Entware Pi-hole directly on the router? Yes!

[jacklul]

I seem to get some requests going via Unbound (port 53535), but some through the regular DNS (127.0.0.1:53). Any idea what is happening?

Check the query log, pretty sure those are PTR queries for lan hostnames, which is expected with reverse server set.

I've deleted the pihole.toml pages, as they are not guides and the example config can be found in Pi-hole documentation as well as in the filesystem after running pihole-FTL once.
It might also be a good idea to rename your wiki page to something that tells about your setup because currently there are two wiki pages for Merlin firmware and user from the first look at it doesn't know what is the difference between them.

 

[heslo]

@jacklul

Alright, an initial version of Step by Step guide is below. We need another tester!

Asus Merlin ‐ Step by Step

Pi-hole as an Entware package – run it on a router, NAS, or other devices! - jacklul/entware-pi-hole

github.com

I'll take a dive over the next day or so but this link just comes up to an empty page for me?

 

[jacklul]

I'll take a dive over the next day or so but this link just comes up to an empty page for me?

That's probably because I renamed it because there are now two guides for Merlin's firmware, I wanted to keep them near each other in the menu.

Also @bibikalka, /opt/etc/init.d/S64extra-ip might also have to be executed from one of Merlin's network related scripts as if you modify anything network related on the Asus UI the interfaces will be recreated and that extra IP might be gone.
As mentioned in my guide.

 

[heslo]

That's probably because I renamed it because there are now two guides for Merlin's firmware, I wanted to keep them near each other in the menu.

Also @bibikalka, /opt/etc/init.d/S64extra-ip might also have to be executed from one of Merlin's network related scripts as if you modify anything network related on the Asus UI the interfaces will be recreated and that extra IP might be gone.
As mentioned in my guide.

That link worked!

I'll see if I get the time tonight to run through it. Already have pi-hole installed and running on a RPi but yeah would love one less device and incorporate it into the router itself

 

[jacklul]

I do have some ideas on how to improve the wiki a bit, will do that later today.

@heslo The URL will most likely change again, sorry for the inconvenience!

Edit: updated URL

 

[heslo]

I do have some ideas on how to improve the wiki a bit, will do that later today.

@heslo The URL will most likely change again, sorry for the inconvenience!

All good my man, I'll just keep checking back. Doesn't look like I'll get the chance tonight now anyway; hopefully tomorrow

 

[bibikalka]

...

I've deleted the pihole.toml pages, as they are not guides and the example config can be found in Pi-hole documentation as well as in the filesystem after running pihole-FTL once.
It might also be a good idea to rename your wiki page to something that tells about your setup because currently there are two wiki pages for Merlin firmware and user from the first look at it doesn't know what is the difference between them.

I highly recommend still to post the full *.toml config files somewhere on Github where it's downloadable. It literally took me several days and a bunch of persistence to get to that stage. That is the difference between people installing this successfully, or giving up. The fact that it's available in the generic PiHole documentation is not really helpful for fresh users trying to do this.

Also, keeping both the original and the modified *.toml files will help with future PiHole versions if they add stuff, and then the original config will change, but the diff will still provide the right clues.

 

[bibikalka]

For some reason attachments are not working ...

 

[jacklul]

Took a bit of inspiration from the way Entware has their wiki set-up, I think it looks good now.

 

[saison2023]

I am using AdGuard Hone on my router and I would love to learn something new and would like to get some explanation(s) on this topic.
So please excuse my (maybe stupid) question: What is the difference between using AdGuard Home and Pi-Hole?
I have read on Pi-Hole and understand the purpose of the software but I am curious to know if there is a reason to use one instead of the other.
Thanks

 

[heslo]

Ok, managed to get it installed no problem (can I suggest mentioning in the guide how and where to edit the opkg.conf file (nano /opt/etc/opkg.conf)

Pi-hole launches fine however I'm getting an error message that the DNS service isn't running. Any ideas where I've gone wrong? Didn't have this issue on my RPi. Also now after reboot I can't access the WebUI even though it did work on first install

 

[bibikalka]

Ok, managed to get it installed no problem (can I suggest mentioning in the guide how and where to edit the opkg.conf file (nano /opt/etc/opkg.conf)

Pi-hole launches fine however I'm getting an error message that the DNS service isn't running. Any ideas where I've gone wrong? Didn't have this issue on my RPi. Also now after reboot I can't access the WebUI even though it did work on first install

Move /opt/etc/init.d/S65pihole-FTL to something like /jffs/scripts, so it would not launch, and reboot.

Did you create the extra IP, and update the pihole.toml config files as discussed in here?

Install on Asuswrt‐Merlin (by bibikalka1)

Pi-hole as an Entware package – run it on a router, NAS, or other devices! - jacklul/entware-pi-hole

github.com

 

[jacklul]

Pi-hole launches fine however I'm getting an error message that the DNS service isn't running. Any ideas where I've gone wrong? Didn't have this issue on my RPi. Also now after reboot I can't access the WebUI even though it did work on first install

Error message in the web UI I assume?
First place to look are the logs in /opt/var/log/pihole.
You can try running "pihole debug" and looking for something useful, you can also upload it when prompted and send me the link so I can take a look.

@bibikalka btw: have you checked if "pihole status" and "pihole updateGravity" work without any errors or warnings in your setup?
Those commands use hardcoded 127.0.0.1 for DNS and HTTP checks.
I think I will have to work on getting those hardcoded stuff functional in advanced setups.

Also might be worth updating the guide as the pages with toml configs no longer exist.

 

[heslo]

Error message in the web UI I assume?
First place to look are the logs in /opt/var/log/pihole.
You can try running "pihole debug" and looking for something useful, you can also upload it when prompted and send me the link so I can take a look.

@bibikalka btw: have you checked if "pihole status" and "pihole updateGravity" work without any errors or warnings in your setup?
Those commands use hardcoded 127.0.0.1 for DNS and HTTP checks.
I think I will have to work on getting those hardcoded stuff functional in advanced setups.

Also might be worth updating the guide as the pages with toml configs no longer exist.

Yes, the error message showed in the WebUI when it was working and also if I try "pihole-status"

 

[heslo]

Move /opt/etc/init.d/S65pihole-FTL to something like /jffs/scripts, so it would not launch, and reboot.

Did you create the extra IP, and update the pihole.toml config files as discussed in here?

Install on Asuswrt‐Merlin (by bibikalka1)

Pi-hole as an Entware package – run it on a router, NAS, or other devices! - jacklul/entware-pi-hole

github.com

No, didn't do any of that, just followed jacklul's guide here

Home

Pi-hole as an Entware package – run it on a router, NAS, or other devices! - jacklul/entware-pi-hole

github.com

 

[jacklul]

Follow one of the guides from the sidebar, the main wiki page even suggests to look there.
Out of the box it will try to bind to the same port as firmware's DNS server, so this is why you see the error.
You can either follow @bibikalka's guide or mine depending on your needs.
Mine simply replaces firmware's DNS server while guide by @bibikalka runs it on dedicated IP so you can use DNS director to do the rest.

The issue for out of the box port conflict will be fixed in the future package releases (even thought Entware usually does not do that), I will ship the package with config that uses ports 5053, 5080 and 5443 by default.

 

[bluzfanmr1]

I am using AdGuard Hone on my router and I would love to learn something new and would like to get some explanation(s) on this topic.
So please excuse my (maybe stupid) question: What is the difference between using AdGuard Home and Pi-Hole?
I have read on Pi-Hole and understand the purpose of the software but I am curious to know if there is a reason to use one instead of the other.
Thanks

They are similar in that they both block ads. There isn't much difference, though the software and interface will be different while accomplishing the same thing. I'd say Pi-hole is much easier to use on another device besides the router right now, but those on this thread may change that!

 

[saison2023]

They are similar in that they both block ads. There isn't much difference, though the software and interface will be different while accomplishing the same thing. I'd say Pi-hole is much easier to use on another device besides the router right now, but those on this thread may change that!

Thank you very much, it was my assumption but I was not sure.
I will surely test this solution, thanks to the developer and all other that are helping him.

 

[heslo]

Follow one of the guides from the sidebar, the main wiki page even suggests to look there.
Out of the box it will try to bind to the same port as firmware's DNS server, so this is why you see the error.
You can either follow @bibikalka's guide or mine depending on your needs.
Mine simply replaces firmware's DNS server while guide by @bibikalka runs it on dedicated IP so you can use DNS director to do the rest.

The issue for out of the box port conflict will be fixed in the future package releases (even thought Entware usually does not do that), I will ship the package with config that uses ports 5053, 5080 and 5443 by default.

Awesome, I'll get onto it tonight when I get home and see what I can work out