Pi-Hole not blocking any ads

rahduke · October 7, 2020, 4:45am

Expected Behaviour:
I expect Pi-Hole to block ads

Actual Behaviour:
Pi-Hole isn't blocking ads, it's recording queries but not blocking any of them. I've configured Pi-Hole as my DNS server. It's being used as the DNS server devices on my network connect through it but it won't block any ads. I've been using Pi-Hole for years with no issues, recently moved got new service. Pointed my router DNS to Pi-Hole everything seemed to work but alas no ads are blocked on my network.

I feel like it's just something really stupid that I'm missing. I would use Pi-Hole as my DHCP service but I'm worried it will break my cable service via HDhomerun prime. I'm using Verizon's dumb new Wifi 6 router G3100.

Any help would be appreciated!

Debug Token:

https://tricorder.pi-hole.net/cf4cuwnyyo

yubiuser · October 7, 2020, 4:47am

You pihole has seen only one client so far (probably local host).

   [2020-10-07 04:10:54.254 1710M]  -> Total DNS queries: 2
   [2020-10-07 04:10:54.254 1710M]  -> Cached DNS queries: 0
   [2020-10-07 04:10:54.254 1710M]  -> Forwarded DNS queries: 2
   [2020-10-07 04:10:54.254 1710M]  -> Blocked DNS queries: 0
   [2020-10-07 04:10:54.254 1710M]  -> Unknown DNS queries: 0
   [2020-10-07 04:10:54.255 1710M]  -> Unique domains: 1
   [2020-10-07 04:10:54.255 1710M]  -> Unique clients: 1
   [2020-10-07 04:10:54.255 1710M]  -> Known forward destinations: 1

Check your router settings for DNS related options.

rahduke · October 7, 2020, 4:48am

Ok, so umm how do I resolve this?

"i double posted, very sorry, hope mods catch it..."

yubiuser · October 7, 2020, 4:56am

Is it this device

Scanning over the manaul, I see no option to set the DNS server for devices connected via DHCP.

Where did you set

This might be your only option...

rahduke · October 7, 2020, 5:02am

Yes, it's that device. The router config buries the DNS setting see link below:

It seems like this guy was able to change DHCP service but it's a pain in the ass, have to create a custom dnsmasq.conf. Is this my only option?

Thanks for your response!

Bucking_Horn · October 7, 2020, 4:28pm

Are you using the same combination of devices, i.e. G3100 router plus E3200 WiFi extender?

It would seem it's only the E3200 that needs the extended DHCP answer, requiring a custom dnsmasq config for Pi-hole to accept it as one of its kind.

yubiuser · October 7, 2020, 6:47pm

This changes the DNS server upstream of your router. This will work, but is not as good as being able to set the DHCP delivered DNS server. The difference is, with the first option, all your DNS requests are first send from your clients to your router and then to your pihole. For your pihole it looks like all requests are coming from your router and you loose the ability to configure blocking for individual clients. If your clients would send their requests directly to pihole (easiest way is via DHCP), you would get individual stats and the configuration ability.

Another method would be to set the DNS server on each client manually.

Selim · October 7, 2020, 9:36pm

I actually disabled both DHCP and DNS on the Verizon router and used Pi-hole for both.
Makes it easier since the entire solution is now handled by Pi-hole.

rahduke · October 8, 2020, 3:26am

I found the DHCP setting buried a mile down in my router settings and disabled it. So now Pi-Hole is managing my DHCP, this works as expected however ads are still not being blocked on any of my devices This is perplexing! See log below, please help

https://tricorder.pi-hole.net/fvzdxtge4j

rahduke · October 8, 2020, 3:54am

Blockquote
It would seem it's only the E3200 that needs the extended DHCP answer, requiring a custom dnsmasq config for Pi-hole to accept it as one of its kind.

That's correct, I was able to disable DHCP on the verizon router and enable it on Pi-Hole but ads are still not being blocked. DHCP doesn't seem to be the issue

https://tricorder.pi-hole.net/fvzdxtge4j -- new log

yubiuser · October 8, 2020, 4:39am

Did you reconnect all your clients once from the network to make sure they pickup the new DHCP information, including the DNS server?

From your debug log, is seems some devices have started using pihole

   [2020-10-08 03:39:44.065 19592M]  -> Total DNS queries: 29255
   [2020-10-08 03:39:44.065 19592M]  -> Cached DNS queries: 1943
   [2020-10-08 03:39:44.065 19592M]  -> Forwarded DNS queries: 20261
   [2020-10-08 03:39:44.065 19592M]  -> Blocked DNS queries: 7051
   [2020-10-08 03:39:44.065 19592M]  -> Unknown DNS queries: 0
   [2020-10-08 03:39:44.066 19592M]  -> Unique domains: 1655
   [2020-10-08 03:39:44.066 19592M]  -> Unique clients: 4
   [2020-10-08 03:39:44.066 19592M]  -> Known forward destinations: 2

At least your router has started using pihole

query[A] api.us-east-1.aiv-delivery.net from 192.168.1.1
   Oct  8 00:00:40 dnsmasq[1712]: forwarded api.us-east-1.aiv-delivery.net to 208.67.220.220
   Oct  8 00:00:40 dnsmasq[1712]: query[A] api.us-east-1.aiv-delivery.net from 192.168.1.1
   Oct  8 00:00:40 dnsmasq[1712]: forwarded api.us-east-1.aiv-delivery.net to 8.8.8.8
   Oct  8 00:00:40 dnsmasq[1712]: forwarded api.us-east-1.aiv-delivery.net to 208.67.220.220
   Oct  8 00:00:40 dnsmasq[1712]: reply api.us-east-1.aiv-delivery.net is 54.85.188.39

Whats the output of

cat /etc/pihole/dhcp.leases

From a client please run

nslookup pi.hole

nslookup flurry.com

jfb · October 8, 2020, 1:28pm

Your debug log shows they are. The empty boxes on the web admin dashboard are frequently due to a browser ad blocker. If you have these in operation, disable them for the dashboard.

rahduke · October 8, 2020, 1:53pm

Your debug log shows they are. The empty boxes on the web admin dashboard are frequently due to a browser ad blocker. If you have these in operation, disable them for the dashboard.

I tested adblock using canyoublockit.com and all the ads appeared on my wifi clients and wired desktop. However I did notice a few less ads on my desktop. Have ads just gotten smarter than the pi-hole over the past few months?

rahduke · October 8, 2020, 1:54pm

Blockquote From a client please run nslookup pi.hole nslookup flurry.com

I will test this when I get home this evening...

jfb · October 8, 2020, 4:34pm

The point I am addressing is the incorrect information on your dashboard. The debug log shows Blocked DNS queries: 7051 , but the dashboard does not show this. The blank lines for queries blocked and percent blocked are most commonly caused by an adblocker on the browser preventing these boxes from loading.

Turning off the adblocker for the Pi-hole web admin page typically fixes this problem.

rahduke · October 9, 2020, 2:33am

hope this helps...sorry it took so long.

My wired clients are blocking some ads, they pass the canyoublockit simple test, fail the extreme test miserably. My wireless clients are not blocking any ads. Very strange...

rahduke · October 9, 2020, 2:35am

You're right, sorry disabling brave browser blocking allows Pi-hole to show my stats. I can confirm ty wired clients are blocking some ads, they pass the canyoublockit simple test, fail the extreme test miserably. My wireless clients are not blocking any ads. Very strange...

jfb · October 9, 2020, 2:40am

Regardless of what you see on the website you are using to test ad blocking, are you seeing actual ads on the wired clients? From what I can see, that testing website is pretty crappy.

rahduke · October 9, 2020, 3:04am

yes, still seeing ads on wired client, much more than I used to in my old setup and definitely seeing all ads on wifi devices.

jfb · October 9, 2020, 3:16am

You can use these tools to determine where the ads are coming from.

Check that all your clients are using Pi-hole; it appears your wireless clients may not be.