Pi-Hole with Ubuntu and UFW

[dgibbs]

I have noticed sites loading slowly as it looks like the timeout for blocked content takes around 30 seconds. I am aware of using iptables to sort this out.

I did get this working on Ubuntu using iptables somehow however on reboot stopped working and am unable to get it working again by re-entering the rules. Since Ubuntu is using UFW and not iptables I was wondering if anyone has a decent step by step guide for setting up these rules correctly with UFW. I have had a look around and tried a few things but no luck.

Why Some Pages Load Slow When Using Pi-hole And How To Fix It (for versions < v4.0)

Originally published at: https://pi-hole.net/2018/02/02/why-some-pages-load-slow-when-using-pi-hole-and-how-to-fix-it/ Update: 2018-08-06 As of v4.0, this should no longer be a problem unless you choose to deviate from the new default blocking mode and return to the IP-based mode. Update: 2018-05-26 This problem is far less likely to happen when using NXDOMAIN or NULL blocking: https://pi-hole.net/2018/05/18/nxdomain-and-null-blocking-with-ftldns/ Pi-hole can make your network run…

I used the following rules

iptables -A INPUT -p tcp --destination-port 443 -j REJECT --reject-with tcp-reset
iptables -A INPUT -p udp --destination-port 80 -j REJECT --reject-with icmp-port-unreachable
iptables -A INPUT -p udp --destination-port 443 -j REJECT --reject-with icmp-port-unreachable

ip6tables -A INPUT -p tcp --destination-port 443 -j REJECT --reject-with tcp-reset
ip6tables -A INPUT -p udp --destination-port 80 -j REJECT --reject-with icmp6-port-unreachable
ip6tables -A INPUT -p udp --destination-port 443 -j REJECT --reject-with icmp6-port-unreachable

Thanks for your assistance

[dgibbs]

I have figured out the issue. But is not what I excpected. Since the ip address of my pi-hole server changed the pi-hole needed re configuring. So I ran pihole -r and that resolved the issue.

Also I am not 100% but I added this to the /etc/ufw/after.rules and it seemed to work.

# Pi-Hole
-A ufw-after-input -p tcp --destination-port 443 -j REJECT --reject-with tcp-reset
-A ufw-after-input -p udp --destination-port 80 -j REJECT --reject-with icmp-port-unreachable
-A ufw-after-input -p udp --destination-port 443 -j REJECT --reject-with icmp-port-unreachable

and /etc/ufw/after6.rules

# Pi-Hole
-A ufw6-after-input -p tcp --destination-port 443 -j REJECT --reject-with tcp-reset
-A ufw6-after-input -p udp --destination-port 80 -j REJECT --reject-with icmp6-port-unreachable
-A ufw6-after-input -p udp --destination-port 443 -j REJECT --reject-with icmp6-port-unreachable

I hope that helps