Ads not blocked on some clients

[Vejv-cz]

Hello.
I finally managed to install Pihle.
Unfortunately, it doesn't seem to be working properly. Everything is displayed correctly in Recent Queries.2020-05-07_13-18-59|612x500
Unfortunately, Pihole will also release ads.
I tried: restart Pihole, restart PC, ipconfig / flushdns, clear DNS cache in the browser.
I test ads on speedtest.net. Where do you test ads?

Why am I still seeing ads? Can you please advise?!

[DanSchaper]

Please follow the below template, it will help us to help you!

Expected Behaviour:

[Replace this text with what you think should be happening]

Actual Behaviour:

[replace this text with what is actually happening]

Debug Token:

[Replace this text with the debug token provided from running pihole -d (or running the debug script through the web interface]

[Vejv-cz]

I apologize for my previous vague question. Perhaps it will help more:

Expected Behaviour:

I think Pihole should prevent advertising on websites like speedtest.net.

Actual Behaviour:

Currently, Pihole receives all DNS queries from my devices, but does not block any advertising.

Debug Token:

https://tricorder.pi-hole.net/e4a76865f0

[Vejv-cz]

It helped? Can you please advise me why it doesn't work?

[jfb]

@Vejv-cz

Currently, Pihole receives all DNS queries from my devices, but does not block any advertising.

Your debug log shows that Pi-hole is receiving DNS queries and blocking per your blocklists.

   [2020-05-07 13:20:17.140 10963] Imported 51106 queries from the long-term database
   [2020-05-07 13:20:17.142 10963]  -> Total DNS queries: 51106
   [2020-05-07 13:20:17.142 10963]  -> Cached DNS queries: 21178
   [2020-05-07 13:20:17.142 10963]  -> Forwarded DNS queries: 23123
   [2020-05-07 13:20:17.142 10963]  -> Exactly blocked DNS queries: 6805
   [2020-05-07 13:20:17.142 10963]  -> Unknown DNS queries: 0
   [2020-05-07 13:20:17.143 10963]  -> Unique domains: 2122
   [2020-05-07 13:20:17.143 10963]  -> Unique clients: 10
   [2020-05-07 13:20:17.143 10963]  -> Known forward destinations: 2

If you are seeing ads, it is likely that that (or those) clients have an alternate DNS server available to them.

From the client on which you see ads on speedtest.net, from the command prompt or terminal on that client (and not via ssh or Putty to the Pi), what is the output of

nslookup pi.hole

nslookup pi.hole 192.168.1.11

[Vejv-cz]

Thank you for answer. Output:

nslookup pi.hole 192.168.1.11
Server: cc74c245ce78
Address: 192.168.1.11

Name: pi.hole
Address: 192.168.1.11

[jfb]

@jfb

nslookup pi.hole

And this one?

[Vejv-cz]

Same result:

nslookup pi.hole
Server:  cc74c245ce78
Address:  192.168.1.11

Name:    pi.hole
Address:  192.168.1.11

[jfb]

That client is using Pi-hole for DNS, but the browser might not be. Use these tools and see if you are seeing all the DNS traffic from that browser in Pi-hole:

How do I determine what domain an ad is coming from?

Block ads or fix broken sites This FAQ is written in the context of finding out how to block an ad that isn't blocked automatically, but the same steps can be used to troubleshoot issues with sites that don't function properly. An example is that sometimes certain payment gateways try to collect metrics on the sale, but these domains are blocked by Pi-hole, so the payment cannot be processed. Also, some links send you through several referrers and if one of them is blocked, you may land on a b…

[Vejv-cz]

I'll look into it, but now I've found an interesting thing: On a virtual PC that has never been connected to the Internet, ads aren't showing. On 5 home phones (android) and laptops and PCs (windows + firefox), the ads are still displayed, even if I manually entered the IP address of the pihole.

[jfb]

@Vejv-cz

PCs (windows + firefox), the ads are still displayed, even if I manually entered the IP address of the pihole.

From one of these PC's, what is the output of ipconfig /all

[Vejv-cz]

I don't think there's a mistake:

ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Vejv-cz_PC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Ethernet 3:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-ProtonVPN Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-B6-F0-03-14
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter VirtualBox Host-Only Network:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : VirtualBox Host-Only Ethernet Adapter
   Physical Address. . . . . . . . . : 0A-00-27-00-00-06
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::193f:2cd9:3309:eabc%6(Preferred)
   Autoconfiguration IPv4 Address. . : 169.254.234.188(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . :
   DHCPv6 IAID . . . . . . . . . . . : 269090855
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-26-2C-67-A5-00-E0-4C-68-21-09
   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet 5:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9 for OpenVPN Connect
   Physical Address. . . . . . . . . : 00-FF-B8-77-C3-BE
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) I211 Gigabit Network Connection
   Physical Address. . . . . . . . . : B4-2E-99-32-0A-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::b1cc:8d58:a947:9db6%3(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.51(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 800337561
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-26-2C-67-A5-00-E0-4C-68-21-09
   DNS Servers . . . . . . . . . . . : 192.168.1.11
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet 2:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Windscribe VPN
   Physical Address. . . . . . . . . : 00-FF-27-85-43-4F
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Síťové připojení Bluetooth:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
   Physical Address. . . . . . . . . : 00-1A-7D-DA-71-13
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

[deHakkelaar]

Maybe ads are leaking through the IPv6 DNS server(s) configured on the Win client:

netsh interface ipv4 show dnsservers

netsh interface ipv6 show dnsservers

Or the DNS answers coming from the DNS server(s) might be malformed/protected by some AV software:

Literally no ads being blocked

That Windows machine you are using wouldn't run a virus scanner like AVAST? AVAST offers a feature called RealSite that will inject additional DNS queries to a "trusted" DNS server (run by AVAST) in case something goes wrong with normal DNS resolution, see https://discourse.pi-hole.net/t/hilfe-windows-lost-hostname-auch-ohne-pihole-auf/27892/26 (though German, it also contains a short solution description in English).