Because dnsmasq on the Raspberry Pi can be reached over the network, a test client can enter the IP address of the Rasp Pi in its DNS settings. The service then restarts (line 6) and begins its new role as an advertising filter.Ī quick test in your browser can show whether the do-it-yourself design really filters ads from websites. Nxfilter is also another amazing DNS filtering solution, but it isn’t nearly as plug and play as either piHole or pfBlocker NG on pfSense.Dnsmasq learns the content of the blacklist from an entry in its configuration (lines 3-5). I’d love something with the ease of use of piHole but the flexibility of pfBlocker NG on pfSense. Some of us are in environments with extremely tight funding having something that requires a bit more finesse (but not that much more, really) is better than not having anything. If you want a true appliance with a seamless user experience then sure the commercial solutions will offer that - for a cost. Linux knowledge is absolutely not needed no more than me needing to know Linux because my Tivo happens to run it under the covers. I’ve been messing with block lists from various vendors since the 90’s (surf control super scout anyone?) and none are “fire and forget”.Īside from dropping to the command line to update the piHole software itself, everything else is done from inside the GUI. Meh - you have to monitor any block list. For reference though, beyond using a UTM to block (which isn’t all that great in our mobile device era) you can use a proxy on-site (same mobility issue but leaves the Unifi gear to do what it’s great at), there are some antivirus products that include content filtering (Bitdefender Gravity Zone for example), and there are DNS based products like the aforementioned Umbrella and Webroot (these can suffer the same problem as a UTM or proxy unless you use the agents on endpoints that are mobile). If your provider is using Cisco Umbrella (the commercial version of OpenDNS) then that is usually enough to do some content filtering (although they like to remind their partner service providers that they are primarily a layer of malware/phishing defense and that they shouldn’t be considered the primary content filter). That being said, the Unifi USG line will have more UTM features added during 2019, but you would probably need an XG or maybe Pro to keep enough throughput without the hardware acceleration. I regularly use it on P2P but it’s not one of those UTM’s or proxy devices that uses a middle SSL certificate. For the record, Unifi routers do currently have some rudimentary ability to block some traffic/sites based on DPI.

Nxfilter pfsense not available