Yes, PiHole is the most common, but malware can easily bypass that using shared ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

M95D 3 months ago | parent | context | favorite | on: LittleSnitch for Linux

Yes, PiHole is the most common, but malware can easily bypass that using shared domains, P2P or IP addresses directly.

Use a filtering proxy instead and no gateway / route to the internet.

chupasaurus 3 months ago [–]

1) Dnsmasq, you don't need the whole PiHole for that.

2) You're advising security through obscurity instead of a network namespace + firewall.

M95D 3 months ago | [–]

Please explain #2. How is a filtering proxy security through obscurity?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact