Please follow the below template, it will help us to help you!
If you are Experiencing issues with a Pi-hole install that has non-standard elements (e.g you are using nginx instead of lighttpd, or there is some other aspect of your install that is customised) - please use the Community Help category.
Expected Behaviour:
Pi hole should block ads on all devices.
Actual Behaviour:
Ads are still being displayed on macbook. Tail Pihole log shows query is blocked for that domain, but ads are being displayed from the same domain when inspected. I have tried manual DNS on router and now using DHCP on Pi hole in both cases all ads are there.
Let's take a look at the DNS servers being used by the Mac. From the Mac terminal (and not via ssh to the Pi), what are the outputs from the follwoing commands:
nslookup pi.hole
Server: 192.168.1.7
Address: 192.168.1.7#53
Name: pi.hole
Address: 192.168.1.7
The default interactive shell is now zsh.
To update your account to use zsh, please run `chsh -s /bin/zsh`.
For more details, please visit https://support.apple.com/kb/HT208050.
This client appears to be using Pi-hole for DNS. What browser are you using and does the browser have DNS over HTTPS enabled? Do you run the Macbook through a VPN service? From the Macbook terminal again, what is the output of"
grep flurry.com /var/log/pihole.log
Jun 11 00:00:31 dnsmasq[651]: query[A] data. **flurry.com** from 192.168.1.233
Jun 11 00:00:31 dnsmasq[651]: gravity blocked data. **flurry.com** is 0.0.0.0
Jun 11 00:02:45 dnsmasq[651]: query[A] data. **flurry.com** from 192.168.1.233
Jun 11 00:02:45 dnsmasq[651]: gravity blocked data. **flurry.com** is 0.0.0.0
Jun 11 01:16:45 dnsmasq[651]: query[A] data. **** from 192.168.1.233
Jun 11 01:16:45 dnsmasq[651]: gravity blocked data. **** is 0.0.0.0
Jun 11 02:31:47 dnsmasq[651]: query[A] data. **** from 192.168.1.233
Jun 11 02:31:47 dnsmasq[651]: gravity blocked data. **** is 0.0.0.0
Jun 11 03:46:25 dnsmasq[651]: query[A] data. **** from 192.168.1.233
Jun 11 03:46:25 dnsmasq[651]: gravity blocked data. **** is 0.0.0.0
Jun 11 12:25:03 dnsmasq[651]: query[A] **** from 192.168.1.245
Jun 11 12:25:03 dnsmasq[651]: gravity blocked **** is 0.0.0.0
Jun 11 12:35:30 dnsmasq[651]: query[A] **** from 192.168.1.245
Jun 11 12:35:30 dnsmasq[651]: gravity blocked **** is 0.0.0.0
Jun 11 12:35:31 dnsmasq[651]: query[A] www. **** from 192.168.1.245
Jun 11 12:35:31 dnsmasq[651]: gravity blocked www. **** is 0.0.0.0
Jun 11 12:35:36 dnsmasq[651]: query[A] data. **** from 192.168.1.245
Jun 11 12:35:36 dnsmasq[651]: gravity blocked data. **** is 0.0.0.0
type or paste code here
```nslookup flurry.com
Server: 192.168.1.7
Address: 192.168.1.7#53
Non-authoritative answer:
Name: flurry.com
Address: 98.136.103.26
Name: flurry.com
Address: 74.6.136.153
Name: flurry.com
Address: 212.82.100.153
there is no query from macbook for nslookup flurry.com
What I'm looking for is the matching query from the other end. Do this and post the output
from the Pi terminal, run pihole -t to tail the Pi-hole log. After the tail starts, run nslookup flurry.com from the Mac terminal and then post the outputs of both.
This is puzzling. Pi-hole shows that it received this request, and correctly blocked the request and returned the NULL IP. Yet the client shows that an IP was resolved.
The only way that appears to be possible is if the client is getting DNS resolution from multiple sources. This is what I get when I run a similar test - 155 is the Pi-hole, 135 is the Mac: