https://worldofeuc.com logo
Join Slack
Powered by
This message was deleted.
# _general
s
This message was deleted.
👌🏽 2
l
@King ston we can discuss here so we don't fill the channel.
k
Thanks mate Sorry, kinda new to Slack! If you have any guides. Do you think something like websense/forticlient firewall can achieve this same thing?
l
I don't think so in this instance but I can't be sure. What I do know is, Pi-Hole is a DNS blocker so it's highly efficient and cuts alot of load by requests being dropped. Give it a go in a lab. I think you'll be surprised.
k
Ok perfect, I will defo look into it and suggest it Thank you, appreciate the suggestion.
l
No worries at all.
j
We were looking at whether we could make Pi hole a bit more resilient/scalable using azure scale sets and load balancing, ran out of juice on getting it setup so never tested (need a fair bit of automation). I run it on centos and have done for a while, it’s the best thing I’ve done.... you can use it in docker containers too.
For customers that don’t trust it because it’s not “enterprise supported” I push privacy tracking lists to internet explorer and ublock origin to chrome - no more ads
đź‘Ť 1
d
My lab of about 34 machines and some unifi hardware not doing sh*t still need 1gb of mem. So I am curious how it would scale
j
Yep I have the same, I’ve read specs of tiny machines being ok but I had to up the spec on centos to keep things green
e
Well accoring to stats +50% so cheaper than a new block
k
@James Kindon @James Kindon, when you say unblock origin to chrome, what you referring to?
Ah googled and seen its an extension..I'll look into it! Thanks
đź‘Ť 2
l
Ublock origin is a chrome extension sir.
It's an alternative to Pi-Hole but.... You said you wanted macs, mobiles covered too right?
k
It's purely for our VDIs, to lower the load on our hosts. Our company is kinda laxed on web usage, so from our side, as long as they not maxing CPU, they can do what they want.
l
Then browsers block lists will sort you out then. All good. So many good folks on this workspace.
k
Yup, very helpful indeed! Would installing extension and then pushing out to prod be way to go or are there some config/block lists people set up. I have seen people talking about lists but thought ad blockers were ready to go once installed.
l
You can still configure block lists though of different aggressions.
All can be done with group policy , including forcing the chrome extension
k
Ok cool. Thanks.
đź‘Ť 1
@James Kindon - you mentioned using ublock origin - so I have spoken to my seniors who said they looked into this but could not find something enterprise ready in past, as in something they could control easily. Stated some websites would not load or operate as they should. What have your experiences been? We really don't need to be that aggressive with our lists, mostly newspaper websites, journals, finance etc Salim on other thread said adblocker has given no issues , so if we go with default lists and a website doesn't load as it should, how would we exclude etc?
j
No matter what you do with ad blocking, you are going to have some massaging to do as some things will break.... Ublock you can add an exemption via rey keys in gpp or users can simply manage it themselves easily enough. Adblock is a little heavier resource wise than Ublock I think, but its lists are good and I use their lists in for IE privacy tracking (James Rankin wrote a great how to)
đź‘Ť 3
k
Thanks James , will begin testing this soon. Appreciate the response
đź‘Ť 2
Open in Slack
PreviousNext
Powered by