Using a Ubiquiti AC Lite, connected to a Linksys EA4500. Radios are disabled on the Linksys, so the Ubiquity is the only Radio operating. I set the DNS in the Ubiquiti to talk to the Pi-Hole (192.168.1.120) and that made it appear in the list. Linksys has a static DNS set to the same IP (192.168.1.120). Everything else connecting to Wifi does not appear to be using the Pi-Hole.
Given that the number of queries on your network is almost entirely accounted for by your starfleet device at 192.168.1.1, it is very likely that you have configured Pi-hole as its upstream DNS server.
Your clients will still send their queries to that .1, which in turn forwards them upstream to Pi-hole.
For clients to send their queries directly to Pi-hole, you'd have to configure your router to distribute PI-hole as local DNS server via DHCP. Note that information will only be requested by your clients upon negotiating a lease from your router.
Alternatively, you may configure each device individually to use Pi-hole as DNS server. That would also be your only option if your router wouldn't allow local DNS server configs in its DHCP settings.
Starfleet is the name of the Linksys router. I removed the automatic DNS and put in the Pi-hole, which is 192.168.1.120. That is also set to static in case DHCP wanted to change it.
I’ve also changed the AP to point to that DNS also, so I imagine that any devices connecting to the AP should use that as DNS.
In case I am too novice at this, in regards to downstream DNS, do I need to add an upstream somewhere? I am using OpenDNS(ECS) as an upstream DNS. Or is this the wrong configuration for some reason?
After looking at the DNS requests for Starfleet I am definitely seeing requests coming from my phone and my camera security systems. However, the IP of my phone is the 192.168.1.113 IP in the screenshot above. Which is confusing me. Why would it be listed as not using the Pi-Hole, but actually using it?
Also, my WiFi traffic goes from my AP, to my switch, and to the modem. The DNS still has to resolve with the Pi-Hole, so I’m not sure if something is being blocked one way or another.
Regardless of what the network tab shows, are you seeing queries in the query log matching the activity on these clients? Are you seeing ads on the clients?
It's really hit or miss. It seemed like it was working for a bit, I saw very few advertisements on mobile for a good portion of the day, then later at night I was seeing them. But I am seeing DNS records from my mobile coming up under Starfleet, although not necessarily blocking.
I purposely went to a few sites with known pop ups this morning on my main PC, hardwired to the Linksys, and I did get new-window popups still. So I am leaning towards it not working.
I've read that Youtube and Facebook are harder to block ads in other threads, without tailoring your blacklisted entries. But I am seeing ads play before videos on Youtube and advertisements on my Facebook Feed. Interestingly enough, the Youtube app is now showing anywhere from 2-4 rows of ad results when I do a search for a video. I can't remember this behavior before.
Pi-hole won't block YouTube or Facebook ads. These are served from the same domains as the content.
Tail the Pi-hole log and then launch the YouTube app on the client device. If you see a burst of activity in the log from that client, the client is using Pi-hole. If you do not, then the client is not using Pi-hole.
I figured that was the case by looking at other threads/solutions (in regards to YT and FB)
Launched the iPhone App on Mobile. Logs were quiet until it launched, so it appears that it is using the Pi-Hole
Oct 19 10:19:24 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:24 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:26 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:26 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:26 dnsmasq[23997]: query[A] app-measurement.com from 192.168.1.1
Oct 19 10:19:26 dnsmasq[23997]: gravity blocked app-measurement.com is 0.0.0.0
Oct 19 10:19:28 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:28 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:28 dnsmasq[23997]: query[AAAA] pi.hole from 192.168.1.1
Oct 19 10:19:28 dnsmasq[23997]: cached pi.hole is NODATA-IPv6
Oct 19 10:19:28 dnsmasq[23997]: query[AAAA] discourse.pi-hole.net from 192.168.1.1
Oct 19 10:19:28 dnsmasq[23997]: cached discourse.pi-hole.net is NODATA-IPv6
Oct 19 10:19:29 dnsmasq[23997]: query[A] ris.api.iris.microsoft.com from 192.168.1.1
Oct 19 10:19:29 dnsmasq[23997]: forwarded ris.api.iris.microsoft.com to 1.1.1.1
Oct 19 10:19:29 dnsmasq[23997]: reply ris.api.iris.microsoft.com is <CNAME>
Oct 19 10:19:29 dnsmasq[23997]: reply ris-prod.trafficmanager.net is 52.184.207.151
Oct 19 10:19:30 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:30 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:31 dnsmasq[23997]: query[A] www.googleadservices.com from 192.168.1.1
Oct 19 10:19:31 dnsmasq[23997]: gravity blocked www.googleadservices.com is 0.0.0.0
Oct 19 10:19:31 dnsmasq[23997]: query[A] b.canaryis.com from 192.168.1.1
Oct 19 10:19:31 dnsmasq[23997]: forwarded b.canaryis.com to 1.1.1.1
Oct 19 10:19:31 dnsmasq[23997]: reply b.canaryis.com is <CNAME>
Oct 19 10:19:31 dnsmasq[23997]: reply b.prod.canaryis.com is 34.235.225.112
Oct 19 10:19:32 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:32 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:32 dnsmasq[23997]: query[type=65] securepubads.g.doubleclick.net from 192.168.1.1
Oct 19 10:19:32 dnsmasq[23997]: gravity blocked securepubads.g.doubleclick.net is 0.0.0.0
Oct 19 10:19:32 dnsmasq[23997]: query[A] securepubads.g.doubleclick.net from 192.168.1.1
Oct 19 10:19:32 dnsmasq[23997]: gravity blocked securepubads.g.doubleclick.net is 0.0.0.0
Oct 19 10:19:33 dnsmasq[23997]: query[type=65] pagead2.googlesyndication.com from 192.168.1.1
Oct 19 10:19:33 dnsmasq[23997]: gravity blocked pagead2.googlesyndication.com is 0.0.0.0
Oct 19 10:19:33 dnsmasq[23997]: query[A] pagead2.googlesyndication.com from 192.168.1.1
Oct 19 10:19:33 dnsmasq[23997]: gravity blocked pagead2.googlesyndication.com is 0.0.0.0
Oct 19 10:19:34 dnsmasq[23997]: query[A] r2---sn-j5caxoxu-pn2s.googlevideo.com from 192.168.1.1
Oct 19 10:19:34 dnsmasq[23997]: forwarded r2---sn-j5caxoxu-pn2s.googlevideo.com to 1.1.1.1
Oct 19 10:19:34 dnsmasq[23997]: reply r2---sn-j5caxoxu-pn2s.googlevideo.com is <CNAME>
Oct 19 10:19:34 dnsmasq[23997]: reply r2.sn-j5caxoxu-pn2s.googlevideo.com is 167.206.10.205
Oct 19 10:19:34 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:34 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:34 dnsmasq[23997]: query[AAAA] pi.hole from 192.168.1.1
Oct 19 10:19:34 dnsmasq[23997]: cached pi.hole is NODATA-IPv6
Oct 19 10:19:34 dnsmasq[23997]: query[A] s.youtube.com from 192.168.1.1
Oct 19 10:19:34 dnsmasq[23997]: gravity blocked s.youtube.com is 0.0.0.0
Oct 19 10:19:34 dnsmasq[23997]: query[A] r7---sn-j5caxoxu-pn2l.googlevideo.com from 192.168.1.1
Oct 19 10:19:34 dnsmasq[23997]: forwarded r7---sn-j5caxoxu-pn2l.googlevideo.com to 1.1.1.1
Oct 19 10:19:34 dnsmasq[23997]: reply r7---sn-j5caxoxu-pn2l.googlevideo.com is <CNAME>
Oct 19 10:19:34 dnsmasq[23997]: reply r7.sn-j5caxoxu-pn2l.googlevideo.com is 167.206.252.210
Oct 19 10:19:35 dnsmasq[23997]: query[type=65] r2---sn-p5qlsndz.googlevideo.com from 192.168.1.1
Oct 19 10:19:35 dnsmasq[23997]: forwarded r2---sn-p5qlsndz.googlevideo.com to 1.1.1.1
Oct 19 10:19:35 dnsmasq[23997]: query[A] r2---sn-p5qlsndz.googlevideo.com from 192.168.1.1
Oct 19 10:19:35 dnsmasq[23997]: forwarded r2---sn-p5qlsndz.googlevideo.com to 1.1.1.1
Oct 19 10:19:35 dnsmasq[23997]: reply r2---sn-p5qlsndz.googlevideo.com is <CNAME>
Oct 19 10:19:35 dnsmasq[23997]: reply r2.sn-p5qlsndz.googlevideo.com is 173.194.184.167
Oct 19 10:19:35 dnsmasq[23997]: query[type=65] r2.sn-p5qlsndz.googlevideo.com from 192.168.1.1
Oct 19 10:19:35 dnsmasq[23997]: forwarded r2.sn-p5qlsndz.googlevideo.com to 1.1.1.1
Oct 19 10:19:36 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:36 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:38 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:38 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:40 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:40 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:40 dnsmasq[23997]: query[AAAA] pi.hole from 192.168.1.1
Oct 19 10:19:40 dnsmasq[23997]: cached pi.hole is NODATA-IPv6
Oct 19 10:19:41 dnsmasq[23997]: query[A] browser.pipe.aria.microsoft.com from 192.168.1.1
Oct 19 10:19:41 dnsmasq[23997]: gravity blocked browser.pipe.aria.microsoft.com is 0.0.0.0
Oct 19 10:19:41 dnsmasq[23997]: query[A] mobile.pipe.aria.microsoft.com from 192.168.1.1
Oct 19 10:19:41 dnsmasq[23997]: gravity blocked mobile.pipe.aria.microsoft.com is 0.0.0.0
Oct 19 10:19:42 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:42 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:44 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:44 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:46 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:46 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:46 dnsmasq[23997]: query[AAAA] pi.hole from 192.168.1.1
Oct 19 10:19:46 dnsmasq[23997]: cached pi.hole is NODATA-IPv6
Oct 19 10:19:47 dnsmasq[23997]: query[A] ctldl.windowsupdate.com from 192.168.1.1
Oct 19 10:19:47 dnsmasq[23997]: cached ctldl.windowsupdate.com is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: cached au-bg-shim.trafficmanager.net is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: forwarded ctldl.windowsupdate.com to 1.1.1.1
Oct 19 10:19:47 dnsmasq[23997]: reply ctldl.windowsupdate.com is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: reply au-bg-shim.trafficmanager.net is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: reply audownload.windowsupdate.nsatc.net is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: reply wu.azureedge.net is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: reply wu.ec.azureedge.net is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: reply wu.wpc.apr-52dd2.edgecastdns.net is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: reply hlb.apr-52dd2-0.edgecastdns.net is <CNAME>
Oct 19 10:19:47 dnsmasq[23997]: reply cs11.wpc.v0cdn.net is 72.21.81.240
Oct 19 10:19:48 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:48 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:49 dnsmasq[23997]: query[A] 0.client-channel.google.com from 192.168.1.1
Oct 19 10:19:49 dnsmasq[23997]: forwarded 0.client-channel.google.com to 1.1.1.1
Oct 19 10:19:49 dnsmasq[23997]: reply 0.client-channel.google.com is 172.217.197.189
Oct 19 10:19:50 dnsmasq[23997]: query[A] app-measurement.com from 192.168.1.1
Oct 19 10:19:50 dnsmasq[23997]: gravity blocked app-measurement.com is 0.0.0.0
Oct 19 10:19:50 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:50 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:50 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:50 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:50 dnsmasq[23997]: query[AAAA] pi.hole from 192.168.1.1
Oct 19 10:19:50 dnsmasq[23997]: cached pi.hole is NODATA-IPv6
Oct 19 10:19:51 dnsmasq[23997]: query[A] remotedesktop-pa.googleapis.com from 192.168.1.1
Oct 19 10:19:51 dnsmasq[23997]: forwarded remotedesktop-pa.googleapis.com to 1.1.1.1
Oct 19 10:19:51 dnsmasq[23997]: reply remotedesktop-pa.googleapis.com is 172.217.165.138
Oct 19 10:19:53 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:53 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:53 dnsmasq[23997]: query[type=65] iphone-ld.origin-apple.com.akadns.net from 192.168.1.1
Oct 19 10:19:53 dnsmasq[23997]: forwarded iphone-ld.origin-apple.com.akadns.net to 1.1.1.1
Oct 19 10:19:53 dnsmasq[23997]: query[A] iphone-ld.origin-apple.com.akadns.net from 192.168.1.1
Oct 19 10:19:53 dnsmasq[23997]: forwarded iphone-ld.origin-apple.com.akadns.net to 1.1.1.1
Oct 19 10:19:53 dnsmasq[23997]: reply iphone-ld.origin-apple.com.akadns.net is <CNAME>
Oct 19 10:19:53 dnsmasq[23997]: reply iphone-ld-ar.apple.com.edgekey.net is <CNAME>
Oct 19 10:19:53 dnsmasq[23997]: reply e9338.d.akamaiedge.net is 23.64.61.45
Oct 19 10:19:53 dnsmasq[23997]: query[type=65] e9338.d.akamaiedge.net from 192.168.1.1
Oct 19 10:19:53 dnsmasq[23997]: forwarded e9338.d.akamaiedge.net to 1.1.1.1
Oct 19 10:19:54 dnsmasq[23997]: query[AAAA] ssl.gstatic.com from 192.168.1.1
Oct 19 10:19:54 dnsmasq[23997]: forwarded ssl.gstatic.com to 1.1.1.1
Oct 19 10:19:54 dnsmasq[23997]: reply ssl.gstatic.com is 2607:f8b0:4006:802::2003
Oct 19 10:19:55 dnsmasq[23997]: query[A] pi.hole from 192.168.1.1
Oct 19 10:19:55 dnsmasq[23997]: /etc/pihole/local.list pi.hole is 192.168.1.120
Oct 19 10:19:56 dnsmasq[23997]: query[A] v10.events.data.microsoft.com from 192.168.1.1
Oct 19 10:19:56 dnsmasq[23997]: cached v10.events.data.microsoft.com is <CNAME>
Oct 19 10:19:56 dnsmasq[23997]: forwarded v10.events.data.microsoft.com to 1.1.1.1
Oct 19 10:19:56 dnsmasq[23997]: reply v10.events.data.microsoft.com is <CNAME>
Oct 19 10:19:56 dnsmasq[23997]: reply global.asimov.events.data.trafficmanager.net is <CNAME>
Oct 19 10:19:56 dnsmasq[23997]: reply skypedataprdcolcus06.cloudapp.net is 52.114.128.69
Oct 19 10:19:56 dnsmasq[23997]: query[type=65] web.vortex.data.microsoft.com from 192.168.1.1
Oct 19 10:19:56 dnsmasq[23997]: gravity blocked web.vortex.data.microsoft.com is 0.0.0.0
Oct 19 10:19:56 dnsmasq[23997]: query[A] web.vortex.data.microsoft.com from 192.168.1.1
Oct 19 10:19:56 dnsmasq[23997]: gravity blocked web.vortex.data.microsoft.com is 0.0.0.0
Oct 19 10:19:56 dnsmasq[23997]: query[A] global-tsa2.webex.com from 192.168.1.1
As said by others, Pihole can't completely block YT adds itself. That said, using a PH with uBlock Origin in Firefox blocks 100% of ads on YT. For mobile, the only browser I know that blocks 100% of YT ads is "Snowhaze".
