Pi-hole

[admin]

Introduction

Both Pi-hole and Adguard Home are supported open source solution for providing first level DNS and DHCP function to Area Mesh.

Some Pi-hole advantages over Adguard Home

• Group Management - Group management - Pi-hole documentation
• Not Commercial - Christmas promo | AdGuard
• Difficult Logs - How to access the query logs · AdguardTeam/AdGuardHome · Discussion #5653 · GitHub

[admin]

Pi-hole

Web SIte: https://pi-hole.net/
Documentation: https://docs.pi-hole.net/
Forum: https://discourse.pi-hole.net/
Source: GitHub - pi-hole/pi-hole: A black hole for Internet advertisements

Restarting

After configuration change
pihole restartdns

MAC Address Filtering

In the file
/etc/dnsmasq.d/03-custom-DHCP.conf

Insert the following lines

dhcp-ignore=tag:!known
dhcp-host=11:22:33:44:55:66,set:known
dhcp-host=11:22:33:44:55:66,set:known

Reference:

• DHCP server MAC-address filtering - Help - Pi-hole Userspace

[admin]

DNS over HTTPS

• https://discourse.pi-hole.net/t/can-pihole-act-as-a-doh-or-dot-server/56106
• How to identify clients when using DNS-over-HTTPS (thru doh-proxy) - General - Pi-hole Userspace
• Run a DNS-over-HTTPS (DoH) server & pihole's web admin on the same (default) SSL port while still identifying DoH clients - Community How-to's - Pi-hole Userspace

DOH Proxies

• GitHub - DNSCrypt/doh-server: Fast, mature, secure DoH and ODoH server proxy written in Rust. Previously known as doh-proxy and rust-doh.
• GitHub - DNSCrypt/dnscrypt-proxy: dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
• GitHub - cuddlyclara/SimpleDoHServer: Very simple DoH server based on Python 3, which passes the client IP via ECS.

Certificate Authority

DOH needs a Certificate Authority (CA) this might help:

GitHub - FiloSottile/mkcert: A simple zero-config tool to make locally trusted...