Hacker News

points by daitangio 3 days ago | 0 comments

Telecom Italia locks my DNS server (I cannot change it).

I ended up using PIHole as DHCP, to drive home devices to PIHole, and control my privacy.

The trick is simple: disable DHCP on your router, and activate it on PIHole. As a bonus, PIHole on my RasperryPI2 is way faster than the little chip on my provider Router, and can be patched automatically with unattended upgrades.

[–] someguyornotidk 3 days ago

And if you can't disable DHCP or set the router in bridge mode, you can just add another router (that you control) between your ISP device and the rest of your network. I've been running this setup for over a decade and didn't run into any noteworthy issues. Leave the ISP-infested router outside your network.

[–] hdgvhicv 2 days ago

The whole point of ad companies like google pushing DoH is to bypass things like pinhole and take power away from you, the owner, and give it to them, the trillion dollar advertising company.

[–] noselasd 3 days ago

Note that there are ISPs that actively hijack traffic to UDP port 53 further inside their network and transparently maps that onto their internal DNS servers.

[–] jachee 3 days ago

This is why you would want to setup DNS-over-TLS or DNS-over-HTTPS to, say, 1.1.1.1. They can’t hijack DNS traffic that looks like HTTPS traffic.

[–] cowlevel 2 days ago

Cloudflare knowing every single DNS resolution is just as bad.

[–] jachee 1 day ago

Nah, because at least they give you the actual answer instead of hijacking to censor/upsell/advertise to you.

But also, they were just an easy-to-type example, and you could replace them with any other DoT/DoH provider.

[–] lxgr 1 day ago

How can they lock your DNS server? Do they filter UDP traffic on port 53? Or do you mean they don't let you change it in their provided router?

[–] a-french-anon 3 days ago

Pretty sure that you can use DHCP and still override the DNS servers with most DHCP clients.

[–] unethical_ban 2 days ago

I think they're saying that their ISP's router does not allow this, thus the need in their case to use third-party DHCP.

[–] daitangio 2 days ago

Yes but you need to do it MANUALLY on every client. Using the PIHOLE DHCP automate this and simplify the setup.