Can I make my Pihole have 2 valid IP addresses for DNS?

[andsam]

My router allows setting custom DNS addresses for DHCP, but it requires 2 different, valid addresses for primary and secondary addresses. And apparently, whichever address isn't my Pi takes precedence 100% of the time. I can't leave the secondary address blank, make it invalid, local, or a null address. My router has to be able to connect to it.

So is there a way to give my pi/pihole 2 addresses that my router can connect to, so I can set it as my primary AND secondary DNS?

Debug log here: https://tricorder.pi-hole.net/KmmMhNm0/https://tricorder.pi-hole.net/KmmMhNm0/

[jfb]

If you can't use local IP's for DNS on your router, this may be due to DNS rebind protection on the router:

Why won't Pi-hole work with DNS rebind protection enabled?

What is DNS rebind protection? If your router has an option called DNS rebind protection enabled, you may run into issues when trying to use Pi-hole as your DNS server. The reasons for this are quite technical, but to summarize what this option does in one sentence: DNS rebind protection does not allow DNS queries to be answered with a local IP address. Why does this interfere with Pi-hole? DNS rebind is meant to be a countermeasure to an attack on your network. So in many cases, it's actu…

If you cannot disable this on the router, then your best approach is to disable DHCP on the router, and use the Pi-hole DHCP server.

How do I use Pi-hole's built in DHCP server (and why would I want to)?

Using Your Existing Router For Network-wide Ad Blocking You might not need to use Pi-hole's DHCP server: In many home environments, your router also functions as your DHCP server. In this case, you can often set Pi-hole to be the DNS server for your network clients in the router's DHCP (or LAN) settings page, which allows all of your network clients to block ads simply by connecting to the network. Setting it up this way is also what makes Pi-hole very powerful for network-wide ad blocking. …

What make and model router are you using?

[andsam]

I am using a Spectrum router, SAX2V1S. I don't believe there is an option to disable either rebind protection or DHCP.

[jfb]

You still have options.

Leave DHCP enabled on the router, and restrict the IP range to a single IP. Make that IP the static IP of your Pi.

Then, enable DHCP on the Pi-hole, and make the IP range such that it doesn't overlap the IP of the Pi-hole.

Example:

Router DHCP set to 192.168.1.174. Reserve this IP for the Pi (use the Pi wlan0 MAC address).

Pihole DHCP set to range 192.168.1.20 to 192.168.1.120.

[andsam]

Actually, I think I just found that this model actually CAN disable rebind protection, it just unhelpfully labels it as "network security" with no additional info. Thanks for your help, hopefully pihole will actually work on my devices now.