herokuapp.com
trun.tom.ru
tsundere.pw
u.wwwww.wtf
ultra.zt.ua
w.wwwww.wtf
nyaa.tracker.wf
www.wareztorrent.com
zephir.monocul.us
zer0day.ch
zer0day.to
tracker6.lelux.fi
xxxtor.com
web4.obit.ru
tracker.trackerfix.com
tracker.doko.moe
tr.kxmp.cf
pt.lax.mx
opentracker.acgnx.se
anisource.spb.ru
retracker.hotplug.ru
open.demonii.si
ipv6.tracker.harry.lu
chihaya.toss.li
retracker.telecom.by
retracker.bashtel.ru
torrentsmd.me
tracker.acgnx.se
tracker.ipv6tracker.ru
tracker.files.fm
servandroidkino.ru
retracker.spark-rostov.ru
0d.kebhana.mx
retracker.mgts.by
omg.wtftrackr.pw
torrent.nwps.wscommon websites
Code:
shopee.sg
lazada.com
download.microsoft.com
microsoft.com
m.facebook.com
www.alexa.com
wikipedia.org
google.com
youtube.com
facebook.com
forums.hardwarezone.com.sg
hardwarezone.com.sg
taobao.com
yahoo.com
amazon.com
wikipedia.org
zoom.us
reddit.com
www.reddit.com
old.reddit.com
netflix.com
microsoft.com
instagram.com
alipay.commyshopify.com
twitch.tv
bing.com
naver.com
aliexpress.com
ebay.com
stackoverflow.com
telegram.org
dbs.com.sg
qoo10.sg
play.google.com
www.dropbox.com
appgrid-api.cloud.accedo.tv
mediacorp.sc.omtrdc.net
app-measurement.com
2.android.pool.ntp.org
akamaihd.net
akamaitechnologies.com
amazonaws.com
appsbackup-pa.clients6.google.com
appsbackup-pa.googleapis.com
aspnetcdn.com
ax.phobos.apple.com.edgesuite.net
brightcove.net
cdn.cloudflare.net
cdn.embedly.com
cdn.vidible.tv
cdn2.optimizely.com
cdn3.optimizely.com
cdnjs.cloudflare.com
dynupdate.no-ip.com
g.live.com
giphy.com
github.com
github.io
googleapis.com
gstatic.com
i1.ytimg.com
instantmessaging-pa.googleapis.com
live.comsg websites regex
(\.|^)gov\.sg$
(\.|^)edu\.sg$
(\.|^)org\.sg$
If you use apple products
Code:
albert.apple.com
humb.apple.com
static.ips.apple.com
tbsc.apple.com
time-ios.apple.com
time.apple.com
appldnld.apple.com
gg.apple.com
gnf-mdn.apple.com
gnf-mr.apple.com
gs.apple.com
ig.apple.com
mesu.apple.com
ns.itunes.apple.com
oscdn.apple.com
osrecovery.apple.com
skl.apple.com
swdist.apple.com
swdownload.apple.com
swpost.apple.com
swscan.apple.com
updates-http.cdn-apple.com
updates.cdn-apple.com
xp.apple.com
ppq.apple.com
lcdn-registration.apple.com
crl.apple.com
crl.entrust.net
crl3.digicert.com
crl4.digicert.com
captive.apple.com
ocsp.entrust.net
ocsp.verisign.net
gdmf.apple.com
deviceenrollment.apple.com
deviceservices-external.apple.com
identity.apple.com
iprofiles.apple.com
mdmenrollment.apple.com
setup.icloud.com
vpp.itunes.apple.com
Last edited:
yusoffb01
Arch-Supremacy Member
- Joined
- Jun 17, 2008
- Messages
- 16,833
- Reaction score
- 1,780
xiaomi phones has a lot of tracking
Add xiaomi tracking to blocklist
and regex
(\.|^)izatcloud\.net$
you shouldnt see any advertisements in any xiaomi apps while on wifi anymore
Add xiaomi tracking to blocklist
Code:
app.chat.xiaomi.net
ccc.sys.miui.com
ccc.sys.intl.miui.com
connect.rom.miui.com
api.sec.intl.miui.com
api.sec.miui.com
auth.be.sec.miui.com
auth.be.sec.intl.miui.com
weatherapi.market.xioami.com
resolver.msg.xiaomi.net
bestcardforxiaomiyi.world
bigota.d.miui.c.mgslb.com
buyxiaomi.online
buyxiaomimi6.com
djxiaoming.com
guanxiaomian.com
miui.hftaili.com
miui2api.smi2.net
miui6.net
proxy.xiaomidi.cn
proxy.yixiaomi.cn
www.djxiaoming.com
www.xiaomi-aliexpress.store
www.xiaomi-support.com
www.xiaomi-support.ru
www.xiaomi.support
www.xiaomisupport.co.uk
xiaomi-mipdx.cn.miaozhen.com
xiaomi-support.com
xiaomi-support.ru
xiaomi.support
xiaomiir.yaokantv.com
xiaomimobile.app
xiaomisupport.co.uk
ad.xiaomi.com
ad1.xiaomi.com
adinfo.ra1.xlmc.sec.miui.com
api.ad.intl.xiaomi.com
api.ad.xiaomi.com
api.admob.xiaomi.com
cdn.ad.xiaomi.com
clock.ad.xiaomi.com
e.ad.xiaomi.com
globalapi.ad.xiaomi.com
log.ad.xiaomi.com
m.track.ad.xiaomi.com
new.api.ad.xiaomi.com
sdkconfig.ad.intl.xiaomi.com
sdkconfig.ad.xiaomi.com
ssp.ad.xiaomi.com
test.ad.xiaomi.com
test.e.ad.xiaomi.com
test.new.api.ad.xiaomi.com
test.zeus.ad.xiaomi.com
teste.ad.xiaomi.com
track.ad.xiaomi.com
www.api.ad.intl.xiaomi.com
zeus.ad.intl.xiaomi.com
zeus.ad.xiaomi.com
tracking.india.miui.com
tracking.intl.miui.com
tracking.miui.com
fcanr.tracking.miui.com
a.stat.xiaomi.com
abtest.mistat.india.xiaomi.com
abtest.mistat.intl.xiaomi.com
abtest.mistat.xiaomi.com
data.mistat.india.xiaomi.com
data.mistat.intl.xiaomi.com
data.mistat.xiaomi.com
stat.pandora.xiaomi.com
storeconfig.mistat.intl.xiaomi.com
storeconfig.mistat.xiaomi.com
zx.game.xiaomi.comstat.xiaomi.com
cn.app.chat.xiaomi.netand regex
(\.|^)izatcloud\.net$
you shouldnt see any advertisements in any xiaomi apps while on wifi anymore
Last edited:
Trans-Am
Supremacy Member
- Joined
- Apr 2, 2014
- Messages
- 7,361
- Reaction score
- 411
Where/how do we add in these listswireguard is for mobile phone when u are outside. at 5million now. the basic one only block ads. you can block tracking and malware sites
once you start blocking tracking, your % blocked shouod be more than 50%.
adding this lists will increase by a few million.
https://hosts.oisd.nl/
https://dbl.oisd.nl/
https://raw.githubusercontent.com/mkb2091/blockconvert/master/output/domains.txt
https://raw.githubusercontent.com/tankmohit/UnifiedHosts/master/hosts.all
https://block.energized.pro/unified/formats/hosts.txt
Sent from A universe Where pink PWNED everything using GAGT
yusoffb01
Arch-Supremacy Member
- Joined
- Jun 17, 2008
- Messages
- 16,833
- Reaction score
- 1,780
group management > adlist
- Joined
- Sep 16, 2018
- Messages
- 36,335
- Reaction score
- 12,302
Thanks. Indeed it increases by one million.
I will monitoring the percent blocked value. Now it is only 20%.
- Joined
- Sep 16, 2018
- Messages
- 36,335
- Reaction score
- 12,302
Great list. This is really very helpful. (I am not using torrent).
- Joined
- Sep 16, 2018
- Messages
- 36,335
- Reaction score
- 12,302
BTW, how stable is this Google Cloud Pi-hole instance for you?
It was down for two hours for me yesterday (server is up, no issues with ping but Pi-hole instance was down, I have to restart the Pi-hole).
To play safe, I have set the Pi-hole DNS (with 4 upstream DNS, Google, Cloudflare, OpenDNS and Quad 9 filtered) as the main DNS but then add one (Android) or two other DNS (iOS) as the backup (Google or Cloudflare or default router gateway).
Last edited:
The google public address is the "External IP" (that start with 35.239 in your image)?
I input mine into the router's wan dns setting and the internet connection is disconnected.
My pi-hole setup seems blocking well - tested it with my phone connected using wireguard.
Is there something that I missed for the router setting? My router is Asus AC86U.
yusoffb01
Arch-Supremacy Member
- Joined
- Jun 17, 2008
- Messages
- 16,833
- Reaction score
- 1,780
see first post
u need to add your home ip address to firewall. once you can access your pihole (google public address via browser) means settings are correct.
fom web browser also change settings > listening interface
Listen on all interfaces, permit all origins
yusoffb01
Arch-Supremacy Member
- Joined
- Jun 17, 2008
- Messages
- 16,833
- Reaction score
- 1,780
it has been running a few months. the only downtime was when it came up in the news. even then it is running, didnt need to restart.
to be safe your secondary dns in router can use adguard dns. if your isp change your ip address every 2 weeks u need to update, or use
eg your home ip 154.205.95.36
put in firewall 154.205.0.0/16 so that it covers wider range
- Joined
- Sep 16, 2018
- Messages
- 36,335
- Reaction score
- 12,302
Thanks for the info. I will try your suggestions and monitor the situation.
Right now I am using SingTel provided router as my main router and I can not change its DNS servet setting. So I am changing DNS on per device basis.
I am a SingTel ONT user so that my Huawei AX3 Pro can not be used as the main router and normally I use it as an AP. However as a testing, I have used it as a router (Double NAT) and put the Pi-Hole DNS as its main DNS. I will try adguard DNS as the secondary DNS on this router.
Edit to add:
First day of running.
Last edited:
Trans-Am
Supremacy Member
- Joined
- Apr 2, 2014
- Messages
- 7,361
- Reaction score
- 411
The forever free servers are located in the us, so response time is about 200ms.
Having millions of blocked domains do not slow down the dns resolution of the pihole. So you can go crazy adding as many dns list as possible from here or other sources. Then update gravity in settings.
https://firebog.net/
The order of resolving is whitelist > whitelist regex > blacklist > blacklist regex
If the url doesnt get blocked, it will get forwarded to the upstream dns server of.your choice
[/IMG]
Here in my worst case scenario, if you access a new site, it takes 200ms to go thru the filters, forward to upstream dns server, get an answer and reply back the ip address of the website to the client. If it is not the first time you are accessing, then reply takes 0ms as it has cache in ram
adding these lists to group management > adlists will increase by a few million.
https://hosts.oisd.nl/
https://dbl.oisd.nl/
https://raw.githubusercontent.com/mkb2091/blockconvert/master/output/domains.txt
https://raw.githubusercontent.com/tankmohit/UnifiedHosts/master/hosts.all
https://block.energized.pro/unified/formats/hosts.txt
if i want to add all firebog ticked lists i type this in?
https://v.firebog.net/hosts/lists.php?type=tick
- Joined
- Sep 16, 2018
- Messages
- 36,335
- Reaction score
- 12,302
No need to type. Just copy the whole thing and then paste into the pi-hole adlist management interface. The web interface is smart enough to know that you are adding multiple lists.
Yup, I followed your first post.
In the firewall, I used 0.0.0.0/0 and added tcp and udp ports 53 and 80. I can access the pi-hole with the google public address via browser as well.
When I update the wan dns on the router to the google public address, the internet connection disconnect.
Not sure if this matters - my isp is whizcomms and the wan ip is 156.249.x.x (whizcomms usually has an wan ip of 192.x.x.x, and I changed the ont with them).
Last edited:
Important Forum Advisory Note
This forum is moderated by volunteer moderators who will react only to members' feedback on posts. Moderators are not employees or representatives of HWZ Forums. Forum members and moderators are responsible for their own posts.
Please refer to our Community Guidelines and Standards and Terms and Conditions for more information.
