How to Set Up a Pi-hole on a Raspberry Pi to Block Network Ads

Installing a traditional ad-blocker extension in your web browser is a great first step toward a cleaner internet experience. However, that extension only protects the specific browser on that specific computer. It does absolutely nothing to stop the invasive advertisements injected into your Smart TV’s YouTube app, the tracking telemetry silently phoning home from your smart home devices, or the pop-ups inside free mobile games on your smartphone. To protect every device in your home simultaneously, you must intercept the ads before they even enter your local network. By learning how to set up a Pi-hole on a Raspberry Pi to block network ads, you can create a powerful, network-wide “DNS sinkhole” that automatically drops advertising traffic into the void.

In this comprehensive hardware and networking guide, we will walk you through the entire Pi-hole deployment process. We will explain how the Domain Name System (DNS) filtering works, the exact terminal commands required to install the software on a Raspberry Pi, and the crucial final step of configuring your home router to route all traffic through your new ad-blocker.

Understanding How a DNS Sinkhole Works

Think of DNS (Domain Name System) as the phonebook of the internet. When you type `digitash.com` into your browser, your computer asks a DNS server to translate that human-readable name into an IP address (like `192.168.x.x`) so it can connect to the website.

When you visit a news website, the page attempts to load content from multiple different domains. It asks the DNS server for the IP address of the article, but it also asks for the IP address of `adserver.com` and `tracker.facebook.com`.

A Pi-hole replaces your ISP’s standard DNS server. It contains a massive, constantly updated blacklist of millions of known advertising and malware domains. When a device on your network asks the Pi-hole for the IP address of an ad server, the Pi-hole essentially lies. It returns a blank address (`0.0.0.0`). The ad simply never loads, saving bandwidth and significantly speeding up page load times across your entire house.

Prerequisites for the Project

• A Raspberry Pi: Any model will work, including the incredibly cheap Raspberry Pi Zero W or older Pi 2 models, as DNS routing requires very little processing power.
• An OS Installed: Your Pi should have Raspberry Pi OS (formerly Raspbian) installed on its MicroSD card, and it must be connected to your home network (preferably via an Ethernet cable for stability, though Wi-Fi works).
• Terminal Access: You must be able to access the Pi’s terminal, either by plugging it into a monitor and keyboard, or via SSH from your main computer.

Step 1: Assign a Static IP Address to the Pi

Because your entire network will rely on the Raspberry Pi to translate websites, the Pi must remain at the exact same IP address forever. If your router dynamically changes the Pi’s IP address, your internet will break.

1. Log into your home router’s administration panel (usually by typing 192.168.1.1 or 10.0.0.1 into your web browser).
2. Navigate to the DHCP or LAN settings section.
3. Find the “DHCP Reservation” or “Static IP” setting.
4. Assign a permanent, fixed IP address to your Raspberry Pi (e.g., 192.168.1.50) based on its MAC address.

Step 2: Install the Pi-hole Software

With a static IP secured, the installation process on the Raspberry Pi itself is incredibly streamlined.

1. Open the terminal on your Raspberry Pi (or connect via SSH).
2. Run a quick update to ensure your packages are current:

   sudo apt update && sudo apt upgrade -y

3. Execute the official automated Pi-hole installation script by typing this exact command and pressing Enter:

   curl -sSL https://install.pi-hole.net | bash

Step 3: Navigate the Installation Wizard

The terminal will change into a blue, graphical configuration wizard.

1. Press Enter to acknowledge the prompts regarding static IP requirements (which we handled in Step 1).
2. Upstream DNS Provider: The wizard will ask which DNS provider the Pi-hole should use for legitimate traffic (the websites that are *not* blocked). Select a fast, privacy-focused provider like Cloudflare (1.1.1.1) or Quad9.
3. Blocklists: Ensure the default StevenBlack blocklist is checked. You can add more later.
4. Admin Web Interface: Ensure both the Web Admin Interface and the Lighttpd web server are set to On. This provides you with a beautiful graphical dashboard.
5. Complete the installation. At the very end, the wizard will present you with an Admin Webpage login password. Write this password down immediately; you will need it to access the dashboard.

Step 4: Configure Your Router (The Crucial Final Step)

Your Pi-hole is running, but your network does not know it exists yet. You must force all your devices to use the Pi-hole for DNS requests.

1. Log back into your home router’s administration panel.
2. Navigate to the DHCP Settings or LAN Setup page.
3. Locate the fields for Primary DNS Server and Secondary DNS Server (Note: Do not confuse this with the WAN/Internet DNS settings).
4. Delete the existing ISP numbers and enter the static IP address of your Raspberry Pi (e.g., 192.168.1.50) as the Primary DNS. Leave the Secondary DNS completely blank, or enter the Pi-hole IP a second time. (If you enter Google’s 8.8.8.8 as a secondary, ads will leak through).
5. Save the router settings and reboot the router.

As devices reconnect to the Wi-Fi, they will receive the new DNS instructions and automatically begin routing traffic through the Pi-hole.

Step 5: Access the Dashboard

To view your network statistics and whitelist domains that accidentally broke a webpage, open any web browser on your network and type: http://pi.hole/admin or type the Pi’s IP address followed by /admin. Enter the password you saved in Step 3.

Reclaiming your internet privacy and bandwidth is a remarkably satisfying project. By taking an afternoon to set up a Pi-hole on a Raspberry Pi to block network ads, you fundamentally upgrade your home network’s security, ensuring that invasive trackers and intrusive advertisements are crushed silently in the background before they ever reach your screens.