# Icloud Private Relay settings change

**URL:** <https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856>\
**Category:** Help\
**Created:** [November 4, 2021, 5:04pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856 "2021-11-04T17:04:58Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![networkneil](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/networkneil/32/28083_2.png) [@networkneil](https://discourse.pi-hole.net/u/networkneil)\
**Post date:** [November 4, 2021, 5:04pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/1 "2021-11-04T17:04:58Z")

</div>

I'm on the latest docker tag ( Docker Tag 2021.10 Pi-hole [v5.6] FTL [v5.11] Web Interface [v5.8]) and I have also added `BLOCK_ICLOUD_PR=false ` in `/etc/pihole/pihole-FTL.conf`.

Not sure what has changed, the iCloud Private Relay is not working any more and it used to work and I would have a different IP address.

Help is appreciated. Thanks in Advance 🙂

---

<div class="post-metadata">

**Author:** ![networkneil](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/networkneil/32/28083_2.png) [@networkneil](https://discourse.pi-hole.net/u/networkneil)\
**Post date:** [November 4, 2021, 5:21pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/2 "2021-11-04T17:21:43Z")

</div>

alright, i think i found a solution.  
thanks to @ jpgpi250

> [@iCloud Private Relay](https://discourse.pi-hole.net/t/icloud-private-relay/49811/4):
>
> I just have been reading [this](https://matduggan.com/how-does-apple-private-relay-work/) and [this](https://developer.apple.com/support/prepare-your-network-for-icloud-private-relay) article. It looks like you can inform the apple device NOT to use the private relay by creating 2 specific DNS entries for the domains mask.icloud.com mask-h2.icloud.com I currently don't have a MAC available to test this, but if somebody is willing to test this... create a file /etc/dnsmasq.d/xx-NXDOMAIN.conf, (replace xx with an unused number), content: server=/mask.icloud.com/ server=/mask-h2.icloud.com/ and restart pihole-FTL (sudo service pihole-…

If anyone having a similar issue, this worked for me 🙂

---

<div class="post-metadata">

**Author:** ![DL6ER](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dl6er/32/281_2.png) [@DL6ER](https://discourse.pi-hole.net/u/DL6ER)\
**Post date:** [November 4, 2021, 5:25pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/3 "2021-11-04T17:25:26Z")

</div>

> [@networkneil](#):
>
> Not sure what has changed, the iCloud Private Relay is not working any more and it used to work and I would have a different IP address.

What changed? Can you confirm the line is still present in the config file? What you found is a mere workaround.

---

<div class="post-metadata">

**Author:** ![networkneil](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/networkneil/32/28083_2.png) [@networkneil](https://discourse.pi-hole.net/u/networkneil)\
**Post date:** [November 4, 2021, 8:24pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/5 "2021-11-04T20:24:41Z")

</div>

Now I'm having both the `BLOCK_ICLOUD_PR=false ` in `/etc/pihole/pihole-FTL.conf` and a new file in /etc/dnsmasq.d/xx-NXDOMAIN.conf with server=/mask.icloud.com/ server=/mask-h2.icloud.com/.

Earlier with just the `BLOCK_ICLOUD_PR=false ` in `/etc/pihole/pihole-FTL.conf` did NOT work for me.

Below is the configs, that is working for me rn,

 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/d/1/d1cedd17ae04765c20cd532f46f3fb578c49ac1b.png)

^ just this change did not resolve the issue.

 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/e/1/e149669cc54408a7df97de8a6105a9e1c3c5799e.png)

---

<div class="post-metadata">

**Author:** ![networkneil](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/networkneil/32/28083_2.png) [@networkneil](https://discourse.pi-hole.net/u/networkneil)\
**Post date:** [November 4, 2021, 8:28pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/6 "2021-11-04T20:28:30Z")

</div>

Yesterday there was an outage for iCloud Priavte Relay. There might have some changes involved which might have broken how pi-hole handles it. This is just a mere guess.

Source: [iCloud Private Relay Down for Some Users - MacRumors](https://www.macrumors.com/2021/11/03/icloud-private-relay-outage/)

---

<div class="post-metadata">

**Author:** ![DL6ER](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dl6er/32/281_2.png) [@DL6ER](https://discourse.pi-hole.net/u/DL6ER)\
**Post date:** [November 4, 2021, 8:32pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/7 "2021-11-04T20:32:07Z")

</div>

> [@networkneil](#):
>
> There might have some changes involved which might have broken how pi-hole handles it.

Why do you think so? We followed an official Apple document with the Pi-hole implementation. I'm not aware of any changes.

---

<div class="post-metadata">

**Author:** ![networkneil](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/networkneil/32/28083_2.png) [@networkneil](https://discourse.pi-hole.net/u/networkneil)\
**Post date:** [November 4, 2021, 8:44pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/9 "2021-11-04T20:44:43Z")

</div>

I'm not sure. It did not work for me unless I have created a file `/etc/dnsmasq.d/xx-NXDOMAIN.conf` with `server=/mask.icloud.com/ server=/mask-h2.icloud.com/`

and `BLOCK_ICLOUD_PR=false ` in `/etc/pihole/pihole-FTL.conf`

Then after a restart of pi-hole and my phone I was able to get it working again.

🙂

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [November 5, 2021, 10:59pm UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/10 "2021-11-05T22:59:18Z")

</div>

What are you trying to achieve?

Do you want Pi-hole to block Private Relay or not? Because

> [@networkneil](#):
>
> `BLOCK_ICLOUD_PR=false ` in `/etc/pihole/pihole-FTL.conf`

**Turns off Pi-hole's blocking of the special domains and allows Private Relay.**

But

> [@networkneil](#):
>
> I have created a file `/etc/dnsmasq.d/xx-NXDOMAIN.conf` with `server=/mask.icloud.com/ server=/mask-h2.icloud.com/`

**Blocks the special domains and turns off Private Relay**

---

<div class="post-metadata">

**Author:** ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)\
**Post date:** [November 28, 2021, 12:52am UTC](https://discourse.pi-hole.net/t/icloud-private-relay-settings-change/50856/15 "2021-11-28T00:52:00Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.