Legit sites blocked

Help Community Help
1

Hello everybody!
My first post here and feeling late to this game...
I've started using pi-hole - installed on a Raspberry pi - about a week ago. It seemed to work fine, except being bypassed by my android phone (galaxy S7), but it is a known fact.
Yesterday I had my first incident with the pi-hole (initially not even thinking of it being the cause): in the middle of a transaction with my bank (chrome browser), the connection with the bank's server was blocked. Subsequent attempts ended in impossible connection with the bank's website...
On a hunch, I started the Edge and attempted the same connection, and, to my surprise, all the connection and transaction worked flawlessly! Ok, I said, it seems to be the browser, although I never had any issue connecting to the bank with any browser, or OS!
Today I had another surprise: a lot of legit websites (reddit.com, aliexpress.com, ebay.com, etc.) stopped loading - on both Chrome and Edge.
A nslookup showed no blocking from pi-hole's part! Ping worked too. I did a bit (~3hours!) of research on the issue - by the way, even the discourse.pi-hole.net was blocked, how crazy is that?! The only thing that improved things was to reload the database (pihole -g). After that, things started to work, but only on Chrome, not on Edge, where a lot of sites wouldn't load.
I understand, it sounds like browser related issues, they are different and with different settings - and believe me, I went several times thru them - but only by 'Disabling Blocking' on the thing made them all disappear.
I thought / hopped this is something like 'set it and forget it' kind of thing, but if it goes on like this, it's becoming like a part-time job and I'm not sure it's worth the trouble.
And to make this already long post even longer, this is the log of such an aliexpress.com failed connection attempt:
Jul 2 11:41:14 dnsmasq[770]: reply aliexpress.com is 47.254.175.252
Jul 2 11:41:14 dnsmasq[770]: reply aliexpress.com is NODATA
Jul 2 11:41:14 dnsmasq[770]: query[A] www.aliexpress.com from 192.168.178.20
Jul 2 11:41:14 dnsmasq[770]: forwarded www.aliexpress.com to 8.8.8.8
Jul 2 11:41:14 dnsmasq[770]: query[HTTPS] www.aliexpress.com from 192.168.178.20
Jul 2 11:41:14 dnsmasq[770]: forwarded www.aliexpress.com to 8.8.8.8
Jul 2 11:41:14 dnsmasq[770]: reply www.aliexpress.com is
Jul 2 11:41:14 dnsmasq[770]: reply www.aliexpress.com.gds.alibabadns.com is
Jul 2 11:41:14 dnsmasq[770]: reply global.aliexpress.com is
Jul 2 11:41:14 dnsmasq[770]: reply global.aliexpress.com.gds.alibabadns.com is
Jul 2 11:41:14 dnsmasq[770]: reply eu1111.alicdn.com.edgekey.net is blocked during CNAME inspection
Jul 2 11:41:14 dnsmasq[770]: gravity blocked www.aliexpress.com is NODATA
Jul 2 11:41:14 dnsmasq[770]: reply www.aliexpress.com is
Jul 2 11:41:14 dnsmasq[770]: reply www.aliexpress.com.gds.alibabadns.com is
Jul 2 11:41:14 dnsmasq[770]: reply global.aliexpress.com is
Jul 2 11:41:14 dnsmasq[770]: reply global.aliexpress.com.gds.alibabadns.com is
Jul 2 11:41:14 dnsmasq[770]: reply eu1111.alicdn.com.edgekey.net is blocked during CNAME inspection
Jul 2 11:41:14 dnsmasq[770]: gravity blocked www.aliexpress.com is 0.0.0.0

Any help would be greatly appreciated and I thank you in advance for it!
Luka

2

Please generate a debug log, upload it when prompted and post the token URL here.

3

Thanks, jfb!
Here is the link: https://tricorder.pi-hole.net/l68JrRYv/
BR,
Luka

4

4 posts were split to a new topic: Some machines blocking some sites

8

What does below output?

pihole -q eu1111.alicdn.com.edgekey.net

Might want to upload a fresh debug log and post the token here as they expire after 48h?
The mods and devs are all volunteers so sometimes one might slip through unanswered.

9

(I've split the hi-jack attempt to another post.)

We've had a few reports for unexpected (over)blocking recently, at about the same time as yours, but in the German language category.

They have been related to a blocklist gone awry when the maintainers converted the lists to a new format, resulting in unintended blocking.

Your debug token has expired, so I can't check:
You wouldn't perhaps subscribe to the RPiList blocklist as well?

If so, an update of that list probably should fix your issue, since the maintainers seem to have addressed their issue in the meantime.

10

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.