Pi Hole in Raspberry and FRITZ!box as Router - deny Fritz.box

Please follow the below template, it will help us to help you!

If you are Experiencing issues with a Pi-hole install that has non-standard elements (e.g you are using nginx, apache2 or another reverse proxy, or there is some other aspect of your install that is customised) - please use the Community Help category.

Expected Behaviour:

I Use the latest Pi Home on a Raspberry Pi 4 nimmst Network. In the query log I often see

Ib._dns-sd._udp.fritz.box

I put this to my allow list but I didn’t work see this message every day

See screenshots

Actual Behaviour:

Despite the fact that the address is allowed, it is blocked

Debug Token:

https://tricorder.pi-hole.net/SjqcgrjY/

Some of your regex expressions won't match on lb._dns-sd._udp.fritz.box, e.g.:

$ pihole-FTL regex-test "lb._dns-sd._udp.fritz.box" "(\.|^)udp\.fritz\.box$"  
[i] Compiling regex filter...
    Compiled regex filter in 0.787 msec

Checking domain "lb._dns-sd._udp.fritz.box"...
    NO MATCH!
   Time: 0.273 msec

But as others would match, that would suggest that queries may not have been blocked by Pi-hole, but by its upstream - in case of lb._dns-sd._udp.fritz.box, that would have been your Fritzbox router, as that is handling *.fritz.box.

Let's take a closer look at some of those PTR requests during the last 10 days. Run from your Pi-hole machine, please share the output of:

sudo pihole-FTL sqlite3 --header --column /etc/pihole/pihole-FTL.db \
"SELECT reply_type, status, forward FROM queries \
WHERE type = 6 AND domain = 'lb._dns-sd._udp.fritz.box' \
AND timestamp > strftime('%s','now','-10 days') LIMIT 10;"
reply_type  status  forward
---
1           8
1           8
1           8
1           8
1           8
1           8
1           8
2           8       192.168.1.1#53
2           8       192.168.1.1#53
1           8

A status of 8 confirms that lb._dns-sd._udp.fritz.box is blocked by Pi-hole's upstream (see Supported status types from Query Database - Pi-hole documentation):

ID Status Details
(…) (…) (…) (…)
8 Blocked :cross_mark: By upstream server (NXDOMAIN with RA bit unset)

Pi-hole's web UI should also list respective query log entries as (Blocked, external) when hovering over the blocked icon or inspecting an entry's details.

What could I do?

What would you want to achieve?