Pi-hole not blocking ads or block very little

Expected Behaviour:

_It should block ads including in-app ads:
-hardware: raspberry pi 3b

Actual Behaviour:

_It doesn't block ads in-app ads and site ads as before. I had it set up for awhile and it had been working well until a couple months ago I suddenly saw ads in some apps. I tried restart the pi, flushed the DNS but nothing helped so I did a clean install but it still has the same issue. I suspect that it has something to do with Ipv6 but I'm not sure?

nslookup for references:

nslookup msn.com
Server: 2001:558:feed::1
Address: 2001:558:feed::1#53

Non-authoritative answer:
Name: msn.com
Address: 204.79.197.219

nslookup furry.com
Server: 2001:558:feed::1
Address: 2001:558:feed::1#53

Non-authoritative answer:
Name: furry.com
Address: 23.21.234.173
Name: furry.com
Address: 23.21.157.88

Debug Token:

https://tricorder.pi-hole.net/E7wuDONl/

I don't think neither msn.com nor furry.com should be blocked in any list (in terms of ads). The domain to be checked is flurry.com, which should result 0.0.0.0 because it exists in many lists to be blocked.

Tha assumption is justified:

The client running that nslookup was not using your Pi-hole for DNS, but 2001:558:feed::1 - one of Comcast's public public DNS resolvers.

It looks as if your router would be advertising that IPv6 address as DNS server, allowing your clients to by-pass Pi-hole.

You'd have to find a way to configure your router to advertise your Pi-hole host machine's IPv6 as DNS server or to stop advertising an alternate one.

You'd have to consult your router's documentation sources on further details for its IPv6 configuration options.

If your router doesn't support configuring IPv6 DNS, you could consider disabling IPv6 altogether.

If your router doesn't support that either, your clients will always be able to bypass Pi-hole via IPv6.

Thank you for your suggestions. Do you know how I can find my Pi-hole Ipv6? I will check if I can configure it on my router.

Run from inside your Pi-hole host machine, the following command would list all IP addresses associated with a given network interface, in this case for eth0:

ip -6 address show eth0

The interface name should match the one that your Pi-hole is aware of, as displayed in some of the options under Interface settings at Settings | DNS in PI-hole's UI.

There will be quite a few of them.
Avoid public GUA addresses (range 2000::/3) - they are likely to change regularly, and Pi-hole has to be reachable via a stable IP.

Note that if your router supports it, I would prefer to disable propagating an IPv6 DNS resolver altogether.

Most web browsers on PC and phones are configured to use Private/Secure DNS, you need to disable them in order for pihole to work properly

Have a look here: Pi-Hole Not Blocking any Ads on Windows PC or Phone [Fixed]

That is correct and worth checking (even though Pi-hole supplies the necessary DNS replies for canary domains for FireFox).

But it has no impact on Yuqiriin's issue of a router advertising its own IPv6 address as local DNS resolver. That has to be addressed separately in one of the ways I've listed above.

after reaching out to my internet provider, I was informed that I could not do anything to the ipv6, so I was about to give up on using pi-hole. Fortunately, I reset my router and now it start working like before!

That may only be temporary - if your router continues to advertise Comcast's DNS server's IPv6 address, then clients will by-pass Pi-hole.

You want to re-verify which DNS servers your clients are using, e.g. by running an nslookup and scrutinising the actual Server: in use, or by running ipconfig /all from a Windows client and checking its DNS server section for Comcast's IPv6 addresses.

Sadly it was indeed temporary. And I still get this aside from the Pi-hole IP in DNS server. I guess I can't use Pi-hole anymore then?
image

I cannot know that.

As mentioned above, you'd have to check your router's DNS configuration options for IPv6 to answer that.

Yeah unfortunately I can't change the DNS for IPv6 nor disable IPv6 on the router.