I’ve just set up my pihole and I’m considering the best way to configure it. Is it a good idea to set the default group to block (almost) all domains and then manually add trusted devices to another group with a “normal” block list? My use case is untrustworthy devices that I don’t want phoning home but which might change their IP address.

  • smeg@feddit.ukOPEnglish
    2·
    6 days ago

    The trouble is that I don’t want an untrusted device to be able to call out at all, and I won’t know where it’s trying to reach until I connect it

        • Taleya@aussie.zoneEnglish
          3·
          6 days ago

          most routers allow dual wireless networks now, you should be able to set one that’s exclusively for IoT. So you have MyWifi and WifiForThings.

          You can then set the WifiForThings to have no actual internet access. This will mean that any apps etc won’t work though, so be aware.

              • smeg@feddit.ukOPEnglish
                1·
                5 days ago

                Any idea how I go about setting up a second sub(?)network? I’ve got a load of old routers but I’ve always assumed they’re too locked down to be of any use.

            • Taleya@aussie.zoneEnglish
              2·
              6 days ago

              You could explore openwrt if you were inclined - you should be able to set a static ip assignation for the device and then just block that off

              • smeg@feddit.ukOPEnglish
                1·
                6 days ago

                I’ve seen it mentioned a lot over the years, ultimately I think I’d just be making a rod for my own back by giving myself another device to support! I have considered it before but I just feel I’m going to spend a load of time tinkering every time I move house or change ISP, and paying for the privilege of buying my own hardware while I’m at it.

                • Taleya@aussie.zoneEnglish
                  2·
                  6 days ago

                  Eh? Not really. It’s router firmware that means you have more in depth control. It’s no different from any byo modem router deal

                  • smeg@feddit.ukOPEnglish
                    1·
                    6 days ago

                    I mean that buying a new device (which I guess I then might have to replace in X years) and configuring it to use openwrt is going to take some time and effort, and ultimately I might end up in a worse situation (than my current “working OK” setup). Maybe if I had infinite time but there’s only so many hours in the day!