After update ads not being blocked, passed on via ipv6 but ipv6 is not enabled

Help
1

After applying the last update(FTL Version), ads not being blocked, passed on via ipv6 but ipv6 is not enabled
it shows the site blocked on ipv4 and not blocked on ipv6

image.png959×110 7.26 KB

2

If you don't have IPv6 enable then there isn't a way for advertisements to get through. The green record shows that IPv6 specific "AAAA" records are being passed, but they return an IPv6 address, which your clients can't reach. We are looking at a way to disable the display if you truly have no IPv6 on the network, but for now your Pi-hole is working just fine.

3

I see the ads when browsing. IPv6 is not enable anywhere in the network. not my PC not the pi-hole, not the fire wall.
here's one

4

Those are coming in then through the Pi-hole, but not via IPv6. Some ads are served via the same domain as the website, and those ads can't be blocked without blocking access to the site directly. Can you F12 in the browser and find the full URL to the ad?

5

there weren't there before the update, tonight

6

Okay, can you run pihole -d and get us the token to take a look at the debugging information please?

7

so, yes to upload the log?

8

Your debug token is : i7t63j339d

9

Thanks, everything looks to be in order from the debug log, but we didn't catch any traffic to the site that was serving the ad. Those domains may be in cache in the browser or the DNS cache, are you able to share with us the site or sites that you are seeing new ad traffic from?

10

www.drudgereport.com/

11

Thanks, we'll take a look. I'm not seeing any ads on the site with the default blocklists in place, so I'll take a look at the site HTML and see if there's anything I can find...

12

thanks I've added ipv6 edge.quantserve.com to the blacklist and it's still showing green (forwarded)

image.png951×95 7.47 KB

I don't know if that's where the ad is i just think it should be noted that I've added it and it's still forwarded.. but i see the blacklist doesn't list ip version.

13

That's a false positive, since you don't have an IPv6 address for the Pi-hole, it doesn't know to use IPv6 AAAA blocking and it instead sends the DNS requests to the upstream. The only way currently to get those to show blocked would be to set up a Unique Local Address (ULA) for IPv6 on the network. But for now, they will show green, even though nothing is coming in to the network that way.

14

that's logical.
so you don't see any ads when you hit www.drudgereport.com ? because I'm still seeing them.
I do believe pi-hole is blocking on other sites.
do you have a site you hit to test against?

15

http://osxdaily.com has a number of adverts on their page, if you see banner adds or side ads, then there is some misconfiguration. Check out that page and let us know what you see.

16

I did not see ads on that site. ,,, and you don't on drudge?

odd, I see a banner ad at the top and three in the lower body of the site.

17

I had another developer take a look also at the site, and he was unable to see the adverts. I did try without the Pi-hole, and with cookies enabled, and the top banner ads were visible. But then without cookies I was unable to see them, so I think they may be serving some adverts directly or via a JavaScript call that is on the parent domain. Will still investigate further.

18

thanks Dan
.................

19

BTW when i click them they go here

http://www.tmn.today/2017/06/watch-what-happens-when-walter-encounters-an-iraqi-in-england/?source=DRadbl

http://www.tmn.today/2017/06/dolly-parton-stone-soup/?source=DRadbl

http://www.standunited.org/petition/gun-owners-want-concealed-carry-permit-reciprocity/?utm_source=imk&utm_medium=728x90&utm_term=constitution&utm_content=Reciprocity&utm_campaign=house_ad_728x90_Reciprocity_bloomberg

20

Just an update/FYI.. I see these adds @ work also and I use the host file from hosts-file.net (no pi-hole) so they are sneaking them by them too. I do incorporate the hosts-file.net files into my pi-hole.