Force All DNS Queries Through PiHole with OpenWRT

Hi, I followed this guide exactly.

With both pihole and openwrt.

it does not work.

any suggestions?

i get 98% blocked testing from the rpi4 ad block test and 34% on my android.

something isnt right, so i tried this guide see if it helps adblocking on the droid, still at 34pts.

also in the guide dig response on rpi4 is hitting 1.1.1.1@53 not in the way it should as in screenahot.



I am not a fan of masquerading network traffic unless you really know what you are doing. It complicates things, and often leads to incorrect assumptions. For example, in your nslookup screenshot, it says that you are asking google's DNS for your local pi-hole. Google should not have any clue what that IP is, but because of the masquerading, it forwards to your pi-hole and it looks like google responded.

If I may, try the steps outlined here instead. Of course, you'll want to make sure that your DHCP server is issuing out your pi-hole's IP as the network's DNS server.

This may be due to IPv6 traffic from your phone. You'll need to perform the same port-forwarding/blocking steps on the IPv6 firewall. This is a speculation, however.

  1. The Adblock tester does not help you with firewall problems
  2. If you redirect all DNS related traffic you have to do it completely (for ip4/6)
  • DNS / Port 53 (UDP und TCP)
  • DNS-over-HTTPS (DoH) / Port 443 (TCP)
  • DNS-over-TLS (DoT) / Port 853 (TCP)
    Then you need an application to answer the requests.
    or
  1. Block ports (53, 443, 853) and the application will use your dns server (for ip4/6)
  2. the difference in blocking is normally related in different plugins in browers, or protocol or ....

Yes:
This isn't about Pi-hole, it's about firewalling.
Go ask the guy who wrote that guide.

As he wrote it, he is in a far better position to clarify instructions, help you adopting it to your enviroment, and he's the only one who can fix potential mistakes in his guide - just as we would do for Pi-hole issues.

Give him a chance to improve his guide, or your configuration.

Thank you ppl, i deleted all the rules. if i read correct, it aim't correct.

this what i did and tested, setting any device to 8
8.8.8.8 8 8.8.4.4
and it works :+1:


i know its not the rigjt forums but :rofl: 8.8.8.8 n
4.4 blocked :rofl:

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.