Pi Hole on Synology NAS (or any Docker machine)

Not every Synology device seems to support docker. I have a basic ds214 NAS and docker dosen’t seem to be available for it ? Or am I just missing Something?

Here’s the Synology page about Docker and a list of models it’s supported on:

https://www.synology.com/en-us/dsm/packages/Docker

1 Like

Has anyone succeeded in setting this up with Google WiFi? If I point my computer (current running latest Linux Mint) to my Synology local IP, it works. As soon as I attempt to change the DNS on my Google WiFi to the same IP, no web pages will load. I run into a similar issue if I change the WiFi on my OnePlus 6 to be static and use the same DNS; that results in being connected but no internet.

I tried this an no matter what port I enter for 80 it conflicts and 53 also conflicts. I even tried auto for everything just to see if I could get the admin page to come up using t he port it assigned and no luck. I have a DS920plus.

can you post screenshots of the gui config?

PortError Ports

I even looked for ports that were not on the list of known ports. I’m sure that I am tripping over my own shoelaces that I tied together. Thanks for the fast response.
John

Try leaving 53 on auto just temporarily
And try another port for 80 then screenshot again?

portstake2

It let me save that with no complaints. I can’t reach the pi-hole GUI on either 9555 or 9556.

Ok so port 53 is probably used by something else. Is any kind of dns service running on the Synology otherwise?

Once the config is saved, did you start the container also?

I am running the DNS server on t he Synology but turning that off did not make a difference. I am also playing with hosting a website.

Pihole is a DNS server so you can’t run one on top of that

I stopped the DNS package and that didn’t help. I’ll try uninstalling it.

I uninstalled the Synology DNS and restarted the NAS so now It allows me to use port 53. I still can’t connect to the web UI.

I can finally access the web UI. I had to allow access in the firewall rules.

1 Like

PI-Hole is a cool thing. Personally, I’ve been using it for quite a long time on my Odroid hc1. Version 5.x is a good step forward in terms of 4.x.
Personally, I pass all traffic through the pihole and on the edge I block 53 so that no accidental application tries to make connections by itself, ignoring the ns given by the OS.

And we are slowly entering the time when applications will be more and more smart. Currently, Avast, for example, can search quite hard for dns to resolve specific names.
First, it checks the system ns, if it is not able to get the answer, it goes to google queries. If he is still not able to get what he wants, he starts asking dns based on one of the CDNs, first, traditionally, udp 53 and if it fails, it goes heavy… tcp 443.
This is how app deals with stats and telemetry that are normally blocked in Pi-hole.

For this reason, apart from starting Pi-Hole, it is worth considering whether nothing will escape under the table.

Another problem is, of course, DOH / DOT, which, according to the official responses of the creators, will never be solved in the pi-hole.
Next thing is… from pihole to dns over encryption. I personally use cloudflared and it works ok. Another thing worth paying attention to are blacklists. Their excess does not have to be positive at all. Quality over quantity imho. I usually add one more to the standard lists… https://dbl.oisd.nl

And what to do if we leak DOH queries from the LAN? PI-Hole here will not help us that much but we can use the “Local DNS Records” function and redirect some DOH domains or add them to the black list. It is important to have a good and constantly updated list… which is not that simple and probably will never be 100% complete.

# DNS over Https Server List for pfBlockerNG
# Use at your own risk. Not responsible for errors, updates or issues this may cause
# Version 2020-08-20 update
https://adblock.mydns.network/dns-query
https://applied-privacy.net/services/dns/
https://blahdns.com	
https://captnemo.in/doh/
https://cloudflare-dns.com/dns-query
https://dns-asia.wugui.zone/dns-query
https://dns-family.adguard.com/dns-query
https://dns-nyc.aaflalo.me/dns-query
https://dns.aa.net.uk/dns-query
https://dns.aaflalo.me/dns-query
https://dns.adguard.com/dns-query
https://dns.alidns.com/dns-query
https://dns.containerpi.com/dns-query
https://dns.containerpi.com/doh/family-filter/
https://dns.containerpi.com/doh/secure-filter/
https://dns.digitale-gesellschaft.ch/dns-query
https://dns.dns-over-https.com/dns-query
https://dns.dnshome.de/dns-query
https://dns.dnsoverhttps.net/dns-query
https://dns.flatuslifir.is/dns-query
https://dns.google.com/experimental	
https://dns.google/dns-query
https://dns.hostux.net/ads
https://dns.hostux.net/dns-query
https://dns.nextdns.io/
https://dns.quad9.net/dns-query
https://dns.rubyfish.cn/dns-query
https://dns.switch.ch/dns-query
https://dns.twnic.tw/dns-query
https://dns.wugui.zone/dns-query
https://dns10.quad9.net/dns-query
https://dns11.quad9.net/dns-query
https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion
https://dns64.cloudflare-dns.com/dns-query
https://dns64.dns.google/dns-query
https://dns9.quad9.net/dns-query
https://dnses.alekberg.net/dns-query
https://dnsforge.de/dns-query
https://dnsnl.alekberg.net/dns-query
https://dnsse.alekberg.net/dns-query
https://doh-2.seby.io/dns-query
https://doh-ch.blahdns.com/dns-query
https://doh-de.blahdns.com/dns-query
https://doh-fi.blahdns.com/dns-query
https://doh-jp.blahdns.com/dns-query
https://doh.42l.fr/dns-query
https://doh.applied-privacy.net/query
https://doh.appliedprivacy.net/query
https://doh.armadillodns.net/dns-query
https://doh.captnemo.in/dns-query
https://doh.centraleu.pi-dns.com/dns-query
https://doh.crypto.sx/dns-query
https://doh.dns.sb/dns-query
https://doh.dnslify.com/dns-query
https://doh.dnswarden.com/adblock
https://doh.dnswarden.com/adult-filter
https://doh.dnswarden.com/uncensored
https://doh.eastas.pi-dns.com/dns-query
https://doh.eastau.pi-dns.com/dns-query
https://doh.eastus.pi-dns.com/dns-query
https://doh.familyshield.opendns.com/dns-query
https://doh.ffmuc.net/dns-query
https://doh.li/dns-query
https://doh.libredns.gr/dns-query
https://doh.netweaver.uk/dns-query
https://doh.northeu.pi-dns.com/dns-query
https://doh.opendns.com/dns-query
https://doh.pi-dns.com/dns-query
https://doh.powerdns.org
https://doh.seby.io:8443/dns-query
https://doh.securedns.eu/dns-query
https://doh.tiar.app/dns-query
https://doh.tiarap.org/dns-query
https://doh.westus.pi-dns.com/dns-query
https://doh.xfinity.com/dns-query
https://dohdot.coxlab.net/dns-query
https://example.doh.blockerdns.com/dns-query
https://family.canadianshield.cira.ca/dns-query
https://family.cloudflare-dns.com/dns-query
https://fi.doh.dns.snopyta.org/dns-query
https://ibksturm.synology.me/dns-query
https://ibuki.cgnat.net/dns-query
https://jcdns.fun/dns-query
https://jp.tiar.app/dns-query
https://jp.tiarap.org/dns-query
https://mozilla.cloudflare-dns.com/dns-query
https://odvr.nic.cz/doh
https://ordns.he.net/dns-query
https://private.canadianshield.cira.ca/dns-query
https://protected.canadianshield.cira.ca/dns-query
https://rdns.faelix.net/
https://resolver-eu.lelux.fi/dns-query
https://security.cloudflare-dns.com/dns-query
https://tor.cloudflare-dns.com
https://use-application-dns.net
https://www.digitale-gesellschaft.ch/dns/

Filtering ads in a video stream, such as YouTube, is a more annoying problem, but people can also do it, but this does not apply to PI-Hole itself, so the end… :slight_smile:

Im new on the forum so forgive me for this maybe stupid question/suggestion.
I followed the guide and it worked great. Took a while for me to figure out where to find the password for the web interface (it was autogenerated and i found it in the log). I managed to set my own password by adding a line in the enviroment-tab - WEBPASSWORD and adding my own. I know this forum is for ppl way more technical than me but it might be good to add that to the guide to save fools like me some time?

I also have a question: When i updated the container all the settings and everything dissappeard. Do i need to add some folders or something in the docker folder and some volume info in the container to save all the settings?
Thank you for an awesome youtubechannel. I followed your guide on bitwarden and also setting up securitycameras and it all works great!

Yes.