Localhost pinging local, every second

Help Community Help
#1

Hi everyone,
I searched before i registered, and I believe i know the root cause, but wondering how I can disable this.

My pi-hole logs are filled with localhost pinging local, and forwarded to 1.1.1.1

|2021-01-12 12:57:48|SOA|local|localhost|OK (forwarded to one.one.one.one#53)|N/A (0.0ms)|Blacklist|
| --- | --- | --- | --- | --- | --- | --- |
|2021-01-12 12:57:47|SOA|local|localhost|OK (forwarded to one.one.one.one#53)|N/A (0.0ms)|Blacklist|
|2021-01-12 12:57:45|SOA|local|localhost|OK (forwarded to one.one.one.one#53)|N/A (0.0ms)|Blacklist|
|2021-01-12 12:57:45|SOA|local|localhost|OK (forwarded to one.one.one.one#53)|N/A (0.0ms)|Blacklist|
|2021-01-12 12:57:44|SOA|local|localhost|OK (forwarded to one.one.one.one#53)|N/A (0.0ms)|Blacklist|
|2021-01-12 12:57:44|SOA|local|localhost|OK (forwarded to one.one.one.one#53)|N/A (0.0ms)|Blacklist|
|2021-01-12 12:57:44|SOA|local|localhost|OK (forwarded to one.one.one.one#53)|N/A (0.0ms)|

Details about my system:
I'm running the latest versions:

What I have changed since installing Pi-hole:
I've added two access points, both TP-Link C80 routers, this is roughly the same time my requests went from 2,000~ a day to 17,000 a day

#2

Is there a device or domain named local on your network?

If this is being forwarded to Cloudflare for resolution, they cannot resolve it, since they know none of the details of your LAN clients.

#3

Not that i'm aware of. it is possible that my Access points are pinging local to check connectivity. The increase in ping requests happened around the same time I updated my access points.

I take it there is no way to filter these out?

#4

Let's take a look in your dnsmasq log.

grep local /var/log/pihole.log | tail -n20

#5

This is what i get:

> grep local /var/log/pihole.log | tail -n20
Jan 12 13:46:44 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:44 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:44 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:44 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:50 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:50 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:51 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:51 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:51 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:51 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:52 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:52 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:52 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:52 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:53 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:53 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:54 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:54 dnsmasq[5615]: forwarded local to 1.1.1.1
Jan 12 13:46:55 dnsmasq[5615]: query[SOA] local from 127.0.0.1
Jan 12 13:46:55 dnsmasq[5615]: forwarded local to 1.1.1.1
#6

SOA is Start of Authority. Something is asking for the validity or the nameserver responsible for .local. This is usually a mDNS/Bonjour domain. Are you using .local as a domain name for your lan or devices on your lan?

#7

I have resolved the issue:

It was my access point. It had DHCP enabled still, so I had to disable that and the log entry stopped