can i just setup dns blocking on my network to block the ad requests? especially...

sunshowers · 2024-10-11T18:59:35 1728673175

So yes... but the issue with DNS blocking is in the exceptions.

First, exceptions are at the domain level. So you can't say "allow this domain on this site", you have to blanket-allow a domain or not.

Second, the UX for making exceptions isn't great. With uBO it's just a couple of clicks. With something like Pi-hole it's more complex: https://discourse.pi-hole.net/t/how-do-i-whitelist-or-blackl...

WesolyKubeczek · 2024-10-11T15:03:55 1728659035

Not enough, especially since your browser may weasel out of it by using its own DNS via DoH.

surajrmal · 2024-10-11T15:26:17 1728660377

Are you aware of any that do this? I've been using pihole for years and have no complaints. I've only seen smart TVs seem to do this, although it's usually configurable.

WesolyKubeczek · 2024-10-11T20:41:13 1728679273

One example that I was remembering was Chromecast. It needed Google DNS to work at all.

In general, though if an app sticks to "known good" DNS over HTTPS and pins its certificate to boot, it will bypass DNS-based adblocking very easily, and additionally will punish you by not working at all if you try to do any firewall/routing trickery.