"config error is REFUSED"

Hello,
I am getting a "config error is REFUSED" error in pihole when trying to upload files via rclone.
Rclone makes a lot of DNS requests in a very short period of time. Pihole will properly respond to these requests for about a minute and then I start seeing "config error is REFUSED". Is this a rate limiting issue? Can it be overridden?

This is a recent problem that appeared with the most recent update.

08:34:05: 10279 fe80::c4b4:ceff:fe10:7b02%eth0/46087 query[A] graph.microsoft.com from fe80::c4b4:ceff:fe10:7b02
08:34:05: 10279 fe80::c4b4:ceff:fe10:7b02%eth0/46087 cached graph.microsoft.com is <CNAME>
08:34:05: 10279 fe80::c4b4:ceff:fe10:7b02%eth0/46087 cached ags.privatelink.msidentity.com is <CNAME>
08:34:05: 10279 fe80::c4b4:ceff:fe10:7b02%eth0/46087 cached prd.ags.msidentity.com is <CNAME>
08:34:05: 10279 fe80::c4b4:ceff:fe10:7b02%eth0/46087 cached www.tm.prd.ags.akadns.net is 20.190.139.169
08:34:05: 10279 fe80::c4b4:ceff:fe10:7b02%eth0/46087 cached www.tm.prd.ags.akadns.net is 20.190.139.170
08:34:05: 10279 fe80::c4b4:ceff:fe10:7b02%eth0/46087 cached www.tm.prd.ags.akadns.net is 20.190.139.171
08:34:05: 10280 fe80::c4b4:ceff:fe10:7b02%eth0/40128 query[AAAA] graph.microsoft.com from fe80::c4b4:ceff:fe10:7b02
08:34:05: 10280 fe80::c4b4:ceff:fe10:7b02%eth0/40128 cached graph.microsoft.com is <CNAME>
08:34:05: 10280 fe80::c4b4:ceff:fe10:7b02%eth0/40128 cached ags.privatelink.msidentity.com is <CNAME>
08:34:05: 10280 fe80::c4b4:ceff:fe10:7b02%eth0/40128 cached prd.ags.msidentity.com is <CNAME>
08:34:05: 10280 fe80::c4b4:ceff:fe10:7b02%eth0/40128 cached www.tm.prd.ags.akadns.net is NODATA-IPv6
08:34:05: 10281 fe80::c4b4:ceff:fe10:7b02%eth0/44221 query[A] graph.microsoft.com from fe80::c4b4:ceff:fe10:7b02
08:34:05: 10281 fe80::c4b4:ceff:fe10:7b02%eth0/44221 cached graph.microsoft.com is <CNAME>
08:34:05: 10281 fe80::c4b4:ceff:fe10:7b02%eth0/44221 cached ags.privatelink.msidentity.com is <CNAME>
08:34:05: 10281 fe80::c4b4:ceff:fe10:7b02%eth0/44221 cached prd.ags.msidentity.com is <CNAME>
08:34:05: 10281 fe80::c4b4:ceff:fe10:7b02%eth0/44221 cached www.tm.prd.ags.akadns.net is 20.190.139.171
08:34:05: 10281 fe80::c4b4:ceff:fe10:7b02%eth0/44221 cached www.tm.prd.ags.akadns.net is 20.190.139.169
08:34:05: 10281 fe80::c4b4:ceff:fe10:7b02%eth0/44221 cached www.tm.prd.ags.akadns.net is 20.190.139.170
08:34:05: 10282 fe80::c4b4:ceff:fe10:7b02%eth0/36518 query[AAAA] graph.microsoft.com from fe80::c4b4:ceff:fe10:7b02
08:34:05: 10282 fe80::c4b4:ceff:fe10:7b02%eth0/36518 cached graph.microsoft.com is (null)
08:34:05: 10282 fe80::c4b4:ceff:fe10:7b02%eth0/36518 config error is REFUSED
08:34:05: 10283 fe80::c4b4:ceff:fe10:7b02%eth0/34877 query[A] graph.microsoft.com from fe80::c4b4:ceff:fe10:7b02
08:34:05: 10283 fe80::c4b4:ceff:fe10:7b02%eth0/34877 cached graph.microsoft.com is (null)
08:34:05: 10283 fe80::c4b4:ceff:fe10:7b02%eth0/34877 config error is REFUSED
08:34:05: 10284 fe80::c4b4:ceff:fe10:7b02%eth0/47595 query[AAAA] graph.microsoft.com from fe80::c4b4:ceff:fe10:7b02
08:34:05: 10284 fe80::c4b4:ceff:fe10:7b02%eth0/47595 cached graph.microsoft.com is (null)
08:34:05: 10284 fe80::c4b4:ceff:fe10:7b02%eth0/47595 config error is REFUSED
08:34:05: 10285 fe80::c4b4:ceff:fe10:7b02%eth0/46306 query[A] graph.microsoft.com from fe80::c4b4:ceff:fe10:7b02
08:34:05: 10285 fe80::c4b4:ceff:fe10:7b02%eth0/46306 cached graph.microsoft.com is (null)
08:34:05: 10285 fe80::c4b4:ceff:fe10:7b02%eth0/46306 config error is REFUSED
........

Environment

OS: CentOS 8
Pi-hole version is v5.2.4 (Latest: v5.2.4)
AdminLTE version is v5.4 (Latest: v5.4)
FTL version is v5.7 (Latest: v5.7)

Debug Token:

bptgrnzm4p

Perhaps.

Yes. See the release notes for the most recent Pi-hole release, that included a rate limiting feature.

https://pi-hole.net/2021/02/16/pi-hole-ftl-v5-7-and-web-v5-4-released/#page-content

Ah, yes, disabling the rate limiting fixed the issue. Thank you.

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.