Devices using Pi Hole but still seeing ads

Expected Behaviour:

Fresh install of Raspberry Pi OS and pi hole, disabled DHCP on my router and using the Pi Hole's one. Checking the admin page, shows all devices using the Pi Hole, but when I go to nytimes.com for example, the ads should be blocked. I have also enabled ipv6 options in the Pi Hole's settings, since it is enabled in my router, but to be honest I don't really know much/anything about those.

Actual Behaviour:

Ads on nytimes.com not blocked. Although it looks like many requests are being blocked for some devices, but I don't know if it's all of them or not.

Debug Token:

https://tricorder.pi-hole.net/dDs3w45c/

Hi,
I'm new to pihole (just set it up yesterday) and the forum, but thought I'd mention what I've seen so far, especially relative to the NYT.

I have all traffic routed through the pihole, but left the DHCP duties to my Linksys router. Pihole is blocking almost everything this way, and I no longer see any ads in the NYT app or at nyt.com in the browser. Maybe there are some additional specific client settings you can enable to manage the blocking for each device? I'd be happy to share the specific settings I'm using if it might be helpful.

--Pete

It is likely that your router is advertising its own IPv6 address as local DNS resolver.

You may want to verify this by checking your router's IPv6 configuration and/or by checking the DNS resolvers as used by a client, eg. by running the following command on a Windows client:

ipconfig /all

You want to inspect the DNS section of that output.

If my assumption is correct and your router is adverising itself, then that would allow your clients to by-pass Pi-hole.

In such a case, you'd have to find a way to configure your router to advertise your Pi-hole host machine's IPv6 as DNS server or to stop advertising its own.

You'd have to consult your router's documentation sources on further details for its IPv6 configuration options.

If your router doesn't support configuring IPv6 DNS, you could consider disabling IPv6 altogether.

If your router doesn't support that either, your clients will always be able to bypass Pi-hole via IPv6.

A quick way to check blocked domains in pi-hole, is to go to settings >api slash interface

and uncheck "show blocked"

Only show permitted domains.

You'll probably be shocked at how much more you want to block!

Using only Pi-hole as an ad blocker, I see no ads on the NYT site. It's not a fundamental problem with Pi-hole, it is local to your install.

From your debug log, you have Pi-hole configured on the ethernet interface, but there is not an active interface there. The active interface is WiFi:

*** [ DIAGNOSING ]: Setup variables
    PIHOLE_INTERFACE=eth0

*** [ DIAGNOSING ]: Networking
[✗] No IPv4 address(es) found on the eth0 interface.

[✗] No IPv6 address(es) found on the eth0 interface.

*** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain
[✓] canottowa.112.2o7.net is 0.0.0.0 on lo (127.0.0.1)
[✓] No IPv4 address available on eth0
[✓] canottowa.112.2o7.net is 0.0.0.0 on wlan0 (192.168.11.58)
[✓] doubleclick.com is 142.251.42.206 via a remote, public DNS server (8.8.8.8)

Run pihole -r and select the reconfigure option to set up Pi-hole on the active interface and IP.

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.