PiHole directly on Routers (Tomato, MerlinWRT, DD-WRT, openWRT)

ender84 · July 11, 2017, 5:56pm

OK, I thought there would be a lot of dependencies that just aren't in DDWRT.
If someone was willing to list the dependencies/sources, I could try manually.

I forgot that I also have a Linksys AC1900 also sitting in a box not doing anything in addition to the WRT1900AC. Seems like another potential test box to me.

DanSchaper · July 11, 2017, 6:53pm

Major ones are dnsmasq and lighttpd but you can check the basic install script for all of the dependencies. They are listed at the top of the installer script.

github.com/pi-hole/pi-hole

automated%20install/basic-install.sh

master


      
          webInterfaceDir="${webroot}/admin"
          piholeGitUrl="https://github.com/pi-hole/pi-hole.git"
          PI_HOLE_LOCAL_REPO="/etc/.pihole"
          # List of pihole scripts, stored in an array
          PI_HOLE_FILES=(list piholeDebug piholeLogFlush setupLCD update version gravity uninstall webpage)
          # This directory is where the Pi-hole scripts will be installed
          PI_HOLE_INSTALL_DIR="/opt/pihole"
          PI_HOLE_CONFIG_DIR="/etc/pihole"
          PI_HOLE_BIN_DIR="/usr/local/bin"
          PI_HOLE_V6_CONFIG="${PI_HOLE_CONFIG_DIR}/pihole.toml"
          fresh_install=true
          
          adlistFile="/etc/pihole/adlists.list"
          # Pi-hole needs an IP address; to begin, these variables are empty since we don't know what the IP is until this script can run
          IPV4_ADDRESS=${IPV4_ADDRESS}
          IPV6_ADDRESS=${IPV6_ADDRESS}
          # Give settings their default values. These may be changed by prompts later in the script.
          QUERY_LOGGING=
          PRIVACY_LEVEL=
          
          # Where old configs go to if a v6 migration is performed

jacob.salmela · July 12, 2017, 8:32pm

A post was split to a new topic: Pi-hole on ASUS RT-AC68U not working

mrkno · July 16, 2017, 2:32am

I actually had a go at getting pi-hole working on LEDE 17.01.2 a while back (on a TP-Link Archer C7v2) GitHub - drkno/pi-hole-lede-openwrt: A black hole for Internet advertisements (changes made here)

It was fairly easy to get most of it working, with two notable exceptions:

whiptail does not exist in the standard opkg packages and there is no suitable replacement. I know using optware instead would be a solution here, but I was trying to minimise the changes I needed to make to the standard installation
git as a dependency takes up an inordinate amount of space on the device

dannyboy · August 12, 2017, 7:25am

Hi. I do not wish to spam this developers post, but I have a big interest in what you managed to get working on a TP-Link Archer C7 v2 running LEDE, since I am running the exact same setup.
how do I use what you've created to install it on my current LEDE setup?
thanks!

mrkno · August 12, 2017, 10:18pm

Note that although I got it working, through subsequent reflashes of the firmware I no longer have this setup. Additionally the changes I made were just enough to get it running but were by no means complete.

extroot to have enough space for the git dependency.
Compile newt for MIPS and install it onto the device (this gives you whiptail).
Migrate luci to lighttpd. Note that configuration should be put in an external.conf file not the main configuration file and luci should not be on port 80.
Run the modified install script from my fork: https://raw.githubusercontent.com/mrkno/pi-hole-lede-openwrt/master/automated%20install/basic-install.sh
Manually debug the multitude of problems it will cause - I can't remember what they all were.

sprocket · September 4, 2017, 10:57am

LEDE / OpenWRT has a package for ad blocking. Have folks looked at that?

github.com/openwrt/packages

net/adblock/files/README.md

master

<!-- markdownlint-disable -->

# DNS based ad/abuse domain blocking

## Description
A lot of people already use adblocker plugins within their desktop browsers, but what if you are using your (smart) phone, tablet, watch or any other (wlan) gadget!? Getting rid of annoying ads, trackers and other abuse sites (like facebook) is simple: block them with your router. When the DNS server on your router receives DNS requests, you will sort out queries that ask for the resource records of ad servers and return a simple 'NXDOMAIN'. This is nothing but **N**on-e**X**istent Internet or Intranet domain name, if domain name is unable to resolved using the DNS server, a condition called the 'NXDOMAIN' occurred.

## Main Features
* Support of the following fully pre-configured domain blocklist sources (free for private usage, for commercial use please check their individual licenses)

| Source              | Enabled | Size | Focus            | Information                                                                       |
| :------------------ | :-----: | :--- | :--------------- | :-------------------------------------------------------------------------------- |
| 1Hosts              |         | VAR  | compilation      | [Link](https://github.com/badmojr/1Hosts)                                         |
| adaway              |         | S    | mobile           | [Link](https://github.com/AdAway/adaway.github.io)                                |
| adguard             | x       | L    | general          | [Link](https://adguard.com)                                                       |
| adguard_tracking    |         | L    | tracking         | [Link](https://github.com/AdguardTeam/cname-trackers)                             |
| android_tracking    |         | S    | tracking         | [Link](https://github.com/Perflyst/PiHoleBlocklist)                               |
| andryou             |         | L    | compilation      | [Link](https://gitlab.com/andryou/block/-/blob/master/readme.md)                  |
| anti_ad             |         | L    | compilation      | [Link](https://github.com/privacy-protection-tools/anti-AD/blob/master/README.md) |
| anudeep             |         | M    | compilation      | [Link](https://github.com/anudeepND/blacklist)                                    |

This file has been truncated. show original

This package also has a GUI component via LEDE's LuCI UI.

I haven't tried it (I run PiHole on a Pi3), but it might do what people want.

deathbybandaid · September 11, 2017, 12:36pm

From our Hardware/Software requirements page:

We officially support the following:

Raspbian: Jessie (lite / with pixel)
Ubuntu: 14.04 / 16.04 / 16.10
Fedora: 24 / 25
Debian: 8.6
CentOS: 7.2.1511 / 7.3.1611

There are already a few threads that relate to this topic.

This appears to be the "big thread" relating to it.

I believe as of now, it was deemed "out-of-scope"

I'm also assuming there are alot of various factors involved with routers, OS, and being able to officially support one router versus another.

But don't let anything I say hinder you from trying!

piOPEN · September 11, 2017, 12:50pm

Ok, sorry, I had not seen. However, would be amazing to be offered for them firmwares.

Some of the above firmwares basically run GNU/Linux, right? Are so many problems that arise?

Think about it. Thank you!

piOPEN · September 11, 2017, 1:06pm

First of all, congratulations on your amazing project. Ιs a very good project and I personally think his need is more imperative than ever!

It can be installed on OpenWrt ?
I have the Asus RT-N66 router to which I have installed the OpenWrt firmware.
The features that your software offers are awesome, hey are really amazing! I thought it would be even more flexible and easy to use ( & user friendly ) if it is possible to install it on router.

Is this possible?
What is your point of view?

Thank you.

Chalouder · September 29, 2017, 11:00pm

IMO an AD blocker like PiHole would be a great addition to open router OS's like DD-WRT, openWRT etc, that being said, I think PiHole itself should stay focused on the single-board computers of its roots. Maybe a new project for an open router ad blocker....

iManuB · September 30, 2017, 1:36pm

Hello everyone and congratulations for the realization of the script.

For the owners of an Asus router (With MerlinWRT), it would be very much a guide (even a video tutorial) with the steps to be taken.

Example:

bla bla bla
bla bla bla
bla bla bla

Thanks so much!

voltagex · April 6, 2018, 1:14am

Did this project go anywhere? Was there a fork? Were some of the assumptions in the Pi-Hole scripts removed (out to variables)?

Matt · April 19, 2018, 4:34pm

Just an aside, there is an existing adblock system for MerlinWRT routers - https://github.com/decoderman/AB-Solution

So this is all well within the realm of technically feasible, but it may require significant changes to the codebase. I wouldn't expect anything for a while unless someone outside of the core dev team decides to pick this up as a pet project.

takezo · June 22, 2018, 12:42pm

@mrkno
finally have you installed pihole in router with lede..?
could you let me knwo how you have done to install newt..?
thanks!

CyberBlaed · November 30, 2018, 11:59am

while dated in 2015, it seems Debian on your router is a thing;

the hiccup being so many steps, and not the most efficient setup as its run ontop of other firmware, but its a start I think..

Pihole on a router would be sweet, but also debian on a router would be sweeter as!

Bob_John · December 23, 2018, 3:26pm

Dnsmasq is included by default in DD-WRT and lightttpd can be installed via opkg.

DanSchaper · December 23, 2018, 3:32pm

https://docs.pi-hole.net/ftldns/compatibility/ is a list of the platforms that are currently known to be compatible with FLTDNS. You can try to compile FTL for your router but as we do not offer binaries not currently compiled by our own CI/CD process we would not be able to provide binaries. We also are not currently able to package for repository deployment via apt/yum/opkg/etc...

Bob_John · December 24, 2018, 10:59pm

I didn't say anything about FTLDNS. I only replied with information about DD-WRT.

jfb · December 25, 2018, 12:03am

FTLDNS takes the place of dnsmasq (has dnsmasq embedded), so would need to be installed to run Pi-Hole on the router.