Domain showing twice in Query log *sometimes*

Help Community Help
1

The issue I am facing:
in my Query log I am seeing the domain twice for each query

Details about my system:
Pi-hole 5.6
FTL 5.11
Web 5.8

What I have changed since installing Pi-hole:
Nothing changed, it's a newly installed pihole.

Additional info:
I have a local domain that I use internally for my home network of various servers etc, it is called homenetwork.local
My webserver is Apache and this server also has pi-hole installed on it.
Pi-hole is setup as a recursive dns using unbound.
Pi-hole is also configured as DHCP

In my query Logs I am seeing the following information in the domain column...
webserver.homenetwork.local.homenetwork.local from the localhost

debug log is https://tricorder.pi-hole.net/gOcnYCkB/

2

There is no single line in your debug log containing homenetwork.local. It appears, your local domain is arrowsmith.local instead. I see one request of webserver.arrowsmith.local.arrowsmith.local which looks odd.

Try removing domain arrowsmith.local from your /etc/resolv.conf

-rw-r--r-- 1 root root 71 Nov 17 12:09 /etc/resolv.conf
   domain arrowsmith.local
   nameserver 127.0.0.1

DHCP_ACTIVE=true
    DHCP_START=192.168.0.101
    DHCP_END=192.168.0.200
    DHCP_ROUTER=192.168.0.1
    DHCP_LEASETIME=24
    PIHOLE_DOMAIN=arrowsmith.local
1 Like
3

Thanks yubiuser for replying.
I used homenetwork.local as a place holder in this post instead of arrowsmith.local as i felt it might be a bit telling, I apologise to you.

I have deleted the domain from resolv.conf and rebooted but it is still appearing in the log even after 12 hours.

I think it might have something to do with a python script that I run every minute to collect enviromental sensor data and upload the data to my website and mysql.
I took out the domain names in the python script and put in the ip addresses instead so they would not query pi-hole for the dns but they are still appearing in the log even after a reboot.

I shall keep working at it and maybe disable the python scripts for a few hours to check then but I can't do this until Saturday, so I thank you for your help. Thansk

4

There's nothing to worry about here:

Such lookups are to be expected, they do not imply any failures, neither for Pi-hole nor for the client issuing the request.

Some software tools would customarily append a DNS query with the local search domain and issue a DNS query in addition to the domain that was originally requested (e.g. nslookup on Windows will do that).

So a request for a domain webserver.homenetwork.local (that already is an FQDN) would be expanded by .homenetwork.local, which would result in a query for webserver.homenetwork.local.homenetwork.local - just as you observe. :wink:

1 Like
5

Thanks Bucking_Horn :slight_smile:

6

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.