Asus RT-AC68U not blocking or routing traffic through pi-hole

Help
4

Hi @mundert, am just warning you but probably your setup still doesnt filter out ads etc under certain conditions.
As long as your router advertises its own IP to the clients alongside the Pi-hole IP:

You can see what DNS server(s) your router is advertising when running below one on the Pi-hole host:

pi@ph5a:~ $ pihole-FTL dhcp-discover
[..]
   dns-server: 10.0.0.2
[..]

Those are the ones your clients will be querying to resolve domain names to IP addresses etc.
If you read below thread (with a nice recap from @bennor3814), best for you would be to replace the DHCP service on the Asus router with the one from Pi-hole:

To do so, you first have to enable the DHCP service on Pi-hole like below:

image
image852×290 11.8 KB

Then disable the one on the Asus router:

image

Validate everything Pi-hole is advertising with the pihole-FTL dhcp-discover command again.
Grab a test client (Windows/MacOS or Linux) and dis and reconnect it from/to network to renew its DHCP lease.
Check DNS server(s) this client is configured for now after renewing the DHCP lease:

And run below three on the client in a command prompt/terminal to test name resolution and blocking (flurry.com is on one of the blocklists):

C:\>nslookup pi.hole
Server:  ph5a.dehakkelaar.nl
Address:  10.0.0.2

Name:    pi.hole
Address:  10.0.0.2

C:\>nslookup flurry.com
Server:  ph5a.dehakkelaar.nl
Address:  10.0.0.2

Name:    flurry.com
Addresses:  ::
          0.0.0.0

C:\>nslookup pi-hole.net
Server:  ph5a.dehakkelaar.nl
Address:  10.0.0.2

Non-authoritative answer:
Name:    pi-hole.net
Address:  192.124.249.118

If that al looks good, you can proceed and renew the DHCP leases for the rest of your clients or wait out the DHCP lease time period (usually 24 hours).

1 Like