Dns returning bad address for everything. Seemingly getting bad response from upstream DNS

pihole returns wromng address. For every domain, it returns 10.0.0.2. It seems to correct itself automatically. The upstream servers (google, OpenDNS) seem ok too. Here is log snippet where it corrected itself.

Jun 7 07:00:47 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:47 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:47 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:47 dnsmasq[31576]: query[A] mas-ext.amazon.com from 192.168.1.142
Jun 7 07:00:47 dnsmasq[31576]: forwarded mas-ext.amazon.com to 8.8.4.4
Jun 7 07:00:47 dnsmasq[31576]: reply mas-ext.amazon.com is 10.0.0.2
Jun 7 07:00:49 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:49 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:49 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:51 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:51 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:51 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:53 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:53 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:53 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:55 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:55 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:55 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2
Jun 7 07:00:56 dnsmasq[31576]: query[A] beacons4.gvt2.com from 192.168.1.137
Jun 7 07:00:56 dnsmasq[31576]: forwarded beacons4.gvt2.com to 8.8.4.4
Jun 7 07:00:56 dnsmasq[31576]: reply beacons4.gvt2.com is 10.0.0.2
Jun 7 07:00:57 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:57 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 18.211.63.211
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 52.5.214.93
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 34.227.166.18
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 34.232.8.160
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 54.164.51.255
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 100.25.76.14
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 34.193.158.194
Jun 7 07:00:57 dnsmasq[31576]: reply firetvcaptiveportal.com is 34.206.28.211
Jun 7 07:00:57 dnsmasq[31576]: query[A] ftv-smp.ntp-fireos.com from 192.168.1.142

Pi-hole is returning the IP that was provided by the upstream DNS server.

Jun 7 07:00:47 dnsmasq[31576]: query[A] firetvcaptiveportal.com from 192.168.1.142
Jun 7 07:00:47 dnsmasq[31576]: forwarded firetvcaptiveportal.com to 8.8.4.4
Jun 7 07:00:47 dnsmasq[31576]: reply firetvcaptiveportal.com is 10.0.0.2

Please upload a debug log and post just the token that is generated after the log is uploaded by running the following command from the Pi-hole host terminal:

pihole -d

or do it through the Web interface:

Tools > Generate Debug Log

Thank you !

https://tricorder.pi-hole.net/cc1t11kmq9

It seems my DNS resolutions fixes itself at/around 7AM. I ran debug before that time and the upload failed because it could not resolve tricorder.pi-hole.net. However I uploaded that log manually also afterwards. Here is the token for that.

https://tricorder.pi-hole.net/t2jlg9fw75

Appreciate your help !

Thanks

I think I found the issue (just now). I had accidentally included the pihole mac address into nighttime block list (when trying to update kids' devices). That the DNS only failed between 11p-7am made it obvious in retrospect. You can please close this case.
Your work on this project is greatly appreciated !

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.