Pi hole flooded with queries to wpad and isatap - Ubiquiti

Help
4

I noticed the wpad (unresolved) dns requests a long time a go. They are coming from windows 10 and I haven't found a way to stop windows making these requests.
I also noticed a macbook making unresolvable requests in a similar way.

My resolution to decrease the number of wpad requests and make them resolvable:

I'm using pfsense (v2.4.2) as a firewall / access point o the internet, so I don't think this has to do with the router type. My pfsense local domain is localdomain

  1. method to enable local LAN resolution:
    Create a local dns (hosts) file. I've called it localdns.list and placed it in /etc
    Ensure there is an entry for your pihole, example:
192.168.168.1 raspberry.localdomain wpad.localdomain raspberry wpad
192.168.168.2 pfsense.localdomain pfsense
192.168.168.3 windows10.localdomain windows10
192.168.168.4 macbook.localdomain macbook
192.168.168.5 ps3.localdomain ps3
  1. Enable local LAN name resolution:
    Create a new dnsmasq configuration file. I've called it 06-localdns.conf, it needs to go in /etc/dnsmasq.d
    Restart dnsmasq (sudo service dsnmasq restart)
    Example:
domain=localdomain
expand-hosts
local=/localdomain/
addn-hosts=/etc/localdns.list
  1. Create the wpad response file.
    Create (on your pihole machine) a file wpad.dat in /var/www/html 
function FindProxyForURL(url, host)
{
return "DIRECT";
}

This configuration assumes you haven't got a proxy server, i.e. direct internet access.

Whenever a machine is now requesting wpad information, the dns entry points to your pihole, the request is answered with the correct (pihole) address, the proxy configuration file (minimal size) is retrieved by the requesting machine.
Works for me...

1 Like