# Pi-Hole is used but blacklisted domains aren't blocked

**URL:** <https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713>\
**Category:** Community Help\
**Created:** [October 29, 2021, 5:58pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713 "2021-10-29T17:58:30Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![Guy\_Forssman](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/guy_forssman/32/27957_2.png) [@Guy\_Forssman](https://discourse.pi-hole.net/u/Guy_Forssman)\
**Post date:** [October 29, 2021, 5:58pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/1 "2021-10-29T17:58:30Z")

</div>

Hi There,

I have a UDM-Pro and a USG running as my main network routers.

I have in this 3 Networks  
Guests = 192.168.2.0  
LAN = 192.168.1.0  
LAN4KIDS = 192.168.3.0

My Pi-Hole v5.6 FTL v5.11 WEB v5.8 is on 192.168.1.5 and uses OPENDNS-Family 208.67.222.123 as DNS.

I can tell Pi-Hole is working for LAN4KIDS as some sites are blocked.  
I blacklisted some domains and put them in a School group.  
(.|^)youtube.com$ (.|^)m.youtube.com$

I noticed they aren't blocked.  
I start searching on the internet and found [Pi-hole doesn't block domains as intended - #6 by jfb](https://discourse.pi-hole.net/t/pi-hole-doesnt-block-domains-as-intended/24230/6)

In my configuration i have a /etc/pihole/pihole-FTL.conf that only contains privacy=0  
and there is no blacklist.txt.

Is this info from previous question still valid and can somebody help me troubleshoot this..

Kind regards  
Guy Forssman

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 6:05pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/2 "2021-10-29T18:05:28Z")

</div>

Please upload a debug log and post **just the token URL** that is generated after the log is uploaded by running the following command from the Pi-hole host terminal:

```auto
pihole -d

```

or do it through the Web interface:

_ **Tools \> Generate Debug Log** _

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 6:08pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/3 "2021-10-29T18:08:07Z")

</div>

> [@Guy\_Forssman](#):
>
> there is no blacklist.txt.

The thread you reference was written when an older version of Pi-hole was current (prior to V5.0). With V5.0 and later of Pi-hole, the domains and adlists are no longer in separate text files, they are embedded in an SQL database at _ **/etc/pihole/gravity.db** _.

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 8:17pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/5 "2021-10-29T20:17:52Z")

</div>

Were you unable to upload your log to our server? That is what produces the token, and putting the log on our server limits the audience to the Pi-hole team (and for only 48 hours). Posting your log publicly provides none of this privacy.

---

<div class="post-metadata">

**Author:** ![Guy\_Forssman](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/guy_forssman/32/27957_2.png) [@Guy\_Forssman](https://discourse.pi-hole.net/u/Guy_Forssman)\
**Post date:** [October 29, 2021, 8:36pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/6 "2021-10-29T20:36:42Z")

</div>

Yes it's uploaded....

[https://tricorder.pi-hole.net/Dr30plSj/](https://tricorder.pi-hole.net/Dr30plSj/)

It seems that the log contains other dns addresses than the one from Pi-Hole.  
Im running Kubuntu 20.04 on the Pi-Hole server but can't seems to find the config file for that one.  
systemd-resolve --status | grep 'DNS Servers' -A2  
DNS Servers: 1.1.1.1  
208.67.222.222  
9.9.9.9

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 8:48pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/7 "2021-10-29T20:48:09Z")

</div>

Your school group is disabled. No blocking will be applied to clients in that group:

```auto
*** [DIAGNOSING]: Groups
   id enabled name date_added date_modified description                                       
   ---- ------- -------------------------------------------------- ------------------- ------------------- --------------------------------------------------
   0 1 Default 2021-10-27 13:43:16 2021-10-27 13:43:16 The default group                                 
   1 0 School 2021-10-27 14:28:36 2021-10-29 19:00:01 school

```

And, your adlist is only applied to the default group, not the school group as well. Did you intend to not have any adlists in the school group?

```auto
*** [DIAGNOSING]: Adlists
   id enabled group_ids address date_added date_modified comment                                           
   ----- ------- ------------ ---------------------------------------------------------------------------------------------------- ------------------- ------------------- --------------------------------------------------
   1 1 0 https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts 2021-10-27 13:43:16 2021-10-27 13:43:16 Migrated from /etc/pihole/adlists.list

```

---

<div class="post-metadata">

**Author:** ![Guy\_Forssman](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/guy_forssman/32/27957_2.png) [@Guy\_Forssman](https://discourse.pi-hole.net/u/Guy_Forssman)\
**Post date:** [October 29, 2021, 8:53pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/8 "2021-10-29T20:53:23Z")

</div>

The school group is enabled between 08 - 19 h with a cron job. I want to block the fun sites between certain hours for my kids.

The question was posted before 19:00

I have uploaded a new log this time with the group enabled.  
[https://tricorder.pi-hole.net/qXCC50Sy/](https://tricorder.pi-hole.net/qXCC50Sy/)

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 9:04pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/9 "2021-10-29T21:04:54Z")

</div>

With this group enabled, and from one of the clients in that group, from the command prompt or terminal in that client (and not via ssh to Pi-hole), what are the outputs of the following commands:

`nslookup youtube.com`

`nslookup youtube.com 192.168.1.6`

Then from the Pi terminal:

`grep youtube.com /var/log/pihole.log | tail -n10`

---

<div class="post-metadata">

**Author:** ![Guy\_Forssman](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/guy_forssman/32/27957_2.png) [@Guy\_Forssman](https://discourse.pi-hole.net/u/Guy_Forssman)\
**Post date:** [October 29, 2021, 9:10pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/10 "2021-10-29T21:10:37Z")

</div>

C:\Users\guyf\>nslookup youtube  
DNS request timed out.  
timeout was 2 seconds.  
Server: UnKnown  
Address: 192.168.1.6

Name: youtube.

C:\Users\guyf\>nslookup youtube 192.168.1.6  
DNS request timed out.  
timeout was 2 seconds.  
Server: UnKnown  
Address: 192.168.1.6

\*\*\* No internal type for both IPv4 and IPv6 Addresses (A+AAAA) records available for youtube

root@NVR:~# grep youtube.com /var/log/pihole.log | tail -n10  
root@NVR:~#

---

<div class="post-metadata">

**Author:** ![Guy\_Forssman](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/guy_forssman/32/27957_2.png) [@Guy\_Forssman](https://discourse.pi-hole.net/u/Guy_Forssman)\
**Post date:** [October 29, 2021, 9:19pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/11 "2021-10-29T21:19:24Z")

</div>

I think it has to do with /etc/systemd/resolved.conf

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 9:55pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/12 "2021-10-29T21:55:45Z")

</div>

Are you passing port 53 traffic between VLAN'S?

---

<div class="post-metadata">

**Author:** ![Guy\_Forssman](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/guy_forssman/32/27957_2.png) [@Guy\_Forssman](https://discourse.pi-hole.net/u/Guy_Forssman)\
**Post date:** [October 29, 2021, 9:58pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/13 "2021-10-29T21:58:59Z")

</div>

Don't understand your question completely.

I think I nailed it down to UNFI problem ..because the exact order and dns servers are configured for my main LAN and for some reason they also end up in Pi-Hole

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 9:59pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/14 "2021-10-29T21:59:30Z")

</div>

Does the group blocking work now?

---

<div class="post-metadata">

**Author:** ![Guy\_Forssman](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/guy_forssman/32/27957_2.png) [@Guy\_Forssman](https://discourse.pi-hole.net/u/Guy_Forssman)\
**Post date:** [October 29, 2021, 10:00pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/15 "2021-10-29T22:00:45Z")

</div>

No It doesn't

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 10:03pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/16 "2021-10-29T22:03:15Z")

</div>

If you repeat those nslookup commands, do you still receive no replies?

---

<div class="post-metadata">

**Author:** ![Guy\_Forssman](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/guy_forssman/32/27957_2.png) [@Guy\_Forssman](https://discourse.pi-hole.net/u/Guy_Forssman)\
**Post date:** [October 29, 2021, 10:10pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/17 "2021-10-29T22:10:52Z")

</div>

Yes indeed Server Unknown

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [October 29, 2021, 10:17pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/18 "2021-10-29T22:17:37Z")

</div>

I suspect this a problem with passing DNS (port 53) traffic between your different VLAN's.

---

<div class="post-metadata">

**Author:** ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)\
**Post date:** [November 19, 2021, 10:18pm UTC](https://discourse.pi-hole.net/t/pi-hole-is-used-but-blacklisted-domains-arent-blocked/50713/19 "2021-11-19T22:18:19Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.