On: ChatGPT now knows what you do on other websites via ad collector

[jsrozner]

I keep meaning to set this up but haven't. What's the simplest best setup for my own DNS blocker?

[eevahr → jsrozner]

For simplicity I highly recommend https://nextdns.io. Supports most devices, and probably most, if not all, well known blacklists.

[Melatonic → eevahr]

Also recommend NextDNS

Forget if they have Hagezi though. Also it would be really nice if there was a way to export and import custom URL lists and rules....

[drnick1 → jsrozner]

The easiest off-the-shelf option would be a router running OpenWrt. IIRC, it natively uses dnsmasq, and the relevant blacklists can be obtained from here:

https://github.com/hagezi/dns-blocklists

My own setup is DIY: a Debian box running Unbound (recursive DNS) with the RPZ blacklists from above. This gets rid of the upstream DNS service such as the ISP's completely, and prevents tampering or censorship.

[anygivnthursday → jsrozner]

For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).

[kuerbel → jsrozner]

Hmmm Pihole I guess. Runs on a pi zero (1 or 2 but 2 is better ofc)