Please follow the below template, it will help us to help you!
I bave installed PiHole, with very little/or no problems.
I have added port 53 and 801(webinterface) to my ufw firewall (both upd and tcp)
I have changed my routers dhcp to provide users with piholes ip as dns server. But now all users dns lookups fail.
The lookups on localhost (pihole machine) works just fine.
Note I'm running the version with FTLDNS.
I really hope someone can help me
Debug Token:
www67ntt7e
RamSet
April 27, 2018, 9:33pm
2
You most likely have the Pi-hole listening to one interface that does not match your current LAN settings.
Under Settings/DNS change the listening behavior and try to set it to either all interfaces (the one hop away) option or the permit all origins one.
Make sure you don't expose port 53 to the outside from within your firewall though.
1 Like
RamSet
April 27, 2018, 9:51pm
4
Is it working on the clients now ?
Nope, no change.
This is my UFW firewall settings.
[18] 192.168.1.6 53/tcp ALLOW IN 192.168.1.0/24
[19] 192.168.1.6 53/udp ALLOW IN 192.168.1.0/24
RamSet
April 27, 2018, 9:57pm
6
Try the listen to all interfaces, permit all origins.
If not, see if your firewall is actually allowing 53:
linux, ubuntu, dns, ufw
Done and done - no luck. I have even tried to disable UFW, still no luck.
I have also tried what the slackexchange people are suggesting, but also no luck.
RamSet
April 27, 2018, 10:15pm
8
Can you bypass the Firewall (for testing purposes)?
Connect the Pi to the router and double check that the clients got the Pi-hole IP as their DNS server.
Also, change the setting on the DNS tab to listen to eth0 (if you are able to bypass the firewall).
I have this running on the same machine, that is also running Pi-hole - so kind of hard to sepperate
However "sudo ufw disable" disables the firewall, and no change.
RamSet
April 27, 2018, 10:28pm
10
Let me see if I understood correctly:
Pi-hole runs without any issue and local queries work (and they get blocked if a known ad domain is queried ?)
what's the output of dig flurry.com
your router is assigning the DNS parameter to the clients and it's set to push the pi-hole IP (are the clients getting that DNS setting?)
the pi-hole is set to listen to eth0
RamSet
April 27, 2018, 10:39pm
12
can you run:
nslookup flurry.com
on the Pi-hole device and on one of the clients?
Pihole machine:
nslookup flurry.com
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: flurry.com
Address: 192.168.1.6
local machine
dig flurry.com @192.168.1.6
; <<>> DiG 9.10.6 <<>> flurry.com @192.168.1.6
;; global options: +cmd
;; connection timed out; no servers could be reached
RamSet
April 27, 2018, 10:47pm
15
something is blocking inbound access to port 53
Try it again after adding this as a temporary line (for testing) on the pi-hole:
sudo iptables -A INPUT -p tcp --dport 53 --jump ACCEPT
Yeah, I think its a firewall issue as well. Still same result.
dig flurry.com @192.168.1.6
; <<>> DiG 9.10.6 <<>> flurry.com @192.168.1.6
;; global options: +cmd
;; connection timed out; no servers could be reached
RamSet
April 27, 2018, 11:13pm
17
what is the nslookup on the client look like?>
RamSet
April 28, 2018, 2:20pm
19
Thatβs a dig command. Wanted to see nslookup
sorentorp:
flurry.com
oh, sorry!
nslookup flurry.com
;; connection timed out; no servers could be reached
A port-scanning from my client ( OSX) shows that port 53 is open.
I really dont understand this.