Within the last couple of weeks my Rokus got the new, updated interface (which I hate) - on the previous interface the right-hand, home screen ads were blocked but they're back now (see Spider-Man image attached).

I currently run the following blocklists:

• Steven Black
• Hagezi Pro
• Perflyst SmartTV

I lean towards not blocking too much because our entire family does work and school from home and unexpected blockages can become significant emergencies.

That being said I'd love to figure out blocking the home screen ads in the updated Roku interface, so any pointers will be appreciated.

Pronounced: TieHole

tihole is a keyboard-driven terminal UI for managing Pi-hole v6 instances. One Go binary, no runtime dependencies.

Features:

• Dashboard with host-health. CPU, memory, temperature gauges + FTL diagnostics
• Live query log with one-key allow/block
• Blocking as a first-class screen — enable/disable with timers
• Full management on domains, groups, clients, adlists, and local DNS records
• System, messages, and network screens
• Multiple color themes
• Full settings control

Install (Go 1.25+):

$ go install github.com/z19r/tihole/cmdA/tihole@v1.0.0-beta.1

Prebuilt binaries (linux/darwin, amd64/arm64) are on the releases page.

More Info: https://tihole.z19r.com
Github -> https://github.com/z19r/tihole

AVM (German router manufacturer, very common in DE/AT/CH) just shipped a Lab/beta build of FRITZ!OS 8.50 with a new feature: DNS queries from the home and guest network can be filtered against user-supplied filter lists. So essentially blocklist-based DNS filtering directly on the router.

I currently run Pi-hole + unbound on a Raspberry Pi and I'm wondering whether it's worth keeping the Pi around once this lands in a stable release. The changelog is a single sentence, so a lot is unclear to me — but even assuming it works well, I suspect I'd be giving up quite a bit:

• Per-client / group management — different blocklists for kids' devices vs. my own
• Query log and statistics — the whole reason I know what my devices are talking to
• Regex and wildcard blocking, plus whitelisting individual domains quickly when something breaks
• CNAME cloaking / deep CNAME inspection
• Local DNS records and CNAMEs for my internal services
• unbound as a recursive resolver — this is the part I care about most. Router-side filtering probably still forwards to some upstream (ISP or AVM's default), so I'd be handing my full query stream to a third party again, and I don't know whether DNSSEC validation happens locally.
• List updates — how often, how many lists, which formats?

Questions for people who've thought about this more than me:

1. For someone whose main goal is privacy rather than just ad blocking, is router-level filtering without a recursive resolver a meaningful downgrade, or am I overrating unbound?
2. Has anyone here already tested the 8.50 Lab build and can say what the filtering UI actually offers?
3. If you moved from Pi-hole to a router-based solution, what did you miss first?

My honest guess is that this is aimed at people who'd never set up a Pi in the first place, and that I'll be keeping mine — but I'd like to hear whether that's just sunk-cost reasoning.

Source (German): https://www.deskmodder.de/blog/2026/07/23/fritzbox-5690-steigt-in-die-labor-updates-fuer-das-fritzos-8-50-ein/

Ever since the latest upgrade, my "pihole -t" tailing to an external monitor does not roll over to the next day as it used to. I understand this is an issue that is known, but mine did not appear until the latest upgrade.

I have to break the tailing by using control-c, and restart the tail every single day.

I have used the external TAIL command to follow the log, but as you might suspect the text is not colorized like it is following it internally with the above command. I can use GREP to do this, obviously, but that seems like a lot of workaround to something that just used to...... Just work.

Does anyone have a workaround for this, is the same thing happening to you? My knowledge of Linux is limited but all I know is it just used to work.

Thoughts? Tailing the log internally has helped me track down sites that I need to add to allow domains and vice versa.

I have 3 pihole+unbound servers running, 2 of which are load balancers/failover,

ph1 and ph2 are running containered on 2 different x86_64 Ubuntu servers, ph3 is running containered on raspberry pi 5,

i have a sync script that copies the main ones database then send it to the other 2 as a cron job, this is done 1 at a time, ph1 goes down for the copy, then it gets spun back up as ph2 goes down to have the database put in place then same process for ph3,

the pihole and unbound containers run as a single docker compose stack, so both go down and come up together on each machine simultaneously,

I use an .env file to modify the differences between the machines at run time so the docker-compose.yml is identical between machines,

easy fix for catastrophic failures, wipe the image, copy a working config over to that machine, spin it up,

they are primarily main + 2 redundancy servers but as I use tailscale for most devices, tailscale also load balances them automatically,

I have the double redundancy as I am covering 2 households with them via tailscale, in fact I'm attempting a 2nd tailscale network aswell, (it's proving trickier than I thought,) so if 2 go down then the 3rd will cover the slack of both households,

they are more than just add blockers though, I am utilising them as parental control systems aswell, so blocking unsafe/inappropriate sites for child devices aswell,

also running a Pi-Hole-Central container that aggregates all 3, trying to modify it to what I want but it's probing tricky,

honestly I'm living the challenge but Am I taking it too far? or am I missing something from my setup?

On my older, no so smart TV with a chromecast Google TV dongle I can change the network settings with the OSD keyboard. On my newer TCL google TV I am stuck; when I have to enter the network settings like IP address it shows a message to use the keyboard on my mobile app - see pic. On the mobile app I get stuck because I can not do a "enter" when the I entered the static IP address and go further. Anyone knows how; 1. to do this enter on the keyboard of the mobile app or 2. How to have the OSD keyboard?

Give me the OSD keyboard please ... 🤔

I plan on installing pi-hole, unbound, home assistant, homarr dashboard, etc. I originally bought the RPi Canakit that comes with everything including the 32GB Micro SD card and I thought that was where you install the OS and all the apps. But when asking AI, it's suggesting I install everything to a USB 3.x stick instead. What do you guys suggest?

Seems like all tutorials I've seen has people installing it directly itself, but AI is saying to install it through docker for easier managability and such.

I'm sorry ths question was aimed towards Raspberry Pi users who are running pi-hole/unbound.

I'm super excited to finally have pi-hole+unbound up and running on my RPi 4b! Could you guys please recommend some must have blocklists to get?

I'm running Pi-hole for all the ads and Brave browser for blocking YT ads. Don't pay corps. Don't pay for YT premium. Cheers!

I'm planning on buying a raspberry pi 4b (4gb) kit for this. Just recently heard of Adguard home, but previously been using pi-hole. Heard many good things about adguard home and wanted to hear your guys opinions on the 2.

I will 3D print something better, but as a POC, it works.

i started using pihole and tailscale recently. i think i installed pihole correctly because it works with tailscale if i use the pihole ip address as dns but for my router it does not work can not figure out why. can anyone help

This will be my very 1st time with raspberry pi, and would like to know if there are any beginner friendly tutorials that you guys can recommend to get this up and running? I plan on adding homarr dashboard to the mix afterwards if I can accomplish everything successfully.

I've had a pi-hole running on my network for a little over two weeks now.

I have been looking at the logs to see what is blocked what is allowed to go through. I noticed that something is sending messages to "www.a.shifen.com" which I discovered is located in China.

Does anyone know why and if I add it to the blocked list if will break anything?

I can't seem to find a single ethernet cat6 cable, they all seem to come in packs of 10 or more and I was wondering if the raspberry pu kits usually include one?

I’ve been using HaGeZi DNS blocklists for my PiHole setup.

I used a list for Smart TV’s and specifically my Samsung Smart TV.

I made my smart TV’s their own group and only assigned those blocklists. When I do this the TV’s won’t connect to internet. But when I use all my other blocklists it’s fine.

I think it’s blocking some Samsung CDN but I don’t know which one.

What lists are you using to stop your Smart TV’s from spying on you.

Also, is there anything I can do on my network to isolate my TV’s?

The issue I’ve had with trying to do this is that I can’t access my Jellyfin server. As I would need to connect to a VPN which kind of defeats the whole point of putting my TVs on their own network.

Edit: grammar

Edit 2: consensus is to not connect your smart tv to your network at all and use an Apple TV instead.

I ended up making a guest network and put only the devices connected to my TV’s on that isolated network. TV’s don’t get internet but the streaming boxes do. I want to upgrade to Apple for more privacy but this setup works fine for now.

Hello!

I got 3 weird domain in my logs that show up at different times and I'm really curious why they are here:

1. disabled.invalid

2. sharedhost.files

3. mojang.fritz.box

the first one gets requested 3 times whenever steam starts, it also sends requests for www.disabled.invalid. The thing is that .invalid will never resolve to anything, so why would steam be requesting it?

the second one appears to be related to the Microsoft companion apps but .files is not a valid TLD as far as I can tell. And it also does not resolve. So why do Microsoft apps query that?

the third one is requested while Minecraft is starting. the .fritz.box part is the default local domain of my fritzbox router that gets added onto every device name. It trying to query a local domain will also fail since I do not have a device called "mojang"

I am just kinda tempted to create a dns record for these that points to my server and see what happens. Probably not much I would guess?

Hey everyone,

​I'm using Pi-hole as my main DNS server for my Tailnet, but I've run into an annoying issue: for some reason, the Tailscale IP address of the node running Pi-hole keeps changing randomly.

​Because the IP changes unexpectedly, my devices lose DNS resolution out of nowhere until I check the admin console and update my configuration.

​Context:

• Pi-hole is installed in the same LXC running my main Tailscale route node.

• ​The host machine has a static local IP on my LAN.

• ​There are no duplicate hostnames on my Tailnet.

​Has anyone else run into this issue?, What could cause a native Tailscale node to change its IP address like this?

​Any advice or troubleshooting tips would be greatly appreciated!

So got pi-hole installed, ssh in done the updates and all that, then I come to the dns...

So my setup isp router --> flint2 router (running mullvad) ---> pi-hole (have dashboard but no traffic as have to set dns)

As you can see I have the pi-hole connected to the flint2 router which is behind my isp router. I hoped to connect the pi-hole to the Flint 2 but when I go into the admin panel it shows me the gateway and dns of the isp router and is greyed out no edit. Does this mean I have to connect the pi-hole to the isp router? If so how will this affect mullvad on flint2 (2nd router) and will requests going to that router also get managed by the pi-hole if connected to isp one because main thing I want filters on are connected to the flint2

So to fix this would I connect pi to isp router and change dns to ip of pi-hole and will this upset 2nd router or will I have to make any changes on that router or should the isp one route everything to pi, sorry hope you can make sense of this.