[{"data":1,"prerenderedAt":1318},["ShallowReactive",2],{"post-how-to-configure-pi-hole-and-mullvad-on-a-raspberry-pi-fr":3,"related-posts-how-to-configure-pi-hole-and-mullvad-on-a-raspberry-pi-fr":1316,"related-categories-how-to-configure-pi-hole-and-mullvad-on-a-raspberry-pi-fr":1317},{"id":4,"title":5,"author":6,"authorImageUrl":7,"authorUrl":8,"body":9,"categorySlug":1280,"categoryText":1281,"dateModified":1282,"datePublished":1282,"description":1283,"extension":1284,"faqs":1285,"image":1307,"language":1308,"meta":1309,"navigation":1310,"path":1311,"seo":1312,"sitemap":1313,"stem":1314,"__hash__":1315},"blog\u002Ffr\u002Fblog\u002Fhow-to-configure-pi-hole-and-mullvad-on-a-raspberry-pi.md","Utiliser Pi-hole et le VPN Mullvad sur un Raspberry Pi","Bruma","\u002Fimages\u002Fauthors\u002Fbruma.jpg","https:\u002F\u002Fbrumaombra.com",{"type":10,"value":11,"toc":1242},"minimark",[12,17,21,24,41,44,48,53,61,70,78,82,89,95,98,100,104,107,109,113,122,126,152,160,163,167,170,183,187,190,234,238,258,262,265,281,289,292,294,298,302,305,343,351,355,358,381,387,390,396,405,411,418,424,436,444,448,451,466,474,483,485,489,496,498,502,517,521,546,554,558,568,586,590,608,629,636,654,662,665,681,685,688,692,695,710,722,726,741,749,760,780,783,816,828,836,840,910,941,944,962,970,976,991,999,1003,1006,1009,1013,1026,1033,1045,1048,1061,1064,1067,1080,1088,1091,1102,1110,1112,1116,1125,1133,1137,1141,1156,1160,1163,1167,1174,1177,1184,1194,1198,1201,1206,1209,1213,1216,1220,1223,1226,1228,1232,1235,1238],[13,14,16],"h2",{"id":15},"introduction","Introduction",[18,19,20],"p",{},"Vous craignez que votre fournisseur d'accès Internet vous espionne et lise tout le trafic de votre réseau domestique ? Vous en avez assez de voir des publicités partout ? Ou vous n'aimez simplement pas l'idée qu'une entreprise puisse voir et suivre chaque mouvement de souris et chaque frappe lorsque vous naviguez ?",[18,22,23],{},"Si ce sont vos préoccupations, vous êtes au bon endroit. Dans ce guide pratique, nous allons configurer un bloqueur de publicités et de traceurs pour tout le réseau, une sorte de bouclier numérique entre vous, votre fournisseur et les sociétés d'analyse.",[18,25,26,27,34,35,40],{},"Nous utiliserons ",[28,29,33],"a",{"href":30,"rel":31},"https:\u002F\u002Fpi-hole.net\u002F",[32],"nofollow","Pi-hole"," (un système de filtrage DNS très populaire) pour bloquer les publicités et les traceurs, ainsi que le ",[28,36,39],{"href":37,"rel":38},"https:\u002F\u002Fmullvad.net\u002F",[32],"VPN Mullvad"," (un fournisseur très respectueux de la vie privée) pour cacher votre trafic Web à votre fournisseur.",[42,43],"hr",{},[13,45,47],{"id":46},"ce-dont-nous-avons-besoin","Ce dont nous avons besoin",[49,50,52],"h3",{"id":51},"raspberry-pi","Raspberry Pi",[18,54,55,56,60],{},"L'élément principal est le ",[28,57,52],{"href":58,"rel":59},"https:\u002F\u002Fwww.raspberrypi.com\u002F",[32],", un petit ordinateur connu qui permet de tester des projets chez soi sans serveur coûteux. Son processeur ARM et sa mémoire suffisent largement à notre bouclier réseau.",[18,62,63],{},[64,65],"img",{"alt":66,"height":67,"src":68,"width":69},"Présentation du Raspberry Pi",941,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fraspberry-pi-description.png",1672,[18,71,26,72,77],{},[28,73,76],{"href":74,"rel":75},"https:\u002F\u002Fwww.raspberrypi.com\u002Fsoftware\u002F",[32],"Raspberry Pi OS",", plus précisément la version Lite sans interface graphique. Une variante de 4 ou 8 Go est recommandée, même si l'installation en consommera bien moins. Des notions de terminal et de connexions SSH sont également nécessaires.",[49,79,81],{"id":80},"mullvad","Mullvad",[18,83,84,85,88],{},"Ce projet nécessite un compte ",[86,87,81],"strong",{},". Ce fournisseur VPN populaire et respectueux de la vie privée ne demande même pas d'adresse e-mail : un numéro de compte aléatoire suffit, sans mot de passe.",[18,90,91],{},[64,92],{"alt":93,"height":67,"src":94,"width":69},"Présentation du VPN Mullvad","\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fmullvad-vpn-description.png",[18,96,97],{},"Mullvad applique une politique stricte de non-conservation des journaux et ne stocke ni l'historique du trafic, ni les requêtes DNS, ni les horaires de connexion, ni les adresses IP, ni la consommation de bande passante. C'est un excellent choix pour éloigner votre trafic de votre fournisseur. J'ai aussi choisi Mullvad pour son attachement à la liberté d'expression et à un Internet ouvert.",[42,99],{},[13,101,103],{"id":102},"_1-préparer-le-raspberry-pi","1. Préparer le Raspberry Pi",[18,105,106],{},"Cette guide ne couvre pas l'installation du système ; nous passons directement à la configuration réseau. De nombreux guides détaillés sont disponibles en ligne. Commençons par configurer l'adresse IP du Pi.",[42,108],{},[13,110,112],{"id":111},"_2-définir-une-ip-statique","2. Définir une IP statique",[18,114,115,116,121],{},"Pour utiliser le Raspberry Pi comme serveur DNS (Pi-hole) et passerelle (Mullvad), nous devons définir une IP statique. Une adresse attribuée par DHCP peut changer et empêcher les autres appareils de retrouver le Pi. Nous allons donc utiliser ",[28,117,120],{"href":118,"rel":119},"https:\u002F\u002Fnetworkmanager.dev\u002F",[32],"NetworkManager"," pour fixer une adresse.",[49,123,125],{"id":124},"lister-les-interfaces-réseau","Lister les interfaces réseau",[127,128,133],"pre",{"className":129,"code":130,"language":131,"meta":132,"style":132},"language-bash shiki shiki-themes github-light github-dark","nmcli con show\n","bash","",[134,135,136],"code",{"__ignoreMap":132},[137,138,141,145,149],"span",{"class":139,"line":140},"line",1,[137,142,144],{"class":143},"sScJk","nmcli",[137,146,148],{"class":147},"sZZnC"," con",[137,150,151],{"class":147}," show\n",[18,153,154],{},[64,155],{"alt":156,"height":157,"src":158,"width":159},"Liste des connexions NetworkManager",418,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fcheck-networks.png",1024,[18,161,162],{},"Dans mon cas, la connexion s'appelle netplan-eth0 et le périphérique eth0.",[49,164,166],{"id":165},"configurer-avec-linterface-texte","Configurer avec l'interface texte",[18,168,169],{},"Vous pouvez utiliser l'interface simple ou la ligne de commande. Pour ouvrir l'interface :",[127,171,173],{"className":129,"code":172,"language":131,"meta":132,"style":132},"sudo nmtui\n",[134,174,175],{"__ignoreMap":132},[137,176,177,180],{"class":139,"line":140},[137,178,179],{"class":143},"sudo",[137,181,182],{"class":147}," nmtui\n",[49,184,186],{"id":185},"ou-depuis-la-ligne-de-commande","Ou depuis la ligne de commande",[18,188,189],{},"Cette méthode est plus rapide. Remplacez les noms et adresses par ceux de votre réseau.",[127,191,193],{"className":129,"code":192,"language":131,"meta":132,"style":132},"sudo nmcli con mod netplan-eth0 ipv4.addresses \"192.168.21.82\u002F24\" ipv4.gateway \"192.168.21.1\" ipv4.dns \"192.168.21.1,1.1.1.1\" ipv4.method manual\n",[134,194,195],{"__ignoreMap":132},[137,196,197,199,202,204,207,210,213,216,219,222,225,228,231],{"class":139,"line":140},[137,198,179],{"class":143},[137,200,201],{"class":147}," nmcli",[137,203,148],{"class":147},[137,205,206],{"class":147}," mod",[137,208,209],{"class":147}," netplan-eth0",[137,211,212],{"class":147}," ipv4.addresses",[137,214,215],{"class":147}," \"192.168.21.82\u002F24\"",[137,217,218],{"class":147}," ipv4.gateway",[137,220,221],{"class":147}," \"192.168.21.1\"",[137,223,224],{"class":147}," ipv4.dns",[137,226,227],{"class":147}," \"192.168.21.1,1.1.1.1\"",[137,229,230],{"class":147}," ipv4.method",[137,232,233],{"class":147}," manual\n",[49,235,237],{"id":236},"appliquer-les-changements","Appliquer les changements",[127,239,241],{"className":129,"code":240,"language":131,"meta":132,"style":132},"sudo nmcli device reapply eth0\n",[134,242,243],{"__ignoreMap":132},[137,244,245,247,249,252,255],{"class":139,"line":140},[137,246,179],{"class":143},[137,248,201],{"class":147},[137,250,251],{"class":147}," device",[137,253,254],{"class":147}," reapply",[137,256,257],{"class":147}," eth0\n",[49,259,261],{"id":260},"vérifier-linterface","Vérifier l'interface",[18,263,264],{},"Vérifiez que l'adresse, la passerelle et le DNS correspondent aux valeurs définies.",[127,266,268],{"className":129,"code":267,"language":131,"meta":132,"style":132},"nmcli device show eth0\n",[134,269,270],{"__ignoreMap":132},[137,271,272,274,276,279],{"class":139,"line":140},[137,273,144],{"class":143},[137,275,251],{"class":147},[137,277,278],{"class":147}," show",[137,280,257],{"class":147},[18,282,283],{},[64,284],{"alt":285,"height":286,"src":287,"width":288},"Détails de l'interface NetworkManager",483,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fcheck-network-info.png",1086,[18,290,291],{},"Le Raspberry Pi possède maintenant une IP statique. En SSH, la connexion peut être interrompue ; reconnectez-vous avec la nouvelle adresse.",[42,293],{},[13,295,297],{"id":296},"_3-installer-pi-hole","3. Installer Pi-hole",[49,299,301],{"id":300},"mettre-dabord-le-système-à-jour","Mettre d'abord le système à jour",[18,303,304],{},"Installez les dernières mises à jour et redémarrez le Pi :",[127,306,308],{"className":129,"code":307,"language":131,"meta":132,"style":132},"sudo apt update && sudo apt full-upgrade -y\nsudo reboot\n",[134,309,310,335],{"__ignoreMap":132},[137,311,312,314,317,320,324,326,328,331],{"class":139,"line":140},[137,313,179],{"class":143},[137,315,316],{"class":147}," apt",[137,318,319],{"class":147}," update",[137,321,323],{"class":322},"sVt8B"," && ",[137,325,179],{"class":143},[137,327,316],{"class":147},[137,329,330],{"class":147}," full-upgrade",[137,332,334],{"class":333},"sj4cs"," -y\n",[137,336,338,340],{"class":139,"line":337},2,[137,339,179],{"class":143},[137,341,342],{"class":147}," reboot\n",[18,344,345],{},[64,346],{"alt":347,"height":348,"src":349,"width":350},"Mise à jour du système Raspberry Pi",1197,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fupdate-system.png",2371,[49,352,354],{"id":353},"installer-pi-hole","Installer Pi-hole",[18,356,357],{},"Utilisez l'installateur officiel en une étape. Vous pouvez examiner le script avant de l'exécuter.",[127,359,361],{"className":129,"code":360,"language":131,"meta":132,"style":132},"curl -sSL https:\u002F\u002Finstall.pi-hole.net | bash\n",[134,362,363],{"__ignoreMap":132},[137,364,365,368,371,374,378],{"class":139,"line":140},[137,366,367],{"class":143},"curl",[137,369,370],{"class":333}," -sSL",[137,372,373],{"class":147}," https:\u002F\u002Finstall.pi-hole.net",[137,375,377],{"class":376},"szBVR"," |",[137,379,380],{"class":143}," bash\n",[18,382,383],{},[64,384],{"alt":385,"height":348,"src":386,"width":350},"Écran d'accueil de l'installateur Pi-hole","\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fpi-hole-installer.png",[18,388,389],{},"Confirmez l'IP statique et cliquez sur Continue.",[18,391,392],{},[64,393],{"alt":394,"height":348,"src":395,"width":350},"Sélection d'interface de l'installateur Pi-hole","\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fpi-hole-installer-2.png",[18,397,398,399,404],{},"Choisissez ",[28,400,403],{"href":401,"rel":402},"https:\u002F\u002Fwww.cloudflare.com\u002F",[32],"Cloudflare"," comme DNS amont pour le moment ; nous le changerons lorsque Mullvad fonctionnera.",[18,406,407],{},[64,408],{"alt":409,"height":348,"src":410,"width":350},"Sélection du DNS amont Pi-hole","\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fpi-hole-installer-3.png",[18,412,413,414,417],{},"Confirmez la liste ",[86,415,416],{},"StevenBlack Unified Hosts",", un bon point de départ pour bloquer les domaines publicitaires et de suivi.",[18,419,420],{},[64,421],{"alt":422,"height":348,"src":423,"width":350},"Installation Pi-hole terminée","\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fpi-hole-installer-4.png",[18,425,426,427,430,431,435],{},"L'installation est terminée. Notez le lien du panneau et le mot de passe : ",[86,428,429],{},"http:\u002F\u002F\u003Cpi-ip>\u002Fadmin"," ou ",[28,432,433],{"href":433,"rel":434},"http:\u002F\u002Fpi.hole\u002Fadmin",[32],".",[18,437,438],{},[64,439],{"alt":440,"height":441,"src":442,"width":443},"Connexion à l'interface Web Pi-hole",1438,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fpi-hole-web-interface.jpg",2004,[49,445,447],{"id":446},"définir-un-nouveau-mot-de-passe","Définir un nouveau mot de passe",[18,449,450],{},"Changez le mot de passe généré depuis le terminal et n'en réutilisez jamais un autre.",[127,452,454],{"className":129,"code":453,"language":131,"meta":132,"style":132},"sudo pihole setpassword\n",[134,455,456],{"__ignoreMap":132},[137,457,458,460,463],{"class":139,"line":140},[137,459,179],{"class":143},[137,461,462],{"class":147}," pihole",[137,464,465],{"class":147}," setpassword\n",[18,467,468],{},[64,469],{"alt":470,"height":471,"src":472,"width":473},"Tableau de bord Pi-hole",1921,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fpi-hole-web-interface-2.jpg",1914,[18,475,476,477,482],{},"Le bloqueur réseau fonctionne. Consultez ",[28,478,481],{"href":479,"rel":480},"https:\u002F\u002Fdocs.pi-hole.net\u002Fmain\u002Fbasic-install\u002F",[32],"la documentation officielle"," pour en savoir plus.",[42,484],{},[13,486,488],{"id":487},"_4-configurer-le-dns-du-réseau","4. Configurer le DNS du réseau",[18,490,491,492,495],{},"Pi-hole ne filtre que les requêtes qu'il reçoit. Configurez le DHCP du routeur pour distribuer l'IP du Raspberry Pi comme DNS principal, puis renouvelez les baux ou reconnectez les clients. Si le routeur ne le permet pas, configurez chaque appareil manuellement. Le Pi peut aussi utiliser Pi-hole via ",[86,493,494],{},"\u002Fetc\u002Fdhcpcd.conf"," ou NetworkManager ; une mauvaise configuration peut couper la connexion.",[42,497],{},[13,499,501],{"id":500},"_5-installer-wireguard-et-mullvad","5. Installer WireGuard et Mullvad",[18,503,504,505,510,511,513,514,516],{},"Une fois Pi-hole opérationnel, installez ",[28,506,509],{"href":507,"rel":508},"https:\u002F\u002Fwww.wireguard.com\u002F",[32],"WireGuard",". ",[86,512,509],{}," crée un tunnel VPN chiffré, léger et rapide. ",[86,515,81],{}," fournit le fichier de configuration ; WireGuard le lit, établit la connexion et achemine le trafic, tandis que Pi-hole filtre le DNS.",[49,518,520],{"id":519},"installer-wireguard","Installer WireGuard",[127,522,524],{"className":129,"code":523,"language":131,"meta":132,"style":132},"sudo apt install wireguard wireguard-tools resolvconf -y\n",[134,525,526],{"__ignoreMap":132},[137,527,528,530,532,535,538,541,544],{"class":139,"line":140},[137,529,179],{"class":143},[137,531,316],{"class":147},[137,533,534],{"class":147}," install",[137,536,537],{"class":147}," wireguard",[137,539,540],{"class":147}," wireguard-tools",[137,542,543],{"class":147}," resolvconf",[137,545,334],{"class":333},[18,547,548],{},[64,549],{"alt":550,"height":551,"src":552,"width":553},"Installation de WireGuard",976,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fwireguard-installer.png",1924,[49,555,557],{"id":556},"configurer-wireguard","Configurer WireGuard",[18,559,560,561,564,565,435],{},"Téléchargez depuis votre compte Mullvad une configuration WireGuard pour Linux, choisissez un serveur et enregistrez-la sous ",[86,562,563],{},"mullvad.conf"," dans ",[86,566,567],{},"\u002Fetc\u002Fwireguard",[127,569,571],{"className":129,"code":570,"language":131,"meta":132,"style":132},"sudo chmod 600 \u002Fetc\u002Fwireguard\u002Fmullvad.conf\n",[134,572,573],{"__ignoreMap":132},[137,574,575,577,580,583],{"class":139,"line":140},[137,576,179],{"class":143},[137,578,579],{"class":147}," chmod",[137,581,582],{"class":333}," 600",[137,584,585],{"class":147}," \u002Fetc\u002Fwireguard\u002Fmullvad.conf\n",[49,587,589],{"id":588},"démarrer-et-vérifier-le-tunnel","Démarrer et vérifier le tunnel",[127,591,593],{"className":129,"code":592,"language":131,"meta":132,"style":132},"sudo wg-quick up mullvad\n",[134,594,595],{"__ignoreMap":132},[137,596,597,599,602,605],{"class":139,"line":140},[137,598,179],{"class":143},[137,600,601],{"class":147}," wg-quick",[137,603,604],{"class":147}," up",[137,606,607],{"class":147}," mullvad\n",[127,609,611],{"className":129,"code":610,"language":131,"meta":132,"style":132},"sudo wg show\ncurl https:\u002F\u002Fam.i.mullvad.net\u002Fconnected\n",[134,612,613,622],{"__ignoreMap":132},[137,614,615,617,620],{"class":139,"line":140},[137,616,179],{"class":143},[137,618,619],{"class":147}," wg",[137,621,151],{"class":147},[137,623,624,626],{"class":139,"line":337},[137,625,367],{"class":143},[137,627,628],{"class":147}," https:\u002F\u002Fam.i.mullvad.net\u002Fconnected\n",[18,630,631,632,635],{},"Vous devez voir ",[86,633,634],{},"\"You are connected to Mullvad\"",". Activez ensuite le démarrage automatique :",[127,637,639],{"className":129,"code":638,"language":131,"meta":132,"style":132},"sudo systemctl enable wg-quick@mullvad\n",[134,640,641],{"__ignoreMap":132},[137,642,643,645,648,651],{"class":139,"line":140},[137,644,179],{"class":143},[137,646,647],{"class":147}," systemctl",[137,649,650],{"class":147}," enable",[137,652,653],{"class":147}," wg-quick@mullvad\n",[18,655,656],{},[64,657],{"alt":658,"height":659,"src":660,"width":661},"Service WireGuard activé",318,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fwireguard-installer-2.png",1605,[18,663,664],{},"Pour arrêter le tunnel pendant le dépannage :",[127,666,668],{"className":129,"code":667,"language":131,"meta":132,"style":132},"sudo wg-quick down mullvad\n",[134,669,670],{"__ignoreMap":132},[137,671,672,674,676,679],{"class":139,"line":140},[137,673,179],{"class":143},[137,675,601],{"class":147},[137,677,678],{"class":147}," down",[137,680,607],{"class":147},[49,682,684],{"id":683},"acheminer-le-trafic-par-mullvad","Acheminer le trafic par Mullvad",[18,686,687],{},"Pour les autres appareils, le Pi doit transférer et masquer le trafic. Nous supposons que :",[689,690],"blog-list",{":items":691},"[\"L'interface LAN est eth0.\",\"L'interface WireGuard Mullvad est mullvad, car le fichier s'appelle mullvad.conf.\",\"L'adresse LAN du Raspberry Pi est 192.168.21.82.\"]",[18,693,694],{},"Remplacez les valeurs d'exemple par les vôtres. Vérifiez les interfaces avec :",[127,696,698],{"className":129,"code":697,"language":131,"meta":132,"style":132},"ip link show\n",[134,699,700],{"__ignoreMap":132},[137,701,702,705,708],{"class":139,"line":140},[137,703,704],{"class":143},"ip",[137,706,707],{"class":147}," link",[137,709,151],{"class":147},[18,711,712,713,716,717,719,720,435],{},"Si elle s'appelle ",[86,714,715],{},"wg0",", remplacez ",[86,718,80],{}," par ",[86,721,715],{},[49,723,725],{"id":724},"activer-le-transfert-ipv4","Activer le transfert IPv4",[127,727,729],{"className":129,"code":728,"language":131,"meta":132,"style":132},"sudo sysctl net.ipv4.ip_forward\n",[134,730,731],{"__ignoreMap":132},[137,732,733,735,738],{"class":139,"line":140},[137,734,179],{"class":143},[137,736,737],{"class":147}," sysctl",[137,739,740],{"class":147}," net.ipv4.ip_forward\n",[18,742,743],{},[64,744],{"alt":745,"height":746,"src":747,"width":748},"Transfert IPv4 désactivé",201,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fwireguard-installer-3.png",789,[18,750,751,752,755,756,759],{},"La valeur doit être ",[86,753,754],{},"1",". Si elle vaut ",[86,757,758],{},"0",", activez-la :",[127,761,763],{"className":129,"code":762,"language":131,"meta":132,"style":132},"sudo sysctl -w net.ipv4.ip_forward=1\n",[134,764,765],{"__ignoreMap":132},[137,766,767,769,771,774,777],{"class":139,"line":140},[137,768,179],{"class":143},[137,770,737],{"class":147},[137,772,773],{"class":333}," -w",[137,775,776],{"class":147}," net.ipv4.ip_forward=",[137,778,779],{"class":333},"1\n",[18,781,782],{},"Rendez le réglage permanent :",[127,784,786],{"className":129,"code":785,"language":131,"meta":132,"style":132},"echo 'net.ipv4.ip_forward=1' | sudo tee \u002Fetc\u002Fsysctl.d\u002F99-router.conf\nsudo sysctl --system\n",[134,787,788,807],{"__ignoreMap":132},[137,789,790,793,796,798,801,804],{"class":139,"line":140},[137,791,792],{"class":333},"echo",[137,794,795],{"class":147}," 'net.ipv4.ip_forward=1'",[137,797,377],{"class":376},[137,799,800],{"class":143}," sudo",[137,802,803],{"class":147}," tee",[137,805,806],{"class":147}," \u002Fetc\u002Fsysctl.d\u002F99-router.conf\n",[137,808,809,811,813],{"class":139,"line":337},[137,810,179],{"class":143},[137,812,737],{"class":147},[137,814,815],{"class":333}," --system\n",[127,817,818],{"className":129,"code":728,"language":131,"meta":132,"style":132},[134,819,820],{"__ignoreMap":132},[137,821,822,824,826],{"class":139,"line":140},[137,823,179],{"class":143},[137,825,737],{"class":147},[137,827,740],{"class":147},[18,829,830],{},[64,831],{"alt":832,"height":833,"src":834,"width":835},"Transfert IPv4 activé",243,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fwireguard-installer-4.png",747,[49,837,839],{"id":838},"autoriser-le-transfert-et-ajouter-le-nat","Autoriser le transfert et ajouter le NAT",[127,841,843],{"className":129,"code":842,"language":131,"meta":132,"style":132},"sudo iptables -A FORWARD -i eth0 -o mullvad -j ACCEPT\nsudo iptables -A FORWARD -i mullvad -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT\n",[134,844,845,876],{"__ignoreMap":132},[137,846,847,849,852,855,858,861,864,867,870,873],{"class":139,"line":140},[137,848,179],{"class":143},[137,850,851],{"class":147}," iptables",[137,853,854],{"class":333}," -A",[137,856,857],{"class":147}," FORWARD",[137,859,860],{"class":333}," -i",[137,862,863],{"class":147}," eth0",[137,865,866],{"class":333}," -o",[137,868,869],{"class":147}," mullvad",[137,871,872],{"class":333}," -j",[137,874,875],{"class":147}," ACCEPT\n",[137,877,878,880,882,884,886,888,890,892,894,897,900,903,906,908],{"class":139,"line":337},[137,879,179],{"class":143},[137,881,851],{"class":147},[137,883,854],{"class":333},[137,885,857],{"class":147},[137,887,860],{"class":333},[137,889,869],{"class":147},[137,891,866],{"class":333},[137,893,863],{"class":147},[137,895,896],{"class":333}," -m",[137,898,899],{"class":147}," conntrack",[137,901,902],{"class":333}," --ctstate",[137,904,905],{"class":147}," ESTABLISHED,RELATED",[137,907,872],{"class":333},[137,909,875],{"class":147},[127,911,913],{"className":129,"code":912,"language":131,"meta":132,"style":132},"sudo iptables -t nat -A POSTROUTING -o mullvad -j MASQUERADE\n",[134,914,915],{"__ignoreMap":132},[137,916,917,919,921,924,927,929,932,934,936,938],{"class":139,"line":140},[137,918,179],{"class":143},[137,920,851],{"class":147},[137,922,923],{"class":333}," -t",[137,925,926],{"class":147}," nat",[137,928,854],{"class":333},[137,930,931],{"class":147}," POSTROUTING",[137,933,866],{"class":333},[137,935,869],{"class":147},[137,937,872],{"class":333},[137,939,940],{"class":147}," MASQUERADE\n",[18,942,943],{},"Installez l'outil de persistance :",[127,945,947],{"className":129,"code":946,"language":131,"meta":132,"style":132},"sudo apt install iptables-persistent -y\n",[134,948,949],{"__ignoreMap":132},[137,950,951,953,955,957,960],{"class":139,"line":140},[137,952,179],{"class":143},[137,954,316],{"class":147},[137,956,534],{"class":147},[137,958,959],{"class":147}," iptables-persistent",[137,961,334],{"class":333},[18,963,964],{},[64,965],{"alt":966,"height":967,"src":968,"width":969},"Configuration IPv4 enregistrée",841,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fwireguard-installer-5.png",1719,[18,971,972],{},[64,973],{"alt":974,"height":967,"src":975,"width":969},"Configuration IPv6 enregistrée","\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fwireguard-installer-6.png",[127,977,979],{"className":129,"code":978,"language":131,"meta":132,"style":132},"sudo netfilter-persistent save\n",[134,980,981],{"__ignoreMap":132},[137,982,983,985,988],{"class":139,"line":140},[137,984,179],{"class":143},[137,986,987],{"class":147}," netfilter-persistent",[137,989,990],{"class":147}," save\n",[18,992,993],{},[64,994],{"alt":995,"height":996,"src":997,"width":998},"Règles de pare-feu persistantes",594,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fwireguard-installer-7.png",1272,[49,1000,1002],{"id":1001},"configurer-les-appareils-réseau","Configurer les appareils réseau",[18,1004,1005],{},"Utilisez ces valeurs sur chaque appareil :",[689,1007],{":items":1008},"[\"Une IP dans le même LAN que le Raspberry Pi.\",\"L'IP du Raspberry Pi comme passerelle par défaut.\",\"L'IP du Raspberry Pi comme serveur DNS.\"]",[49,1010,1012],{"id":1011},"tester-la-route-par-étapes","Tester la route par étapes",[127,1014,1016],{"className":129,"code":1015,"language":131,"meta":132,"style":132},"ping 192.168.21.82\n",[134,1017,1018],{"__ignoreMap":132},[137,1019,1020,1023],{"class":139,"line":140},[137,1021,1022],{"class":143},"ping",[137,1024,1025],{"class":333}," 192.168.21.82\n",[18,1027,1028,1029,1032],{},"Puis testez le DNS Cloudflare ",[86,1030,1031],{},"1.1.1.1"," :",[127,1034,1036],{"className":129,"code":1035,"language":131,"meta":132,"style":132},"ping 1.1.1.1\n",[134,1037,1038],{"__ignoreMap":132},[137,1039,1040,1042],{"class":139,"line":140},[137,1041,1022],{"class":143},[137,1043,1044],{"class":333}," 1.1.1.1\n",[18,1046,1047],{},"Enfin, testez la résolution DNS :",[127,1049,1051],{"className":129,"code":1050,"language":131,"meta":132,"style":132},"nslookup example.com\n",[134,1052,1053],{"__ignoreMap":132},[137,1054,1055,1058],{"class":139,"line":140},[137,1056,1057],{"class":143},"nslookup",[137,1059,1060],{"class":147}," example.com\n",[18,1062,1063],{},"En cas d'échec :",[689,1065],{":items":1066},"[\"Si le premier test échoue, vérifiez le réseau et la passerelle du PC.\",\"Si le premier réussit mais que 1.1.1.1 échoue, vérifiez le transfert IPv4, le NAT et le pare-feu Mullvad.\",\"Si l'IP publique fonctionne mais pas le DNS, vérifiez que Pi-hole écoute sur le LAN et que le PC l'utilise comme DNS.\"]",[127,1068,1070],{"className":129,"code":1069,"language":131,"meta":132,"style":132},"sudo wg show\n",[134,1071,1072],{"__ignoreMap":132},[137,1073,1074,1076,1078],{"class":139,"line":140},[137,1075,179],{"class":143},[137,1077,619],{"class":147},[137,1079,151],{"class":147},[18,1081,1082],{},[64,1083],{"alt":1084,"height":1085,"src":1086,"width":1087},"Vérification du trafic Mullvad",690,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fraspberry-mullvad-traffic.png",1288,[18,1089,1090],{},"Les compteurs doivent augmenter. Vérifiez l'adresse publique depuis le PC :",[127,1092,1094],{"className":129,"code":1093,"language":131,"meta":132,"style":132},"curl https:\u002F\u002Fam.i.mullvad.net\u002Fconnected\n",[134,1095,1096],{"__ignoreMap":132},[137,1097,1098,1100],{"class":139,"line":140},[137,1099,367],{"class":143},[137,1101,628],{"class":147},[18,1103,1104],{},[64,1105],{"alt":1106,"height":1107,"src":1108,"width":1109},"Sortie de la commande de connexion Mullvad",588,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fcmd-mullvad-check.png",1357,[42,1111],{},[13,1113,1115],{"id":1114},"_6-vérifier-notre-sécurité","6. Vérifier notre sécurité",[18,1117,1118,1119,1124],{},"Ouvrez la ",[28,1120,1123],{"href":1121,"rel":1122},"https:\u002F\u002Fmullvad.net\u002Fcheck",[32],"vérification de connexion Mullvad"," et contrôlez l'IP de sortie ainsi que les résolveurs DNS.",[18,1126,1127],{},[64,1128],{"alt":1129,"height":1130,"src":1131,"width":1132},"Vérification de connexion Mullvad",1317,"\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fmullvad-check.jpg",2383,[49,1134,1136],{"id":1135},"comprendre-le-résultat","Comprendre le résultat",[689,1138],{":items":1139,"variant":1140},"[\"Si l'IP de sortie appartient à Mullvad, comme **it-mil-wg-001** à Milan, le trafic passe correctement par Mullvad.\",\"Si les résolveurs sont des adresses Cloudflare telles que **172.70.x.x**, **1.1.1.1** ou l'adresse IPv6 correspondante, Pi-hole transmet actuellement les requêtes à Cloudflare.\"]","circle",[18,1142,1143,1144,1147,1148,1151,1152,1155],{},"En général, ",[86,1145,1146],{},"Using Mullvad VPN"," et ",[86,1149,1150],{},"No WebRTC leaks"," sont verts, tandis que ",[86,1153,1154],{},"No DNS leaks"," est rouge, car Cloudflare n'est pas exploité par Mullvad.",[49,1157,1159],{"id":1158},"rendre-le-contrôle-dns-vert","Rendre le contrôle DNS vert",[18,1161,1162],{},"Remplacez le DNS amont de Pi-hole par un DNS Mullvad :",[689,1164],{":items":1165,"variant":1166},"[\"DNS interne Mullvad : 10.64.0.1. Fonctionne uniquement avec le tunnel WireGuard actif.\",\"DNS public Mullvad sans filtrage : 194.242.2.2. Fonctionne même si le tunnel tombe brièvement.\",\"DNS public Mullvad avec blocage des publicités, traceurs et logiciels malveillants : 194.242.2.4.\",\"DNS public Mullvad avec blocage des publicités uniquement : 194.242.2.3.\"]","numbered",[18,1168,1169,1170,1032],{},"Dans le ",[28,1171,1173],{"href":433,"rel":1172},[32],"tableau de bord Pi-hole",[689,1175],{":items":1176,"variant":1166},"[\"Ouvrez l'interface d'administration Pi-hole.\",\"Allez dans Settings, puis DNS.\",\"Sous Upstream DNS Servers, désélectionnez Cloudflare et les autres fournisseurs.\",\"Sélectionnez Custom et saisissez une adresse DNS Mullvad. Ajoutez IPv4 et IPv6 si nécessaire.\",\"Cliquez sur Save en bas de la page.\"]",[18,1178,1179],{},[64,1180],{"alt":1181,"height":471,"src":1182,"width":1183},"Paramètres DNS Pi-hole","\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fpi-hole-web-interface-3.jpg",1900,[18,1185,1186,1187,510,1191,1193],{},"Attendez quelques secondes, puis relancez le test sur ",[28,1188,1190],{"href":1121,"rel":1189},[32],"mullvad.net\u002Fcheck",[86,1192,1154],{}," devrait être vert.",[49,1195,1197],{"id":1196},"si-une-fuite-dns-est-toujours-signalée","Si une fuite DNS est toujours signalée",[18,1199,1200],{},"Le navigateur utilise souvent son propre DNS over HTTPS et ignore Pi-hole. Désactivez donc le DNS sécurisé.",[1202,1203,1205],"h4",{"id":1204},"firefox","Firefox",[689,1207],{":items":1208,"variant":1166},"[\"Ouvrez Settings, puis Privacy & Security.\",\"Faites défiler jusqu'à DNS over HTTPS.\",\"Sélectionnez Off.\",\"Redémarrez Firefox et relancez le test Mullvad.\"]",[1202,1210,1212],{"id":1211},"chrome","Chrome",[689,1214],{":items":1215,"variant":1166},"[\"Ouvrez chrome:\u002F\u002Fsettings\u002Fsecurity.\",\"Dans Use secure DNS, désactivez l'option.\",\"Redémarrez Chrome et relancez le test Mullvad.\"]",[1202,1217,1219],{"id":1218},"edge","Edge",[689,1221],{":items":1222,"variant":1166},"[\"Ouvrez edge:\u002F\u002Fsettings\u002Fprivacy.\",\"Trouvez Use secure DNS et désactivez-le.\",\"Redémarrez Edge et relancez le test Mullvad.\"]",[18,1224,1225],{},"Si le résultat ne change pas, essayez une fenêtre privée ou un autre navigateur pour identifier la source de la fuite.",[42,1227],{},[13,1229,1231],{"id":1230},"conclusion","Conclusion",[18,1233,1234],{},"Votre Raspberry Pi agit maintenant comme bloqueur de publicités et de traceurs pour tout le réseau et achemine le trafic par le VPN Mullvad. Maintenez Raspberry Pi OS, Pi-hole, WireGuard et la configuration Mullvad à jour pour conserver une installation fiable et sécurisée.",[18,1236,1237],{},"Voilà, c'est terminé pour aujourd'hui. J'espère que ce guide vous a plu !",[1239,1240,1241],"style",{},"html pre.shiki code .sScJk, html code.shiki .sScJk{--shiki-default:#6F42C1;--shiki-dark:#B392F0}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}",{"title":132,"searchDepth":337,"depth":337,"links":1243},[1244,1245,1250,1251,1258,1263,1264,1274,1279],{"id":15,"depth":337,"text":16},{"id":46,"depth":337,"text":47,"children":1246},[1247,1249],{"id":51,"depth":1248,"text":52},3,{"id":80,"depth":1248,"text":81},{"id":102,"depth":337,"text":103},{"id":111,"depth":337,"text":112,"children":1252},[1253,1254,1255,1256,1257],{"id":124,"depth":1248,"text":125},{"id":165,"depth":1248,"text":166},{"id":185,"depth":1248,"text":186},{"id":236,"depth":1248,"text":237},{"id":260,"depth":1248,"text":261},{"id":296,"depth":337,"text":297,"children":1259},[1260,1261,1262],{"id":300,"depth":1248,"text":301},{"id":353,"depth":1248,"text":354},{"id":446,"depth":1248,"text":447},{"id":487,"depth":337,"text":488},{"id":500,"depth":337,"text":501,"children":1265},[1266,1267,1268,1269,1270,1271,1272,1273],{"id":519,"depth":1248,"text":520},{"id":556,"depth":1248,"text":557},{"id":588,"depth":1248,"text":589},{"id":683,"depth":1248,"text":684},{"id":724,"depth":1248,"text":725},{"id":838,"depth":1248,"text":839},{"id":1001,"depth":1248,"text":1002},{"id":1011,"depth":1248,"text":1012},{"id":1114,"depth":337,"text":1115,"children":1275},[1276,1277,1278],{"id":1135,"depth":1248,"text":1136},{"id":1158,"depth":1248,"text":1159},{"id":1196,"depth":1248,"text":1197},{"id":1230,"depth":337,"text":1231},"guides","Guides","2026-08-03","Guide pratique pour installer Pi-hole et configurer un Raspberry Pi comme passerelle Mullvad WireGuard, avec DNS, transfert, NAT et dépannage des fuites.","md",[1286,1289,1292,1295,1298,1301,1304],{"question":1287,"answer":1288},"À quoi sert l'utilisation de Pi-hole avec Mullvad sur un Raspberry Pi ?","Pi-hole bloque les publicités et les traceurs au niveau DNS, tandis que Mullvad achemine le trafic Internet dans un tunnel VPN chiffré. Ensemble, ils assurent un filtrage DNS à l'échelle du réseau et une protection VPN aux appareils qui utilisent le Raspberry Pi comme serveur DNS et passerelle.",{"question":1290,"answer":1291},"Un Raspberry Pi peut-il exécuter Pi-hole et Mullvad WireGuard simultanément ?","Oui. Il peut exécuter Pi-hole comme serveur DNS du réseau et WireGuard comme client VPN Mullvad. Avec le transfert IPv4 et le NAT configurés, il peut aussi acheminer le trafic des autres appareils dans le tunnel VPN.",{"question":1293,"answer":1294},"Pourquoi le Raspberry Pi a-t-il besoin d'une adresse IP statique ?","Il lui faut une adresse stable pour que les autres appareils puissent toujours le trouver comme serveur DNS et passerelle. Une adresse DHCP changeante pourrait interrompre le filtrage DNS et empêcher les appareils d'atteindre la passerelle VPN.",{"question":1296,"answer":1297},"Comment acheminer le trafic de mon réseau domestique par Mullvad ?","Activez le transfert IPv4, autorisez le transfert entre les interfaces LAN et WireGuard, ajoutez une règle de masquerade pour l'interface VPN et configurez chaque appareil afin qu'il utilise le Pi comme passerelle et serveur DNS.",{"question":1299,"answer":1300},"Quel serveur DNS Mullvad utiliser avec Pi-hole ?","Utilisez le DNS interne Mullvad 10.64.0.1 lorsque le tunnel WireGuard est actif. Pour le DNS public Mullvad, utilisez 194.242.2.2 sans filtrage, 194.242.2.4 avec blocage des publicités et traceurs, ou 194.242.2.3 avec blocage des publicités uniquement.",{"question":1302,"answer":1303},"Pourquoi la vérification Mullvad signale-t-elle une fuite DNS avec Cloudflare ?","Cloudflare n'est pas exploité par Mullvad ; sa vérification peut donc signaler une fuite même si le tunnel fonctionne correctement. Pour afficher No DNS leaks, configurez Pi-hole avec un résolveur DNS Mullvad plutôt qu'avec Cloudflare.",{"question":1305,"answer":1306},"Comment corriger une fuite DNS causée par le navigateur ?","Désactivez DNS over HTTPS ou le DNS sécurisé dans le navigateur, puis relancez la vérification Mullvad. Si le résultat ne change pas, testez une fenêtre privée ou un autre navigateur pour déterminer s'il contourne Pi-hole.","\u002Fimages\u002Fblog\u002Fpi-hole-and-mullvad\u002Fraspberry-pi-network.png","fr",{},true,"\u002Ffr\u002Fblog\u002Fhow-to-configure-pi-hole-and-mullvad-on-a-raspberry-pi",{"title":5,"description":1283},{"loc":1311},"fr\u002Fblog\u002Fhow-to-configure-pi-hole-and-mullvad-on-a-raspberry-pi","fVNoyd-5CMs6aoyhuzBtHZ3VXKWQGE92OeyYvl2Pzec",[],[],1786183715931]