Blocked url

fafar1 · August 22, 2021, 1:01pm

Hi,
My pihole (on an odroid with ubuntu 18.04) block an adress https://www.securite-routiere.gouv.fr .
I tried to desactivate pihole, to add an exception, to change the Upstream DNS Servers on the pihole, but i can't load this page.
When I change the dns on my pc (linux mint 20.1) and i use 8.8.8.8 for example, i can access this url.
What can i change ?
Thanks for advance,
Emmanuel

Bucking_Horn · August 22, 2021, 1:51pm

Note that Pi-hole (as any DNS blocker) does block domains only, not URLs.

To find out which domains would be affected, see

fafar1 · August 22, 2021, 4:44pm

thanks for your help.
I don't understand why, when i disable pihole, the site is always blocked.

I made a pihole -t and for my request, i have :
Aug 22 18:39:13: query[AAAA] www.securite-routiere.gouv.fr from 192.168.1.49
Aug 22 18:39:13: cached www.securite-routiere.gouv.fr is NODATA-IPv6
Aug 22 18:39:14: query[A] fonts.googleapis.com from 192.168.1.49
Aug 22 18:39:14: forwarded fonts.googleapis.com to 1.0.0.1
Aug 22 18:39:14: query[A] cdn.tagcommander.com from 192.168.1.49
Aug 22 18:39:14: config cdn.tagcommander.com is 0.0.0.0
Aug 22 18:39:14: validation result is INSECURE
Aug 22 18:39:14: reply fonts.googleapis.com is 142.250.178.138
Aug 22 18:39:14: query[AAAA] cdn.tagcommander.com from 192.168.1.49

I added cdn.tagcommander.com in the white list, but it' s always blocked

Bucking_Horn · August 22, 2021, 7:39pm

Please upload a debug log and post just the token that is generated after the log is uploaded by running the following command from the Pi-hole host terminal:

pihole -d

or do it through the Web interface:

Tools > Generate Debug Log

fafar1 · August 23, 2021, 6:19am

I did a pihole -d and there is the token :
https://tricorder.pi-hole.net/SqwHz9B6/

thanks for your help

jfb · August 23, 2021, 2:58pm

This is a good indicator that Pi-hole is not the cause of the page not being able to load.

I cannot load any content from that page either - blank page with nothing displayed and no errors. Inspecting the html code shows over 1,000 lines, but nothing on my screen.

What are the outputs of the following commands from the Pi terminal:

dig www.securite-routiere.gouv.fr @208.67.222.222

dig www.securite-routiere.gouv.fr @127.0.0.1

dig www.securite-routiere.gouv.fr @192.168.1.21

fafar1 · August 23, 2021, 5:09pm

You're right. This url is strange.
Try this one, who is good with another dns, but blocked by pihole :

www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion

I did the commands you said but in the copy below, i had to remove the "@" that i convert in "at" because i'm a new user of discourse-pi-hole.net and i can't use this caracter in my text (forum consider this as a user's name:;))

ef at ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion at 208.67.222.222**

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion  at 208.67.222.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35289
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion. IN A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021082300 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: lun. août 23 18:48:06 CEST 2021
;; MSG SIZE  rcvd: 189

ef at ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion at 127.0.0.1**

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion  at 127.0.0.1
;; global options: +cmd
;; connection timed out; no servers could be reached

ef at ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion at192.168.1.21**

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion at192.168.1.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10522
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion. IN A

;; AUTHORITY SECTION:
.			86400	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021082300 1800 900 604800 86400

;; Query time: 583 msec
;; SERVER: 192.168.1.21#53(192.168.1.21)
;; WHEN: lun. août 23 18:50:01 CEST 2021
;; MSG SIZE  rcvd: 189

jfb · August 23, 2021, 5:11pm

Format the output as preformatted text using the </> icon in the reply window. This will strip any underlying links.

fafar1 · August 23, 2021, 5:14pm

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @208.67.222.222

; <<>> DiG 9.16.1-Ubuntu <<>> https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @208.67.222.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15825
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion. IN A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021082300 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: lun. août 23 18:45:58 CEST 2021
;; MSG SIZE  rcvd: 189

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @127.0.0.1

; <<>> DiG 9.16.1-Ubuntu <<>> https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @127.0.0.1
;; global options: +cmd
;; connection timed out; no servers could be reached

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @208.67.222.222

; <<>> DiG 9.16.1-Ubuntu <<>> https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @208.67.222.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35289
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion. IN A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021082300 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: lun. août 23 18:48:06 CEST 2021
;; MSG SIZE  rcvd: 189

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @127.0.0.1

; <<>> DiG 9.16.1-Ubuntu <<>> https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @127.0.0.1
;; global options: +cmd
;; connection timed out; no servers could be reached

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @192.168.1.21

; <<>> DiG 9.16.1-Ubuntu <<>> https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @192.168.1.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10522
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion. IN A

;; AUTHORITY SECTION:
.			86400	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021082300 1800 900 604800 86400

;; Query time: 583 msec
;; SERVER: 192.168.1.21#53(192.168.1.21)
;; WHEN: lun. août 23 18:50:01 CEST 2021
;; MSG SIZE  rcvd: 189

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @192.168.1.21

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @192.168.1.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36001
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion. IN A

;; AUTHORITY SECTION:
.			86400	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021082300 1800 900 604800 86400

;; Query time: 275 msec
;; SERVER: 192.168.1.21#53(192.168.1.21)
;; WHEN: lun. août 23 18:57:28 CEST 2021
;; MSG SIZE  rcvd: 181

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @127.0.0.1

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @127.0.0.1
;; global options: +cmd
;; connection timed out; no servers could be reached

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @208.67.222.222

; <<>> DiG 9.16.1-Ubuntu <<>> https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @208.67.222.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20776
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion. IN A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021082300 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: lun. août 23 19:13:20 CEST 2021
;; MSG SIZE  rcvd: 189

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @127.0.0.1

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @127.0.0.1
;; global options: +cmd
;; connection timed out; no servers could be reached

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @192.168.1.21

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion @192.168.1.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28375
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion. IN A

;; Query time: 4 msec
;; SERVER: 192.168.1.21#53(192.168.1.21)
;; WHEN: lun. août 23 19:13:44 CEST 2021
;; MSG SIZE  rcvd: 106

DanSchaper · August 23, 2021, 5:16pm

That's not a domain that's a URL. It will never be valid and will always be NXDOMAIN no matter where you query it.

www.securite-routiere.gouv.fr is the domain, anything before is a protocol and anything after is a path. The only thing Pi-hole (or any DNS) will be able to use is the domain.

DanSchaper · August 23, 2021, 5:18pm

dan@Viking-1:~$ dig www.securite-routiere.gouv.fr @192.168.88.2

; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> www.securite-routiere.gouv.fr @192.168.88.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41424
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr. IN      A

;; ANSWER SECTION:
www.securite-routiere.gouv.fr. 33200 IN A       77.159.252.145

;; Query time: 939 msec
;; SERVER: 192.168.88.2#53(192.168.88.2)
;; WHEN: Mon Aug 23 10:18:02 PDT 2021
;; MSG SIZE  rcvd: 74

jfb · August 23, 2021, 5:19pm

You did not. I asked you to dig for this domain:

www.securite-routiere.gouv.fr

You ran the dig command for a URL, which will never be resolved by Pi-hole since it is not a domain.

www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/step-connexion

Please run the commands exactly as I typed them - copy and paste to your terminal.

fafar1 · August 24, 2021, 1:25pm

On my pc :

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr @208.67.222.222

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr @208.67.222.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2737
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr.	IN	A

;; ANSWER SECTION:
www.securite-routiere.gouv.fr. 6718 IN	A	77.159.252.145

;; Query time: 23 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: mar. août 24 14:31:31 CEST 2021
;; MSG SIZE  rcvd: 74

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr @127.0.0.1

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr @127.0.0.1
;; global options: +cmd
;; connection timed out; no servers could be reached

ef@ef-VivoBook-ASUSLaptop-X512FA-X512FA:~$ dig www.securite-routiere.gouv.fr @192.168.1.21

; <<>> DiG 9.16.1-Ubuntu <<>> www.securite-routiere.gouv.fr @192.168.1.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26902
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr.	IN	A

;; ANSWER SECTION:
www.securite-routiere.gouv.fr. 5661 IN	A	77.159.252.145

;; Query time: 63 msec
;; SERVER: 192.168.1.21#53(192.168.1.21)
;; WHEN: mar. août 24 14:32:07 CEST 2021
;; MSG SIZE  rcvd: 74

On my pihole :

root@odroid:~# dig www.securite-routiere.gouv.fr @208.67.222.222

; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> www.securite-routiere.gouv.fr @208.67.222.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44048
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr.	IN	A

;; ANSWER SECTION:
www.securite-routiere.gouv.fr. 3670 IN	A	77.159.252.145

;; Query time: 20 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Tue Aug 24 15:22:19 CEST 2021
;; MSG SIZE  rcvd: 74

root@odroid:~# dig www.securite-routiere.gouv.fr @127.0.0.1

; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> www.securite-routiere.gouv.fr @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8518
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.securite-routiere.gouv.fr.	IN	A

;; ANSWER SECTION:
www.securite-routiere.gouv.fr. 2645 IN	A	77.159.252.145

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Aug 24 15:22:23 CEST 2021
;; MSG SIZE  rcvd: 74

jfb · August 24, 2021, 1:41pm

The outputs show that Pi-hole successfully resolved that domain name to IP 77.159.252.145.

The domain is not blocked by Pi-hole.

fafar1 · August 24, 2021, 3:17pm

I can assure you that the url doesn't works with the pihole's dns on my pc but i can open it when i change to another one (192.168.1.1 (my router), or 8.8.8.8 for example).

https://www.securite-routiere.gouv.fr/resultats-du-permis-de-conduire#/ is always blocked

jfb · August 24, 2021, 4:22pm

We have established that the domain in this URL - www.securite-routiere.gouv.fr - is not blocked by Pi-hole. There may be other elements that are loaded for that page that are blocked by Pi-hole and the page will not load. As I noted, when running Pi-hole I am unable to load that page - a blank screen is all I see.

Using these tools (previously provided) to determine why this page will not load - something other than that domain is being blocked.

When I load that page using the AdamOne Assistant, it shows these three domains being requested:

www.securite-routiere.gouv.fr
cdn.tagcommander.com
www.gstatic.com

Of these, Pi-hole blocks the second one with the default blocklist:

pihole -q cdn.tagcommander.com
 Match found in https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts:
   cdn.tagcommander.com

Whitelist this domain, and the page will load:

Then, as we say in English translated to French: Bob est ton oncle.

fafar1 · August 25, 2021, 8:42am

hi,
I tried to whitelist cdn.tagcommander.com, but it changed anything.
I will try later, i'm not at home yet.
I don't understand why, when I disable pihole (on the web page), it doesn't unlock this url.
In this case, all adresses are not whitelisted ?
thanks for all.
bob will be soon my uncle.

Bucking_Horn · August 25, 2021, 9:21am

It may not be only Pi-hole that blocks access to that domain.
Do you happen to run any browser extensions that would block ads?

fafar1 · August 25, 2021, 10:10am

The extension aren't guilty i think because, on the same browser, i only change the dns, and it unblocks this url.

fafar1 · August 25, 2021, 10:21am

I did this :
root@odroid:~# pihole -q cdn.tagcommander.com
[i] No results found for cdn.tagcommander.com within the block lists
root@odroid:~# pihole -q www.securite-routiere.gouv.fr
[i] No results found for www.securite-routiere.gouv.fr within the block lists
root@odroid:~# pihole -q www.gstatic.com
[i] No results found for www.gstatic.com within the block lists

The domains doesn't seem to be blocked, isn't it ?

And if i disable pihole, anything is changed for that.
I add the 3 domains to whitelist, and nothing changes.

I wanted to use this url to know if my soon successed is driving licence. It's good for him

But I would like to understand why pihole block this adress