Blacklist whatsapp

General
1

Bonjour,
Je cherche à utiliser pi-hole pour faire un filtre parental.
J'ai pu ajouter des groupes et clients à qui j'affecte différentes listes du type
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts
permettant de bloquer certains sites.
Cela fonctionne pas mal sauf pour whatsapp à partir de l'application sur tablette, smartphone..
Même avec une regex blacklist : (\.|^)c\.whatsapp\.net$ seul l'accès internet à whatapp est bloqué mais pas l'utilisation de l'application...
Avez-vous une idée de ce qu'il faut faire ?
Fred

2
3

Hi,
With "pihole -t" I don't see access from whatsapp application but only access from navigator.
Is it possible that the application has its own DNS ?
That means that it isn't possible to blacklist whatsapp application with pihole ?

Thanks
Fred

4

Yes. If this is the case, you will want to use a router that will redirect all outgoing port 53 queries (from all devices except Pi-hole) to Pi-hole. This will force this device or app to use Pi-hole for DNS.

5

For what it's worth, if I look at my query log, I see the following whatsapp domains:

g.whatsapp.net
mmg-fna.whatsapp.net
static.whatsapp.net
web.whatsapp.com

Though I couldn't tell you if preventing these domains from being resolved will stop whatsapp from working or not. You may need to try them

6

Thanks. On my internet box, the primary DNS is the ip of the pi-hole machine. All ports should use pi-hole for DNS right ?

Fred

7

Yes, provided they aren't hard coded with the IP of a alternate DNS. If they are, they go direct to that IP and ignore DHCP settings. This would be the case where you would need to redirect the DNS queries to Pi-hole.

Do you have a second DNS IP listed? If so, queries can go there and bypass Pi-hole.

8

I tried to delete my second DNS IP but it is the same.
In fact there is just a problem with backlist domains like facebook, whatsapp, youtube.
The blacklist is ok with the others like spotify....
image

Fred