# Lost Pi.hole local DNS resolution after adding Unbound

**URL:** <https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509>\
**Category:** Help\
**Created:** [February 22, 2024, 12:46am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509 "2024-02-22T00:46:59Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kallick](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/kallick/32/40604_2.png) [@Kallick](https://discourse.pi-hole.net/u/Kallick)\
**Post date:** [February 22, 2024, 12:46am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/1 "2024-02-22T00:46:59Z")

</div>

## System

- Raspberry Pi 3
- Raspberry Pi OS (Legacy, 32bit) Lite

## Description

Installed PiHole and PiVPN using the setup scripts. Ran for a couple of days using pi.hole/admin to navigate to the admin console. I added Unbound per the instructions here [unbound - Pi-hole documentation](https://docs.pi-hole.net/guides/dns/unbound/)

I've also tried adding pi.hole and a couple of other domains to Local DNS -\> DNS Records and they don't appear to be working

## Expected Behavior

I would expect to be able to still navigate to pi.hole/admin and see the admin console. I can navigate to \<pihole\_local\_ip\>/admin and everything is fine. I also would expect to be able to add additional local DNS records to other ips on my LAN

## Actual Behaviour:

No local DNS resolution appears to be happening. SSH'd into the Pi

```auto
kallick@pihole-wireguard:~ $ nslookup pi.hole
Server: 8.8.8.8 #Google was set as my upstream DNS before activating Unbound
Address: 8.8.8.8#53
** server can't find pi.hole: NXDOMAIN

kallick@pihole-wireguard:~ $ nslookup pi.hole 192.168.100.129 #pihole-wireguard's LAN IP
Server: 192.168.100.129
Address: 192.168.100.129#53
Name: pi.hole
Address: 192.168.100.129
Name: pi.hole
Address: fe80::5688:9dbe:1ee6:5f88

kallick@pihole-wireguard:~ $ nslookup flurry.com
Server: 8.8.8.8
Address: 8.8.8.8#53

Non-authoritative answer:
Name: flurry.com
Address: 18.136.37.69
Name: flurry.com
Address: 44.228.206.170
Name: flurry.com
Address: 54.161.105.65
Name: flurry.com
Address: 34.213.101.254
Name: flurry.com
Address: 13.251.69.97
Name: flurry.com
Address: 13.49.212.207
Name: flurry.com
Address: 34.225.127.72
Name: flurry.com
Address: 13.50.184.192

kallick@pihole-wireguard:~ $ curl -i http://pi.hole/admin/api.php
curl: (6) Could not resolve host: pi.hole

```

## Debug Token:

[https://tricorder.pi-hole.net/UtpFk9pR/](https://tricorder.pi-hole.net/UtpFk9pR/)

---

<div class="post-metadata">

**Author:** ![rdwebdesign](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/rdwebdesign/32/51363_2.png) [@rdwebdesign](https://discourse.pi-hole.net/u/rdwebdesign)\
**Post date:** [February 22, 2024, 1:51am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/2 "2024-02-22T01:51:55Z")

</div>

Run these commands from a **different machine** on your network (not from the Pi) and post the output:

```auto
nslookup pi.hole

nslookup flurry.com

```

---

<div class="post-metadata">

**Author:** ![Kallick](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/kallick/32/40604_2.png) [@Kallick](https://discourse.pi-hole.net/u/Kallick)\
**Post date:** [February 22, 2024, 2:11am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/3 "2024-02-22T02:11:57Z")

</div>

Certainly, thanks for the response

```auto
C:\Users\Kallick>nslookup pi.hole
Server: UnKnown
Address: 10.0.0.243

*** UnKnown can't find pi.hole: Non-existent domain

C:\Users\Kallick>nslookup flurry.com
Server: UnKnown
Address: 10.0.0.243

Non-authoritative answer:
Name: flurry.com
Addresses: 13.50.184.192
          13.251.69.97
          34.213.101.254
          44.228.206.170
          18.136.37.69
          13.49.212.207
          34.225.127.72
          54.161.105.65

```

---

<div class="post-metadata">

**Author:** ![rdwebdesign](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/rdwebdesign/32/51363_2.png) [@rdwebdesign](https://discourse.pi-hole.net/u/rdwebdesign)\
**Post date:** [February 22, 2024, 2:35am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/4 "2024-02-22T02:35:35Z")

</div>

This is totally unexpected.

This machine is using `10.0.0.243` as DNS server, neither Pi-hole (`192.168.100.129`), nor the router (`192.168.100.1`).

Pi-hole and this DNS server are in completely different networks.

---

<div class="post-metadata">

**Author:** ![Kallick](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/kallick/32/40604_2.png) [@Kallick](https://discourse.pi-hole.net/u/Kallick)\
**Post date:** [February 22, 2024, 2:48am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/5 "2024-02-22T02:48:52Z")

</div>

Very interesting, and maybe a little concerning. I can give a little more info on my network setup, in case it may be helpful.

I am running a couple of VLANs, but all of the devices being used in this thread are on the same one, which is the default VLAN. No VLANs are using 10 as the first octet. VLAN 2 only has cameras on it, so it doesn't have a DNS server, but VLAN 3 uses an ASUS router in AP mode and also routes to the Pihole for DNS. As far as I understood it, this required an inter-lan firewall rule. I hope I'm not doing anything stupid.

---

<div class="post-metadata">

**Author:** ![Kallick](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/kallick/32/40604_2.png) [@Kallick](https://discourse.pi-hole.net/u/Kallick)\
**Post date:** [February 22, 2024, 2:55am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/6 "2024-02-22T02:55:54Z")

</div>

The Windows network interface seems to think the Pihole is the DNS server

 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/e/1/e16d3b21a29e0347085440cf21a4fe80406639a9.png)

---

<div class="post-metadata">

**Author:** ![Kallick](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/kallick/32/40604_2.png) [@Kallick](https://discourse.pi-hole.net/u/Kallick)\
**Post date:** [February 22, 2024, 3:04am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/7 "2024-02-22T03:04:23Z")

</div>

Oh my goodness. I don't know what the community guidelines are here on this forum or I'd be using a lot of expletives in this response. I was connected to an external VPN via PIA. I didn't realize I jumped on it yesterday :facepalm: I turned it off and the pi.hole resolution works. Another one for user error.

---

<div class="post-metadata">

**Author:** ![rdwebdesign](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/rdwebdesign/32/51363_2.png) [@rdwebdesign](https://discourse.pi-hole.net/u/rdwebdesign)\
**Post date:** [February 22, 2024, 3:26am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/8 "2024-02-22T03:26:02Z")

</div>

That explains the different networks.

* * *

**Note about the results from your initial tests:**

From your debug log:

```css
-rw-r--r-- 1 root root 19 Feb 20 15:43 /etc/resolv.conf
   nameserver 8.8.8.8

```

Your Pi is actually using Google (`8.8.8.8`) as DNS server (not Pi-hole).  
Google has no idea what is `pi.hole` and as a consequence you receive `NXDOMAIN`.

This is a valid configuration and it's not an issue if you are not using a browser on the Pi _(there is no need to block ads on the Pi itself)_.

---

<div class="post-metadata">

**Author:** ![Kallick](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/kallick/32/40604_2.png) [@Kallick](https://discourse.pi-hole.net/u/Kallick)\
**Post date:** [February 22, 2024, 3:28am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/9 "2024-02-22T03:28:02Z")

</div>

I actually was just scratching my head about that, since DNS resolution while SSH'd into the Pi was showing 8.8.8.8. Shouldn't it be using the loopback for Unbound, 127.0.0.1#5335? Won't this prevent me from specifying custom local DNS entries?

Thanks so much for the help and responses!

---

<div class="post-metadata">

**Author:** ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)\
**Post date:** [March 14, 2024, 3:28am UTC](https://discourse.pi-hole.net/t/lost-pi-hole-local-dns-resolution-after-adding-unbound/68509/10 "2024-03-14T03:28:03Z")

</div>

Closed on March 14, 2024, 3:28am UTC

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.