Pi-Hole Discussion Thread

D

destiny38

Member
Joined
Sep 30, 2002
Messages
325
Reaction score
6
Did you give your Pi-Hole a public IP, or did you VPN to your home network?
If it's the latter, what protocol is working in China?
Thanks!
 
X

xiaofan

High Supremacy Member
HWZ Insider
Joined
Sep 16, 2018
Messages
35,531
Reaction score
11,932
destiny38 said:
Did you give your Pi-Hole a public IP, or did you VPN to your home network?
If it's the latter, what protocol is working in China?
Thanks!
Click to expand...

I think he is using Tailscale.

I was using Wireguard VPN server on my OpenWRT home router. This was working for my short trip to China in Dec 2025 and my wife's short trip to China during CNY 2026.
 
K

keenklee

Arch-Supremacy Member
Joined
Sep 9, 2000
Messages
19,327
Reaction score
6,762
xiaofan said:
I think he is using Tailscale.

I was using Wireguard VPN server on my OpenWRT home router. This was working for my short trip to China in Dec 2025 and my wife's short trip to China during CNY 2026.
Click to expand...
IMHO.
So no issue if got fixed IP or alternative is to use tailscale over CGNAT ? 🤔
 
X

xiaofan

High Supremacy Member
HWZ Insider
Joined
Sep 16, 2018
Messages
35,531
Reaction score
11,932
keenklee said:
IMHO.
So no issue if got fixed IP or alternative is to use tailscale over CGNAT ? 🤔
Click to expand...

No need fixed IP (Static IPv4, only MR and VQ with paid Static IPv4 add-on), you can use DDNS as long as you have a public IPv4 (Singtel, M1, Starhub, eight, Whizcomms).

For CGNAT (SIMBA, MR and VQ without Static IPv4 add-on), you can try Tailscale. It may not work well. I will avoid CGNAT anyway.

SIMBA is the worst ISP in this regard, CGNAT without Static IPv4 add-on option.
 
D

destiny38

Member
Joined
Sep 30, 2002
Messages
325
Reaction score
6
Just WG without obfuscation worked for you? Nice! Did you have to use a particular port?
I couldn't connect on the default 51820 from China.
 
X

xiaofan

High Supremacy Member
HWZ Insider
Joined
Sep 16, 2018
Messages
35,531
Reaction score
11,932
destiny38 said:
Just WG without obfuscation worked for you? Nice! Did you have to use a particular port?
I couldn't connect on the default 51820 from China.
Click to expand...

Default portt 51820.

I created 2 profiles and rotated them.

In fact, I have two Wireguard VPN servers, each has two profiles, total 4 profiles.

How can I have two public IPv4 address with single Singtel 5Gbps plan? That is the nice part of Singtel once you bridge two ONR ports. It was also possible with legacy ONT (500Mbps/1Gbps plans) once you added a VLAN capable switch.
 
K

keenklee

Arch-Supremacy Member
Joined
Sep 9, 2000
Messages
19,327
Reaction score
6,762
xiaofan said:
Default portt 51820.

I created 2 profiles and rotated them.

In fact, I have two Wireguard VPN servers, each has two profiles, total 4 profiles.

How can I have two public IPv4 address with single Singtel 5Gbps plan? That is the nice part of Singtel once you bridge two ONR ports. It was also possible with legacy ONT (500Mbps/1Gbps plans) once you added a VLAN capable switch.
Click to expand...
IMHO.
Thank you hor. Although I need to KIV for the moment. :cool:
 
K

keenklee

Arch-Supremacy Member
Joined
Sep 9, 2000
Messages
19,327
Reaction score
6,762
xiaofan said:
The guide is here if you want to try. Cost of TL-SG105E and TL-SG108E are pretty low (VLAN capable gigabit switch). Only for legacy SongTel ONT users.
https://forums.hardwarezone.com.sg/threads/working-singtel-vlan-settings-with-tplink-sg108e.5746952/
Click to expand...
IMHO.
I have this switches BNIB somewhere... waiting to be used for something. :ROFLMAO:
I thought maybe I can use my Beryl for more "protection".
One of my idea is have make my Singtel and Eight talk to each other ... that will be cool. 🤔
 
Jurong640

Jurong640

High Supremacy Member
HWZ Insider
Joined
Mar 22, 2011
Messages
43,890
Reaction score
17,850

Pi-hole FTL v6.6.1 and Core v6.4.2 Released!​

This release is mostly about addressing two security advisories – one in FTL and one in Core. We’d like to thank the researchers who responsibly disclosed these issues.

Full details for both advisories can be found at the following links:

Details of all other fixes can be found below!

FTL v6.6.1​

What’s Changed​

  • Add new GET /api/config/_properties endpoint by u/DL6ER in #2356
  • Fix thread-safety issues causing SIGSEGV under concurrent API load by u/DL6ER in #2835
  • fix: fix rare race condition for SHM strings in API handlers by u/DL6ER in #2833
  • Accept punycode domains that libidn2 rejects under IDNA2008 by u/DL6ER in #2838
  • Improve shutdown diagnostics to identify SIGTERM source by u/DL6ER in #2839
  • Resolve empty backtraces when addr2line is not installed by u/DL6ER in #2831
  • Improve thread-safety for concurrent API requests by u/DL6ER in #2847
  • Don’t skip device lookup when resolver.macNames is disabled by u/DL6ER in #2846
  • Fix linker error when compiling w/o optimization by u/aeolio in #2850
  • Clarify dns.blockESNI wording by u/darkexplosiveqwx in #2784
  • Preserve log file path config when fopen fails by u/DL6ER in #2834

Security advisories​

New Contributors​

Full Changelog: v6.6…v6.6.1

Core v6.4.2​

What’s Changed​

Security advisories​

Full Changelog: v6.4.1…v6.4.2
 
Jurong640

Jurong640

High Supremacy Member
HWZ Insider
Joined
Mar 22, 2011
Messages
43,890
Reaction score
17,850

Pi-hole FTL v6.6.1 and Core v6.4.2 Released!​

This release is mostly about addressing two security advisories – one in FTL and one in Core. We’d like to thank the researchers who responsibly disclosed these issues.

Full details for both advisories can be found at the following links:

Details of all other fixes can be found below!

FTL v6.6.1​

What’s Changed​

  • Add new GET /api/config/_properties endpoint by u/DL6ER in #2356
  • Fix thread-safety issues causing SIGSEGV under concurrent API load by u/DL6ER in #2835
  • fix: fix rare race condition for SHM strings in API handlers by u/DL6ER in #2833
  • Accept punycode domains that libidn2 rejects under IDNA2008 by u/DL6ER in #2838
  • Improve shutdown diagnostics to identify SIGTERM source by u/DL6ER in #2839
  • Resolve empty backtraces when addr2line is not installed by u/DL6ER in #2831
  • Improve thread-safety for concurrent API requests by u/DL6ER in #2847
  • Don’t skip device lookup when resolver.macNames is disabled by u/DL6ER in #2846
  • Fix linker error when compiling w/o optimization by u/aeolio in #2850
  • Clarify dns.blockESNI wording by u/darkexplosiveqwx in #2784
  • Preserve log file path config when fopen fails by u/DL6ER in #2834

Security advisories​

 
K

keenklee

Arch-Supremacy Member
Joined
Sep 9, 2000
Messages
19,327
Reaction score
6,762
Jurong640 said:
i use it on router level, home network wide. Every device connected to my home network is using pi-hole
Click to expand...
IMHO.
I mean the hardware, like raspberry PI, mini PC, etc
I don't have anything now, just wondering how to run it. 🤔
 
K

keenklee

Arch-Supremacy Member
Joined
Sep 9, 2000
Messages
19,327
Reaction score
6,762
Jurong640 said:
I bought a Orangepi Zero 3 few years ago. Connect the pi to my router via Ethernet cable.
Click to expand...
IMHO.
I think I will look at this, I have a Pi ( dunno which version ) but this OrangePi is faster and also not so expensive.
 
You must log in or register to reply here.
Important Forum Advisory Note
This forum is moderated by volunteer moderators who will react only to members' feedback on posts. Moderators are not employees or representatives of HWZ Forums. Forum members and moderators are responsible for their own posts. Please refer to our Community Guidelines and Standards and Terms and Conditions for more information.
Top