It apprears that NextDNS has removed No Google, No Facebook, and other blocklist without notifying users. One person said the NSA blocklist was also down. The company had made no responses to complaints on the community server when I checked earlier. Crickets…
I noticed Android and Linux being unable to access the app and web interface to confirm connections, starting some time on November 4th. I was able to switch DNS providers on Android and switch back, after which NextDNS seemed to work. On Linux however, systemd confirmed it was enabled but it went right to google’s webpage with no block.
If you’re on NextDNS, go check your domain filters ASAP. I switched to RethinkDNS, and it’s been decent so far. What is everyones preferred solution?
NextDNS works when you are not at home.
I use Tailscale on my devices and my servers with pi hole so that I can set them as my dns no matter where I am. Works pretty well and lets me access my other self-hosted services as well.
I think I recall Tailscale being a Microslop product with big tech single sign-on options. Assuming I can get past the MS thing, can we use a regular id/password instead of logging in with big tech accounts?
You could sign in/sign up with your email vs single sign on. I used an alias when I registered. That was some time ago so I’m not sure that’s still an option. I haven’t confirmed.
As far as I can tell, they are not a Microsoft product.
I’m not sure about the MS (which I hate as the next guy), but the point is, it’s what works. You can replace Tailscale with Headscale or NetBird, or even just WireGuard.
The last time I checked, it was not possible for some stupid reasons. I am trying to reduce reliance on them as well as I think its gonna get enshitified soon.
Is it true that Tailscale logs all of your IP addresses and usage timestamps?
It does. It is needed for the services provided inside the console where you manage your mesh. What they cannot see is what you’re actually doing, the content. If you don’t need the services that require that info, then Tailscale is probably more than you need and there are simpler (not easier) solutions.
I was wondering if I could partition my phone and run it, but I don’t want to risk screwing it up.
So does my pihole. You should never trust your ISPs firewall/modem/router, never ever. You should have a hardware firewall/router and than you can set up a VPN into your LAN.
Some ISPs require you to use their router, and their router may not be configurable to support custom DNS or VPN access. For users in that situation third-party DNS can make sense.
Looks like in this case our third party DNS could be compromised. Who knows if they sold our info or not? Third party DNS is the solution with no notice that service no longer works the same.
I’m about to set up Pi Hole with Unbound. F all this.
You won’t regret the move to Pi Hole. It can help protect you while you are figuring everything else out. It’s a long journey and doesn’t need to be perfect all at once. You’ll make mistakes along the way and once trusted providers will enshittify so it will always be a work in progress.