Cname not decoded

General Beta 5.0
1

Please follow the below template, it will help us to help you!

Please ensure that you are running the latest version of the beta code.
Run pihole -up to update to the latest, then verify that the problem still exists before reporting it.

Problem with Beta 5.0:
Links to link.freebooksy.com are not decoding to 162.208.117.53 (found via nslookup on 8.8.8.8)

from log:

|2020-02-21 16:19:55|AAAA|link.freebooksy.com|octo.lan|Unknown (9)|CNAME (62.5ms)
|2020-02-21 16:19:55|A|link.freebooksy.com|octo.lan|OK (cached)|IP (1.1ms)|

This has only happened since I updated to 5.0 beta.
For the moment I have added a custom dns entry for it.

5 
dig link.freebooksy.com

;; ANSWER SECTION:
link.freebooksy.com.    0       IN      CNAME   cb.sailthru.com.
cb.sailthru.com.        0       IN      CNAME   link-nj1.sailthru.com.
link-nj1.sailthru.com.  0       IN      A       162.208.117.53

I'm going to guess that the CNAMEs are on the list of domains to be blocked.

6

@hairybiker If you have the web interface http://pi.hole/admin installed, you can go to the Query Log which will directly show you which of the domains along the CNAME path was blocked. Else you can do what Dan suggested and query the blocking lists for the contained domains.

Deep CNAME inspection is a new feature that comes with v5.0. It will help to block ads covering under CNAMEs.

7

@DanSchaper
Not in any blocklist
" [i] No results found for link.freebooksy.com within the block lists"

@DL6ER the log results were from the Query log

9

Those domains.

11

[i] No results found for freebooksy.com within the block lists

I could access the website fine, but if I clicked on any of the links (or the email links) it just timed out.

13

What is the output of these commands from the Pi terminal:

grep freebooksy /var/log/pihole.log

grep sailthru /var/log/pihole.log

14

These are likely not served from the same domain. These tools can help determine why your desired content is not served:

15

root@PiHole:~# grep freebooksys /var/log/pihole.log
root@PiHole:~# grep sailthru /var/log/pihole.l

The domains you asked for, 1st is blocked 2nd isn't

16

What was the output of the commands?

17

That was the o/p. Direct copy paste
@jfb I DON'T want to block them they link to Amazon ebooks.
As I said it was working perfectly before upgrading to 5.0.
Today the website is doing direct links to Amazon, yesterday it was via link.freebooksy.com
@DL6ER
root@PiHole:~# pihole -v
Pi-hole version is v4.3.2-421-gb73580f (Latest: v4.3.2)
AdminLTE version is v4.3.2-426-gdd7b2b2 (Latest: v4.3.3)
FTL version is vDev-61d67ff (Latest: v4.3.1)

18

What is the output of pihole -v?

The fact that status 9 is Unknown suggests that your beta installation is not complete.

19

Can anyone with stock lists just check those domains to see if they are blocked? Use the tools pihole -q or the web interface.

21

When I installed it yesterday, it wouldn't update the ftl, said it was already up to date.
Doing an pihole -up now. Found update

Now
Current Pi-hole version is v4.3.2-424-g85c15a7
Current AdminLTE version is v4.3.2-426-gdd7b2b2
Current FTL version is vDev-1b2318

22

Please check again the Query Log if you see additional details to the blocked queries.

23 
|2020-02-21 17:35:21|AAAA|links.freebooksy.com|localhost|OK (cached)|NODATA (0.6ms)|Blacklist|

|2020-02-21 17:35:21|A|links.freebooksy.com|localhost|OK (cached)|NXDOMAIN (0.8ms)|
24

The first one is blocked by Steven Black's list.

$ pihole -q cb.sailthru.com
 Match found in https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts:
   cb.sailthru.com

$ pihole -q link-nj1.sailthru.com
  [i] No results found for link-nj1.sailthru.com within the block lists
1 Like
26

Can confirm sailthru.com is on Steven Black's master list:

 Match found in https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts:
   ak.sailthru.com
   api.sailthru.com
   cb.sailthru.com
   cdn.sailthru.com
   condenast-a.sailthru.com
   condenast-b.sailthru.com
   condenast-c.sailthru.com
   horizon.sailthru.com
   horizon-nj1.sailthru.com
   njmta-173.sailthru.com
   ny1mta-31.sailthru.com
   ny1mta-56.sailthru.com
   ny1mta-58.sailthru.com
 Match found in https://hosts-file.net/ad_servers.txt:
   cdn.sailthru.com
   horizon.sailthru.com
1 Like
27

links does not exist.
link does but it points to a domain you've asked Pi-hole to block.

28

I am a bit dyslexic so my fault I mistyped
but " link does but it points to a domain you’ve asked Pi-hole to block." I am NOT asking to BLOCK it but to ALLOW it.

2020-02-21 17:52:50 A link.freebooksy.com octo.lan Unknown (9) CNAME (48.1ms)