Can't put pihole as primary DNS

Hi,

I'm having trouble running pi-hole. It was working nice until my isp provider reverted back their router configuration so DHCP is enabled again. So I configured a LAN-to-LAN switch from my router and it has the DHCP server.

I see the dhcp leases and query logs so DHCP is working, but some ads are not being blocked (like the in-app ads) and some android devices.

I have seen that the primary DNS of those devices is the ipv6 fe08::1 which is coming from the isp router so that's why I think it's not blocking any ads.

Is there a way to force all my network to be using pihole? Thanks. If you need logs, I can provide.

Raspbian GNU/Linux 10 (buster)
Core version: 6.0.4

That would indicate that your router is advertising its own IPv6 address as DNS server, allowing your clients to by-pass Pi-hole.

You'd have to find a way to configure your router to stop advertising its own IPv6 as DNS server, or to advertise your Pi-hole host machine's IPv6.

You'd have to consult your router's documentation sources on further details for its IPv6 configuration options.

If your router doesn't support configuring IPv6 DNS, you could consider disabling IPv6 altogether, provided you'd not depend on IPv6 for reasons.

If your router doesn't support that either, your IPv6-capable clients will always be able to bypass Pi-hole via IPv6.
You could then try to mitigate this, by setting Pi-hole as the only upstream of your router, provided your router supports it.
But note that you won't be able to attribute DNS requests to original individual IPv6 clients in such a configuration.

2 Likes

Thanks for the quick reply. Stopping advertising from router is not doable as my isp provider won't give me the router password.

The second option which is to advertise my Pi-hole's IPv6 if I configure it, they won't be getting my router's IPv6 address as DNS server?

That's not the second option I mentioned.

Setting your router's upstream to one of your Pi-hole machine's stable IPv6 addresses would also require you to change your router's configuration.

If you can't login to your router's configuration pages, your router will continue to advertise its own IPv6, allowing clients to by-pass Pi-hole.

If you cannot configure your router, you'd have to replace it, or put another router in front of it.

1 Like

My bad. Indeed is what you say. I have another router in front of it. Ir has dd-wrt. Enabled ipv6 advertisement and the dns advertised is my ipv6 Pi-hole which I now it is good so far. But still. Primary DNS is still my isp's ipv6

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.