Pi-Hole seems to have suddenly started blocking Netflix on TV only

Please follow the below template, it will help us to help you!

Expected Behaviour:

Netflix works on LG C8 TV

Actual Behaviour:

Netflix doesn't work - error "NW-2-5" (network issues) - started about four or five days ago.
When the TV's DNS is manually set to 8.8.8.8 Netflix works, set back to 192.168.20.254 (pihole) it stops.
BUT Netflix works on ALL other devices that go through the Pihole...?? PC, phones, Xbox... they all work, except the TV.

Debug Token:

https://tricorder.pi-hole.net/zs16ultuxl

Hi,

I pulled up the live log page and get lots of lines like this when I try to start it on the TV:

Nov 11 22:48:22 dnsmasq[944]: reply customerevents.netflix.com is <CNAME>
Nov 11 22:48:22 dnsmasq[944]: reply customerevents.geo.netflix.com is <CNAME>
Nov 11 22:48:22 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 11 22:48:22 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 11 22:48:22 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 11 22:48:33 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 11 22:48:33 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 11 22:48:33 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88

And trying to access fast.com gives me this:

Nov 11 22:52:42 dnsmasq[944]: query[A] fast.com from 192.168.20.50
Nov 11 22:52:42 dnsmasq[944]: forwarded fast.com to 8.8.8.8
Nov 11 22:52:42 dnsmasq[944]: reply fast.com is 154.16.65.88

I don't really know what I'm looking at, but that reads like the pihole is allowing netflix and fast.com right?

Also I should have mentioned in my first post that netflix.com is whitelisted in pihole.

That is correct, but not every Netflix domain might be allowed. That particular subdomain is allowed. Look at every query from that client for anything that is blocked (reply is 0.0.0.0).

Doesn't look like anything is being blocked... here's the full list of stuff that pops up when I try to open Netflix on the TV:

Nov 12 11:33:00 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 11:33:00 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 11:33:00 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 11:33:00 dnsmasq[944]: query[A] nrdp.nccp.netflix.com from 192.168.20.50
Nov 12 11:33:00 dnsmasq[944]: cached nrdp.nccp.netflix.com is 154.16.65.88
Nov 12 11:33:00 dnsmasq[944]: query[A] api-global.netflix.com from 192.168.20.50
Nov 12 11:33:00 dnsmasq[944]: cached api-global.netflix.com is 154.16.65.88
Nov 12 11:33:00 dnsmasq[944]: query[A] secure.netflix.com from 192.168.20.50
Nov 12 11:33:00 dnsmasq[944]: cached secure.netflix.com is 154.16.65.88
Nov 12 11:33:00 dnsmasq[944]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 11:33:00 dnsmasq[944]: cached customerevents.netflix.com is <CNAME>
Nov 12 11:33:00 dnsmasq[944]: cached customerevents.geo.netflix.com is <CNAME>
Nov 12 11:33:00 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 12 11:33:00 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 12 11:33:00 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 12 11:33:00 dnsmasq[944]: query[A] ichnaea.netflix.com from 192.168.20.50
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.netflix.com is <CNAME>
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.geo.netflix.com is <CNAME>
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.89.190.6
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.149.89.34
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.89.160.190
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.88.90.229
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.89.185.104
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.148.89.232
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.42.153.22
Nov 12 11:33:00 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.148.94.175
Nov 12 11:33:00 dnsmasq[944]: query[A] cdn-0.nflximg.com from 192.168.20.50
Nov 12 11:33:00 dnsmasq[944]: cached cdn-0.nflximg.com is <CNAME>
Nov 12 11:33:00 dnsmasq[944]: cached dscg.netflix.com.edgesuite.net is <CNAME>
Nov 12 11:33:00 dnsmasq[944]: cached a743.dscg.akamai.net is 149.135.80.8
Nov 12 11:33:00 dnsmasq[944]: cached a743.dscg.akamai.net is 149.135.80.10
Nov 12 11:33:02 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 11:33:02 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 11:33:02 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 11:33:02 dnsmasq[944]: query[A] nrdp.nccp.netflix.com from 192.168.20.50
Nov 12 11:33:02 dnsmasq[944]: cached nrdp.nccp.netflix.com is 154.16.65.88
Nov 12 11:33:02 dnsmasq[944]: query[A] api-global.netflix.com from 192.168.20.50
Nov 12 11:33:02 dnsmasq[944]: cached api-global.netflix.com is 154.16.65.88
Nov 12 11:33:02 dnsmasq[944]: query[A] secure.netflix.com from 192.168.20.50
Nov 12 11:33:02 dnsmasq[944]: cached secure.netflix.com is 154.16.65.88
Nov 12 11:33:02 dnsmasq[944]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 11:33:02 dnsmasq[944]: cached customerevents.netflix.com is <CNAME>
Nov 12 11:33:02 dnsmasq[944]: cached customerevents.geo.netflix.com is <CNAME>
Nov 12 11:33:02 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 12 11:33:02 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 12 11:33:02 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 12 11:33:02 dnsmasq[944]: query[A] ichnaea.netflix.com from 192.168.20.50
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.netflix.com is <CNAME>
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.geo.netflix.com is <CNAME>
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.148.94.175
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.89.190.6
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.149.89.34
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.89.160.190
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.88.90.229
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.89.185.104
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.148.89.232
Nov 12 11:33:02 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.42.153.22
Nov 12 11:33:02 dnsmasq[944]: query[A] cdn-0.nflximg.com from 192.168.20.50
Nov 12 11:33:02 dnsmasq[944]: cached cdn-0.nflximg.com is <CNAME>
Nov 12 11:33:02 dnsmasq[944]: cached dscg.netflix.com.edgesuite.net is <CNAME>
Nov 12 11:33:02 dnsmasq[944]: cached a743.dscg.akamai.net is 149.135.80.10
Nov 12 11:33:02 dnsmasq[944]: cached a743.dscg.akamai.net is 149.135.80.8
Nov 12 11:33:12 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 11:33:12 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 11:33:12 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 11:33:13 dnsmasq[944]: query[A] pi.hole from 192.168.20.81
Nov 12 11:33:13 dnsmasq[944]: /etc/pihole/local.list pi.hole is 192.168.20.254

What's that "CNAME" one? That looks odd, but I don't know what it means.

Thanks

This is a canonical name - essentially a domain name alias. One name leads to another, and eventually it leads to the final domain name and an IP.

Tail the Pi-Hole log and restart the TV. Perhaps the TV OS is not getting a domain it needs.

Here's the full log from when the TV is turned on to when I get the error saying Netflix servers aren't reachable:

Nov 12 15:22:13 dnsmasq[944]: query[A] lgtvonline.lge.com from 192.168.20.50
Nov 12 15:22:13 dnsmasq[944]: forwarded lgtvonline.lge.com to 8.8.4.4
Nov 12 15:22:14 dnsmasq[944]: reply lgtvonline.lge.com is <CNAME>
Nov 12 15:22:14 dnsmasq[944]: reply lgtvonline-lge-com-gslb.aws-prd.net is 52.78.37.138
Nov 12 15:22:14 dnsmasq[944]: reply lgtvonline-lge-com-gslb.aws-prd.net is 13.124.131.100
Nov 12 15:22:14 dnsmasq[944]: query[A] lgtvonline.lge.com from 192.168.20.50
Nov 12 15:22:14 dnsmasq[944]: cached lgtvonline.lge.com is <CNAME>
Nov 12 15:22:14 dnsmasq[944]: cached lgtvonline-lge-com-gslb.aws-prd.net is 13.124.131.100
Nov 12 15:22:14 dnsmasq[944]: cached lgtvonline-lge-com-gslb.aws-prd.net is 52.78.37.138
Nov 12 15:22:16 dnsmasq[944]: query[A] lgtvonline.lge.com from 192.168.20.50
Nov 12 15:22:16 dnsmasq[944]: cached lgtvonline.lge.com is <CNAME>
Nov 12 15:22:16 dnsmasq[944]: cached lgtvonline-lge-com-gslb.aws-prd.net is 52.78.37.138
Nov 12 15:22:16 dnsmasq[944]: cached lgtvonline-lge-com-gslb.aws-prd.net is 13.124.131.100
Nov 12 15:22:17 dnsmasq[944]: query[A] snu.lge.com from 192.168.20.50
Nov 12 15:22:17 dnsmasq[944]: forwarded snu.lge.com to 8.8.4.4
Nov 12 15:22:17 dnsmasq[944]: query[AAAA] snu.lge.com from 192.168.20.50
Nov 12 15:22:17 dnsmasq[944]: forwarded snu.lge.com to 8.8.4.4
Nov 12 15:22:17 dnsmasq[944]: reply snu.lge.com is 136.166.4.75
Nov 12 15:22:17 dnsmasq[944]: reply snu.lge.com is NODATA-IPv6
Nov 12 15:22:18 dnsmasq[944]: query[A] AU.lgtvsdp.com from 192.168.20.50
Nov 12 15:22:18 dnsmasq[944]: forwarded AU.lgtvsdp.com to 8.8.4.4
Nov 12 15:22:18 dnsmasq[944]: query[AAAA] AU.lgtvsdp.com from 192.168.20.50
Nov 12 15:22:18 dnsmasq[944]: forwarded AU.lgtvsdp.com to 8.8.4.4
Nov 12 15:22:18 dnsmasq[944]: reply AU.lgtvsdp.com is <CNAME>
Nov 12 15:22:18 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is 52.79.165.71
Nov 12 15:22:18 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is 52.78.49.83
Nov 12 15:22:18 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is 52.78.42.251
Nov 12 15:22:18 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is 52.78.42.243
Nov 12 15:22:18 dnsmasq[944]: reply AU.lgtvsdp.com is <CNAME>
Nov 12 15:22:18 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is NODATA-IPv6
Nov 12 15:22:21 dnsmasq[944]: query[A] embeddedassistant.googleapis.com from 192.168.20.50
Nov 12 15:22:21 dnsmasq[944]: forwarded embeddedassistant.googleapis.com to 8.8.4.4
Nov 12 15:22:21 dnsmasq[944]: query[AAAA] embeddedassistant.googleapis.com from 192.168.20.50
Nov 12 15:22:21 dnsmasq[944]: forwarded embeddedassistant.googleapis.com to 8.8.4.4
Nov 12 15:22:21 dnsmasq[944]: reply embeddedassistant.googleapis.com is 216.58.199.74
Nov 12 15:22:21 dnsmasq[944]: reply embeddedassistant.googleapis.com is 2404:6800:4006:80a::200a
Nov 12 15:22:21 dnsmasq[944]: query[A] AU.info.lgsmartad.com from 192.168.20.50
Nov 12 15:22:21 dnsmasq[944]: forwarded AU.info.lgsmartad.com to 8.8.4.4
Nov 12 15:22:21 dnsmasq[944]: query[AAAA] AU.info.lgsmartad.com from 192.168.20.50
Nov 12 15:22:21 dnsmasq[944]: forwarded AU.info.lgsmartad.com to 8.8.4.4
Nov 12 15:22:22 dnsmasq[944]: reply AU.info.lgsmartad.com is <CNAME>
Nov 12 15:22:22 dnsmasq[944]: reply au-info-lgsmartad-com.aws-prd.net is 13.209.216.135
Nov 12 15:22:22 dnsmasq[944]: reply au-info-lgsmartad-com.aws-prd.net is 13.209.107.66
Nov 12 15:22:22 dnsmasq[944]: reply AU.info.lgsmartad.com is <CNAME>
Nov 12 15:22:22 dnsmasq[944]: reply au-info-lgsmartad-com.aws-prd.net is NODATA-IPv6
Nov 12 15:22:24 dnsmasq[944]: query[A] plex.tv from 192.168.20.81
Nov 12 15:22:24 dnsmasq[944]: forwarded plex.tv to 8.8.4.4
Nov 12 15:22:25 dnsmasq[944]: reply plex.tv is 99.80.231.223
Nov 12 15:22:25 dnsmasq[944]: reply plex.tv is 99.81.213.165
Nov 12 15:22:25 dnsmasq[944]: reply plex.tv is 99.80.242.242
Nov 12 15:22:26 dnsmasq[944]: query[A] pi.hole from 192.168.20.81
Nov 12 15:22:26 dnsmasq[944]: /etc/pihole/local.list pi.hole is 192.168.20.254
Nov 12 15:22:32 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:22:32 dnsmasq[944]: forwarded nrdp50-appboot.netflix.com to 8.8.4.4
Nov 12 15:22:32 dnsmasq[944]: query[A] nrdp.nccp.netflix.com from 192.168.20.50
Nov 12 15:22:32 dnsmasq[944]: forwarded nrdp.nccp.netflix.com to 8.8.4.4
Nov 12 15:22:32 dnsmasq[944]: query[A] api-global.netflix.com from 192.168.20.50
Nov 12 15:22:32 dnsmasq[944]: forwarded api-global.netflix.com to 8.8.4.4
Nov 12 15:22:32 dnsmasq[944]: query[A] secure.netflix.com from 192.168.20.50
Nov 12 15:22:32 dnsmasq[944]: forwarded secure.netflix.com to 8.8.4.4
Nov 12 15:22:32 dnsmasq[944]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 15:22:32 dnsmasq[944]: forwarded customerevents.netflix.com to 8.8.4.4
Nov 12 15:22:32 dnsmasq[944]: query[A] ichnaea.netflix.com from 192.168.20.50
Nov 12 15:22:32 dnsmasq[944]: forwarded ichnaea.netflix.com to 8.8.4.4
Nov 12 15:22:32 dnsmasq[944]: query[A] cdn-0.nflximg.com from 192.168.20.50
Nov 12 15:22:32 dnsmasq[944]: forwarded cdn-0.nflximg.com to 8.8.4.4
Nov 12 15:22:32 dnsmasq[944]: reply cdn-0.nflximg.com is <CNAME>
Nov 12 15:22:32 dnsmasq[944]: reply dscg.netflix.com.edgesuite.net is <CNAME>
Nov 12 15:22:32 dnsmasq[944]: reply a743.dscg.akamai.net is 23.205.115.162
Nov 12 15:22:32 dnsmasq[944]: reply a743.dscg.akamai.net is 23.205.115.155
Nov 12 15:22:32 dnsmasq[944]: reply nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:22:32 dnsmasq[944]: reply appboot.netflix.com is 154.16.65.88
Nov 12 15:22:32 dnsmasq[944]: reply nrdp.nccp.netflix.com is 154.16.65.88
Nov 12 15:22:32 dnsmasq[944]: reply api-global.netflix.com is 154.16.65.88
Nov 12 15:22:32 dnsmasq[944]: reply secure.netflix.com is 154.16.65.88
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.netflix.com is <CNAME>
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.geo.netflix.com is <CNAME>
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.148.229.18
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 35.167.199.238
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.68.18.62
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.69.122.171
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 35.163.6.39
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 34.208.135.230
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 35.164.67.16
Nov 12 15:22:33 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.148.125.37
Nov 12 15:22:33 dnsmasq[944]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 15:22:33 dnsmasq[944]: forwarded customerevents.netflix.com to 8.8.8.8
Nov 12 15:22:33 dnsmasq[944]: forwarded customerevents.netflix.com to 8.8.4.4
Nov 12 15:22:33 dnsmasq[944]: reply customerevents.netflix.com is <CNAME>
Nov 12 15:22:33 dnsmasq[944]: reply customerevents.geo.netflix.com is <CNAME>
Nov 12 15:22:33 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 12 15:22:33 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 12 15:22:33 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 12 15:22:34 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:22:34 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:22:34 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:22:34 dnsmasq[944]: query[A] nrdp.nccp.netflix.com from 192.168.20.50
Nov 12 15:22:34 dnsmasq[944]: cached nrdp.nccp.netflix.com is 154.16.65.88
Nov 12 15:22:34 dnsmasq[944]: query[A] api-global.netflix.com from 192.168.20.50
Nov 12 15:22:34 dnsmasq[944]: cached api-global.netflix.com is 154.16.65.88
Nov 12 15:22:34 dnsmasq[944]: query[A] secure.netflix.com from 192.168.20.50
Nov 12 15:22:34 dnsmasq[944]: cached secure.netflix.com is 154.16.65.88
Nov 12 15:22:34 dnsmasq[944]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 15:22:34 dnsmasq[944]: cached customerevents.netflix.com is <CNAME>
Nov 12 15:22:34 dnsmasq[944]: cached customerevents.geo.netflix.com is <CNAME>
Nov 12 15:22:34 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 12 15:22:34 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 12 15:22:34 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 12 15:22:34 dnsmasq[944]: query[A] ichnaea.netflix.com from 192.168.20.50
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.netflix.com is <CNAME>
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.geo.netflix.com is <CNAME>
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.148.125.37
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 35.164.67.16
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 34.208.135.230
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 35.163.6.39
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.69.122.171
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.68.18.62
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 35.167.199.238
Nov 12 15:22:34 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.148.229.18
Nov 12 15:22:34 dnsmasq[944]: query[A] cdn-0.nflximg.com from 192.168.20.50
Nov 12 15:22:34 dnsmasq[944]: cached cdn-0.nflximg.com is <CNAME>
Nov 12 15:22:34 dnsmasq[944]: cached dscg.netflix.com.edgesuite.net is <CNAME>
Nov 12 15:22:34 dnsmasq[944]: cached a743.dscg.akamai.net is 23.205.115.155
Nov 12 15:22:34 dnsmasq[944]: cached a743.dscg.akamai.net is 23.205.115.162
Nov 12 15:22:39 dnsmasq[944]: query[A] ign-a4y3psmrc158h-8d2d6pd2-4d0d18.api.amazonvideo.com from 192.168.20.50
Nov 12 15:22:39 dnsmasq[944]: forwarded ign-a4y3psmrc158h-8d2d6pd2-4d0d18.api.amazonvideo.com to 8.8.4.4
Nov 12 15:22:40 dnsmasq[944]: reply ign-a4y3psmrc158h-8d2d6pd2-4d0d18.api.amazonvideo.com is <CNAME>
Nov 12 15:22:40 dnsmasq[944]: reply atv-ext.amazon.com is <CNAME>
Nov 12 15:22:40 dnsmasq[944]: reply v1qxr2rxh3.na.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:40 dnsmasq[944]: reply na.t100.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:40 dnsmasq[944]: reply iad.t100.prod.ter.amazonvideo.com is 54.84.68.116
Nov 12 15:22:40 dnsmasq[944]: reply iad.t100.prod.ter.amazonvideo.com is 3.222.100.75
Nov 12 15:22:40 dnsmasq[944]: reply iad.t100.prod.ter.amazonvideo.com is 3.220.48.218
Nov 12 15:22:40 dnsmasq[944]: reply iad.t100.prod.ter.amazonvideo.com is 34.204.111.65
Nov 12 15:22:40 dnsmasq[944]: reply iad.t100.prod.ter.amazonvideo.com is 52.3.51.177
Nov 12 15:22:40 dnsmasq[944]: reply iad.t100.prod.ter.amazonvideo.com is 3.211.66.7
Nov 12 15:22:42 dnsmasq[944]: query[A] atv-ext.amazon.com from 192.168.20.50
Nov 12 15:22:42 dnsmasq[944]: cached atv-ext.amazon.com is <CNAME>
Nov 12 15:22:42 dnsmasq[944]: cached v1qxr2rxh3.na.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:42 dnsmasq[944]: cached na.t100.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 3.211.66.7
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 52.3.51.177
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 34.204.111.65
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 3.220.48.218
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 3.222.100.75
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 54.84.68.116
Nov 12 15:22:42 dnsmasq[944]: query[A] atv-ext.amazon.com from 192.168.20.50
Nov 12 15:22:42 dnsmasq[944]: cached atv-ext.amazon.com is <CNAME>
Nov 12 15:22:42 dnsmasq[944]: cached v1qxr2rxh3.na.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:42 dnsmasq[944]: cached na.t100.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 54.84.68.116
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 3.211.66.7
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 52.3.51.177
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 34.204.111.65
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 3.220.48.218
Nov 12 15:22:42 dnsmasq[944]: cached iad.t100.prod.ter.amazonvideo.com is 3.222.100.75
Nov 12 15:22:44 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:22:44 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:22:44 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:22:45 dnsmasq[944]: query[A] m.media-amazon.com from 192.168.20.50
Nov 12 15:22:45 dnsmasq[944]: forwarded m.media-amazon.com to 8.8.4.4
Nov 12 15:22:45 dnsmasq[944]: query[A] m.media-amazon.com from 192.168.20.50
Nov 12 15:22:45 dnsmasq[944]: forwarded m.media-amazon.com to 8.8.4.4
Nov 12 15:22:45 dnsmasq[944]: query[A] m.media-amazon.com from 192.168.20.50
Nov 12 15:22:45 dnsmasq[944]: forwarded m.media-amazon.com to 8.8.4.4
Nov 12 15:22:45 dnsmasq[944]: query[A] m.media-amazon.com from 192.168.20.50
Nov 12 15:22:45 dnsmasq[944]: forwarded m.media-amazon.com to 8.8.4.4
Nov 12 15:22:45 dnsmasq[944]: reply m.media-amazon.com is <CNAME>
Nov 12 15:22:45 dnsmasq[944]: reply c.media-amazon.com is 13.35.143.52
Nov 12 15:22:45 dnsmasq[944]: reply m.media-amazon.com is <CNAME>
Nov 12 15:22:45 dnsmasq[944]: reply c.media-amazon.com is 13.35.143.52
Nov 12 15:22:45 dnsmasq[944]: reply m.media-amazon.com is <CNAME>
Nov 12 15:22:45 dnsmasq[944]: reply c.media-amazon.com is 13.35.143.52
Nov 12 15:22:45 dnsmasq[944]: reply m.media-amazon.com is <CNAME>
Nov 12 15:22:45 dnsmasq[944]: reply c.media-amazon.com is 13.35.143.52
Nov 12 15:22:46 dnsmasq[944]: query[A] api.amazon.com from 192.168.20.50
Nov 12 15:22:46 dnsmasq[944]: forwarded api.amazon.com to 8.8.4.4
Nov 12 15:22:46 dnsmasq[944]: reply api.amazon.com is 72.21.207.143
Nov 12 15:22:46 dnsmasq[944]: query[A] www.youtube.com from 192.168.20.50
Nov 12 15:22:46 dnsmasq[944]: cached www.youtube.com is <CNAME>
Nov 12 15:22:46 dnsmasq[944]: cached youtube-ui.l.google.com is 172.217.167.78
Nov 12 15:22:46 dnsmasq[944]: cached youtube-ui.l.google.com is 216.58.196.142
Nov 12 15:22:46 dnsmasq[944]: cached youtube-ui.l.google.com is 172.217.25.142
Nov 12 15:22:46 dnsmasq[944]: cached youtube-ui.l.google.com is 172.217.25.46
Nov 12 15:22:46 dnsmasq[944]: cached youtube-ui.l.google.com is 216.58.199.78
Nov 12 15:22:46 dnsmasq[944]: cached youtube-ui.l.google.com is 172.217.167.110
Nov 12 15:22:46 dnsmasq[944]: cached youtube-ui.l.google.com is 216.58.203.110
Nov 12 15:22:46 dnsmasq[944]: query[AAAA] www.youtube.com from 192.168.20.50
Nov 12 15:22:46 dnsmasq[944]: cached www.youtube.com is <CNAME>
Nov 12 15:22:46 dnsmasq[944]: forwarded www.youtube.com to 8.8.4.4
Nov 12 15:22:46 dnsmasq[944]: reply www.youtube.com is <CNAME>
Nov 12 15:22:46 dnsmasq[944]: reply youtube-ui.l.google.com is 2404:6800:4006:809::200e
Nov 12 15:22:47 dnsmasq[944]: query[A] s.ytimg.com from 192.168.20.50
Nov 12 15:22:47 dnsmasq[944]: forwarded s.ytimg.com to 8.8.4.4
Nov 12 15:22:47 dnsmasq[944]: query[AAAA] s.ytimg.com from 192.168.20.50
Nov 12 15:22:47 dnsmasq[944]: forwarded s.ytimg.com to 8.8.4.4
Nov 12 15:22:47 dnsmasq[944]: reply s.ytimg.com is 216.58.199.78
Nov 12 15:22:47 dnsmasq[944]: reply s.ytimg.com is 2404:6800:4006:804::200e
Nov 12 15:22:49 dnsmasq[944]: query[A] googleads.g.doubleclick.net from 192.168.20.50
Nov 12 15:22:49 dnsmasq[944]: /etc/pihole/gravity.list googleads.g.doubleclick.net is 0.0.0.0
Nov 12 15:22:49 dnsmasq[944]: query[AAAA] googleads.g.doubleclick.net from 192.168.20.50
Nov 12 15:22:49 dnsmasq[944]: /etc/pihole/gravity.list googleads.g.doubleclick.net is 0.0.0.0
Nov 12 15:22:49 dnsmasq[944]: query[A] det-ta-g7g.amazon.com from 192.168.20.50
Nov 12 15:22:49 dnsmasq[944]: forwarded det-ta-g7g.amazon.com to 8.8.4.4
Nov 12 15:22:49 dnsmasq[944]: query[A] www.gstatic.com from 192.168.20.50
Nov 12 15:22:49 dnsmasq[944]: cached www.gstatic.com is 172.217.25.163
Nov 12 15:22:49 dnsmasq[944]: query[AAAA] www.gstatic.com from 192.168.20.50
Nov 12 15:22:49 dnsmasq[944]: forwarded www.gstatic.com to 8.8.4.4
Nov 12 15:22:49 dnsmasq[944]: reply www.gstatic.com is 2404:6800:4006:808::2003
Nov 12 15:22:49 dnsmasq[944]: reply det-ta-g7g.amazon.com is 205.251.242.2
Nov 12 15:22:50 dnsmasq[944]: query[A] fe.api.amazonvideo.com from 192.168.20.50
Nov 12 15:22:50 dnsmasq[944]: forwarded fe.api.amazonvideo.com to 8.8.4.4
Nov 12 15:22:50 dnsmasq[944]: query[A] yt3.ggpht.com from 192.168.20.50
Nov 12 15:22:50 dnsmasq[944]: forwarded yt3.ggpht.com to 8.8.4.4
Nov 12 15:22:50 dnsmasq[944]: query[AAAA] yt3.ggpht.com from 192.168.20.50
Nov 12 15:22:50 dnsmasq[944]: forwarded yt3.ggpht.com to 8.8.4.4
Nov 12 15:22:50 dnsmasq[944]: reply yt3.ggpht.com is 216.58.199.65
Nov 12 15:22:50 dnsmasq[944]: reply yt3.ggpht.com is 2404:6800:4006:808::2001
Nov 12 15:22:50 dnsmasq[944]: query[A] static.doubleclick.net from 192.168.20.50
Nov 12 15:22:50 dnsmasq[944]: /etc/pihole/gravity.list static.doubleclick.net is 0.0.0.0
Nov 12 15:22:50 dnsmasq[944]: query[AAAA] static.doubleclick.net from 192.168.20.50
Nov 12 15:22:50 dnsmasq[944]: /etc/pihole/gravity.list static.doubleclick.net is 0.0.0.0
Nov 12 15:22:50 dnsmasq[944]: reply fe.api.amazonvideo.com is <CNAME>
Nov 12 15:22:50 dnsmasq[944]: reply atv-ext-fe.amazon.com is <CNAME>
Nov 12 15:22:50 dnsmasq[944]: reply v1qxr2rxh3.fe.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:50 dnsmasq[944]: reply fe.t100.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:50 dnsmasq[944]: reply pdx.t100.prod.ter.amazonvideo.com is 52.89.75.79
Nov 12 15:22:50 dnsmasq[944]: reply pdx.t100.prod.ter.amazonvideo.com is 54.69.176.92
Nov 12 15:22:50 dnsmasq[944]: reply pdx.t100.prod.ter.amazonvideo.com is 34.208.34.30
Nov 12 15:22:51 dnsmasq[944]: query[A] i.ytimg.com from 192.168.20.50
Nov 12 15:22:51 dnsmasq[944]: forwarded i.ytimg.com to 8.8.4.4
Nov 12 15:22:51 dnsmasq[944]: query[AAAA] i.ytimg.com from 192.168.20.50
Nov 12 15:22:51 dnsmasq[944]: forwarded i.ytimg.com to 8.8.4.4
Nov 12 15:22:51 dnsmasq[944]: reply i.ytimg.com is 172.217.167.86
Nov 12 15:22:51 dnsmasq[944]: reply i.ytimg.com is 2404:6800:4006:80b::2016
Nov 12 15:22:51 dnsmasq[944]: query[A] unagi-fe.amazon.com from 192.168.20.50
Nov 12 15:22:51 dnsmasq[944]: forwarded unagi-fe.amazon.com to 8.8.4.4
Nov 12 15:22:52 dnsmasq[944]: reply unagi-fe.amazon.com is 52.119.160.96
Nov 12 15:22:53 dnsmasq[944]: query[A] atv-ext-fe.amazon.com from 192.168.20.50
Nov 12 15:22:53 dnsmasq[944]: cached atv-ext-fe.amazon.com is <CNAME>
Nov 12 15:22:53 dnsmasq[944]: cached v1qxr2rxh3.fe.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:53 dnsmasq[944]: cached fe.t100.prod.ter.amazonvideo.com is <CNAME>
Nov 12 15:22:53 dnsmasq[944]: cached pdx.t100.prod.ter.amazonvideo.com is 34.208.34.30
Nov 12 15:22:53 dnsmasq[944]: cached pdx.t100.prod.ter.amazonvideo.com is 54.69.176.92
Nov 12 15:22:53 dnsmasq[944]: cached pdx.t100.prod.ter.amazonvideo.com is 52.89.75.79
Nov 12 15:22:53 dnsmasq[944]: query[A] api.us-west-2.aiv-delivery.net from 192.168.20.50
Nov 12 15:22:53 dnsmasq[944]: forwarded api.us-west-2.aiv-delivery.net to 8.8.4.4
Nov 12 15:22:53 dnsmasq[944]: reply api.us-west-2.aiv-delivery.net is 52.35.146.178
Nov 12 15:22:53 dnsmasq[944]: reply api.us-west-2.aiv-delivery.net is 52.11.195.67
Nov 12 15:22:53 dnsmasq[944]: reply api.us-west-2.aiv-delivery.net is 52.38.184.49
Nov 12 15:22:53 dnsmasq[944]: reply api.us-west-2.aiv-delivery.net is 52.35.163.86
Nov 12 15:22:53 dnsmasq[944]: reply api.us-west-2.aiv-delivery.net is 52.40.71.104
Nov 12 15:22:53 dnsmasq[944]: reply api.us-west-2.aiv-delivery.net is 52.25.92.43
Nov 12 15:22:53 dnsmasq[944]: reply api.us-west-2.aiv-delivery.net is 52.35.234.43

There are only a couple of 0.0.0.0 lines in there, all of them are doubleclick.net... so I whitelisted doubleclick.net, updated Gravity, restarted the TV, here's the logs again:

Nov 12 15:27:33 dnsmasq[944]: query[A] lgtvonline.lge.com from 192.168.20.50
Nov 12 15:27:33 dnsmasq[944]: forwarded lgtvonline.lge.com to 8.8.4.4
Nov 12 15:27:33 dnsmasq[944]: reply lgtvonline.lge.com is <CNAME>
Nov 12 15:27:33 dnsmasq[944]: reply lgtvonline-lge-com-gslb.aws-prd.net is 52.78.37.138
Nov 12 15:27:33 dnsmasq[944]: reply lgtvonline-lge-com-gslb.aws-prd.net is 13.124.131.100
Nov 12 15:27:37 dnsmasq[944]: query[A] lgtvonline.lge.com from 192.168.20.50
Nov 12 15:27:37 dnsmasq[944]: cached lgtvonline.lge.com is <CNAME>
Nov 12 15:27:37 dnsmasq[944]: cached lgtvonline-lge-com-gslb.aws-prd.net is 13.124.131.100
Nov 12 15:27:37 dnsmasq[944]: cached lgtvonline-lge-com-gslb.aws-prd.net is 52.78.37.138
Nov 12 15:27:38 dnsmasq[944]: query[A] snu.lge.com from 192.168.20.50
Nov 12 15:27:38 dnsmasq[944]: forwarded snu.lge.com to 8.8.4.4
Nov 12 15:27:38 dnsmasq[944]: query[AAAA] snu.lge.com from 192.168.20.50
Nov 12 15:27:38 dnsmasq[944]: forwarded snu.lge.com to 8.8.4.4
Nov 12 15:27:38 dnsmasq[944]: reply snu.lge.com is 136.166.4.75
Nov 12 15:27:38 dnsmasq[944]: reply snu.lge.com is NODATA-IPv6
Nov 12 15:27:39 dnsmasq[944]: query[A] AU.lgtvsdp.com from 192.168.20.50
Nov 12 15:27:39 dnsmasq[944]: forwarded AU.lgtvsdp.com to 8.8.4.4
Nov 12 15:27:39 dnsmasq[944]: query[AAAA] AU.lgtvsdp.com from 192.168.20.50
Nov 12 15:27:39 dnsmasq[944]: forwarded AU.lgtvsdp.com to 8.8.4.4
Nov 12 15:27:39 dnsmasq[944]: reply AU.lgtvsdp.com is <CNAME>
Nov 12 15:27:39 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is 52.78.42.251
Nov 12 15:27:39 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is 52.78.49.83
Nov 12 15:27:39 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is 52.78.42.243
Nov 12 15:27:39 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is 52.79.165.71
Nov 12 15:27:39 dnsmasq[944]: reply AU.lgtvsdp.com is <CNAME>
Nov 12 15:27:39 dnsmasq[944]: reply au-lgtvsdp-com.aws-prd.net is NODATA-IPv6
Nov 12 15:27:42 dnsmasq[944]: query[A] embeddedassistant.googleapis.com from 192.168.20.50
Nov 12 15:27:42 dnsmasq[944]: forwarded embeddedassistant.googleapis.com to 8.8.4.4
Nov 12 15:27:42 dnsmasq[944]: query[AAAA] embeddedassistant.googleapis.com from 192.168.20.50
Nov 12 15:27:42 dnsmasq[944]: forwarded embeddedassistant.googleapis.com to 8.8.4.4
Nov 12 15:27:42 dnsmasq[944]: reply embeddedassistant.googleapis.com is 216.58.199.74
Nov 12 15:27:42 dnsmasq[944]: reply embeddedassistant.googleapis.com is 2404:6800:4006:80a::200a
Nov 12 15:27:42 dnsmasq[944]: query[A] AU.info.lgsmartad.com from 192.168.20.50
Nov 12 15:27:42 dnsmasq[944]: forwarded AU.info.lgsmartad.com to 8.8.4.4
Nov 12 15:27:42 dnsmasq[944]: query[AAAA] AU.info.lgsmartad.com from 192.168.20.50
Nov 12 15:27:42 dnsmasq[944]: forwarded AU.info.lgsmartad.com to 8.8.4.4
Nov 12 15:27:42 dnsmasq[944]: reply AU.info.lgsmartad.com is <CNAME>
Nov 12 15:27:42 dnsmasq[944]: reply au-info-lgsmartad-com.aws-prd.net is 13.209.216.135
Nov 12 15:27:42 dnsmasq[944]: reply au-info-lgsmartad-com.aws-prd.net is 13.209.107.66
Nov 12 15:27:42 dnsmasq[944]: reply AU.info.lgsmartad.com is <CNAME>
Nov 12 15:27:42 dnsmasq[944]: reply au-info-lgsmartad-com.aws-prd.net is NODATA-IPv6
Nov 12 15:27:47 dnsmasq[944]: query[A] pi.hole from 192.168.20.81
Nov 12 15:27:47 dnsmasq[944]: /etc/pihole/local.list pi.hole is 192.168.20.254
Nov 12 15:27:50 dnsmasq[944]: query[A] ssl.google-analytics.com from 192.168.20.171
Nov 12 15:27:50 dnsmasq[944]: /etc/pihole/gravity.list ssl.google-analytics.com is 0.0.0.0
Nov 12 15:27:51 dnsmasq[944]: query[A] 3573112786.airable.io from 192.168.20.2
Nov 12 15:27:51 dnsmasq[944]: forwarded 3573112786.airable.io to 8.8.4.4
Nov 12 15:27:51 dnsmasq[944]: reply 3573112786.airable.io is 148.251.121.4
Nov 12 15:27:51 dnsmasq[944]: query[A] ntp.airable.io from 192.168.20.2
Nov 12 15:27:51 dnsmasq[944]: forwarded ntp.airable.io to 8.8.4.4
Nov 12 15:27:51 dnsmasq[944]: reply ntp.airable.io is 45.32.196.44
Nov 12 15:27:51 dnsmasq[944]: query[A] esdk-ffl.spotify.com from 192.168.20.2
Nov 12 15:27:51 dnsmasq[944]: forwarded esdk-ffl.spotify.com to 8.8.4.4
Nov 12 15:27:51 dnsmasq[944]: query[AAAA] esdk-ffl.spotify.com from 192.168.20.2
Nov 12 15:27:51 dnsmasq[944]: forwarded esdk-ffl.spotify.com to 8.8.4.4
Nov 12 15:27:51 dnsmasq[944]: reply esdk-ffl.spotify.com is <CNAME>
Nov 12 15:27:51 dnsmasq[944]: reply weblb-wg.dual-gslb.spotify.com is 104.199.240.211
Nov 12 15:27:51 dnsmasq[944]: reply esdk-ffl.spotify.com is <CNAME>
Nov 12 15:27:51 dnsmasq[944]: reply weblb-wg.dual-gslb.spotify.com is NODATA-IPv6
Nov 12 15:27:51 dnsmasq[944]: query[A] apresolve.spotify.com from 192.168.20.2
Nov 12 15:27:51 dnsmasq[944]: forwarded apresolve.spotify.com to 8.8.4.4
Nov 12 15:27:51 dnsmasq[944]: query[AAAA] apresolve.spotify.com from 192.168.20.2
Nov 12 15:27:51 dnsmasq[944]: forwarded apresolve.spotify.com to 8.8.4.4
Nov 12 15:27:51 dnsmasq[944]: reply apresolve.spotify.com is <CNAME>
Nov 12 15:27:51 dnsmasq[944]: reply weblb-wg.dual-gslb.spotify.com is 104.199.240.211
Nov 12 15:27:51 dnsmasq[944]: reply apresolve.spotify.com is <CNAME>
Nov 12 15:27:51 dnsmasq[944]: reply weblb-wg.dual-gslb.spotify.com is NODATA-IPv6
Nov 12 15:27:52 dnsmasq[944]: query[A] gae2-accesspoint-a-kt9m.ap.spotify.com from 192.168.20.2
Nov 12 15:27:52 dnsmasq[944]: forwarded gae2-accesspoint-a-kt9m.ap.spotify.com to 8.8.4.4
Nov 12 15:27:52 dnsmasq[944]: query[AAAA] gae2-accesspoint-a-kt9m.ap.spotify.com from 192.168.20.2
Nov 12 15:27:52 dnsmasq[944]: forwarded gae2-accesspoint-a-kt9m.ap.spotify.com to 8.8.4.4
Nov 12 15:27:52 dnsmasq[944]: reply gae2-accesspoint-a-kt9m.ap.spotify.com is 104.199.241.212
Nov 12 15:27:52 dnsmasq[944]: reply gae2-accesspoint-a-kt9m.ap.spotify.com is NODATA-IPv6
Nov 12 15:27:53 dnsmasq[944]: query[A] avpro.global.yamaha.com from 192.168.20.2
Nov 12 15:27:53 dnsmasq[944]: forwarded avpro.global.yamaha.com to 8.8.4.4
Nov 12 15:27:53 dnsmasq[944]: query[AAAA] avpro.global.yamaha.com from 192.168.20.2
Nov 12 15:27:53 dnsmasq[944]: forwarded avpro.global.yamaha.com to 8.8.4.4
Nov 12 15:27:53 dnsmasq[944]: reply avpro.global.yamaha.com is <CNAME>
Nov 12 15:27:53 dnsmasq[944]: reply d20rj2my8cseg0.cloudfront.net is 54.192.151.127
Nov 12 15:27:53 dnsmasq[944]: reply d20rj2my8cseg0.cloudfront.net is 54.192.151.11
Nov 12 15:27:53 dnsmasq[944]: reply d20rj2my8cseg0.cloudfront.net is 54.192.151.22
Nov 12 15:27:53 dnsmasq[944]: reply d20rj2my8cseg0.cloudfront.net is 54.192.151.88
Nov 12 15:27:53 dnsmasq[944]: reply avpro.global.yamaha.com is <CNAME>
Nov 12 15:27:53 dnsmasq[944]: reply d20rj2my8cseg0.cloudfront.net is NODATA-IPv6
Nov 12 15:27:54 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:27:54 dnsmasq[944]: forwarded nrdp50-appboot.netflix.com to 8.8.4.4
Nov 12 15:27:54 dnsmasq[944]: query[A] nrdp.nccp.netflix.com from 192.168.20.50
Nov 12 15:27:54 dnsmasq[944]: forwarded nrdp.nccp.netflix.com to 8.8.4.4
Nov 12 15:27:54 dnsmasq[944]: query[A] api-global.netflix.com from 192.168.20.50
Nov 12 15:27:54 dnsmasq[944]: forwarded api-global.netflix.com to 8.8.4.4
Nov 12 15:27:54 dnsmasq[944]: query[A] secure.netflix.com from 192.168.20.50
Nov 12 15:27:54 dnsmasq[944]: forwarded secure.netflix.com to 8.8.4.4
Nov 12 15:27:54 dnsmasq[944]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 15:27:54 dnsmasq[944]: forwarded customerevents.netflix.com to 8.8.4.4
Nov 12 15:27:54 dnsmasq[944]: query[A] ichnaea.netflix.com from 192.168.20.50
Nov 12 15:27:54 dnsmasq[944]: forwarded ichnaea.netflix.com to 8.8.4.4
Nov 12 15:27:54 dnsmasq[944]: query[A] cdn-0.nflximg.com from 192.168.20.50
Nov 12 15:27:54 dnsmasq[944]: forwarded cdn-0.nflximg.com to 8.8.4.4
Nov 12 15:27:54 dnsmasq[944]: reply cdn-0.nflximg.com is <CNAME>
Nov 12 15:27:54 dnsmasq[944]: reply dscg.netflix.com.edgesuite.net is <CNAME>
Nov 12 15:27:54 dnsmasq[944]: reply a743.dscg.akamai.net is 23.205.115.162
Nov 12 15:27:54 dnsmasq[944]: reply a743.dscg.akamai.net is 23.205.115.155
Nov 12 15:27:54 dnsmasq[944]: reply api-global.netflix.com is 154.16.65.88
Nov 12 15:27:54 dnsmasq[944]: reply secure.netflix.com is 154.16.65.88
Nov 12 15:27:54 dnsmasq[944]: reply nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:27:54 dnsmasq[944]: reply appboot.netflix.com is 154.16.65.88
Nov 12 15:27:54 dnsmasq[944]: reply nrdp.nccp.netflix.com is 154.16.65.88
Nov 12 15:27:54 dnsmasq[944]: reply customerevents.netflix.com is <CNAME>
Nov 12 15:27:54 dnsmasq[944]: reply customerevents.geo.netflix.com is <CNAME>
Nov 12 15:27:54 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 12 15:27:54 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 12 15:27:54 dnsmasq[944]: reply customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.netflix.com is <CNAME>
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.geo.netflix.com is <CNAME>
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 34.210.122.29
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 34.213.58.255
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 52.32.129.39
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 35.165.195.95
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 52.10.41.182
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 35.166.48.236
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.68.31.82
Nov 12 15:27:54 dnsmasq[944]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.70.185.157
Nov 12 15:27:56 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:27:56 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:27:56 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:27:56 dnsmasq[944]: query[A] nrdp.nccp.netflix.com from 192.168.20.50
Nov 12 15:27:56 dnsmasq[944]: cached nrdp.nccp.netflix.com is 154.16.65.88
Nov 12 15:27:56 dnsmasq[944]: query[A] api-global.netflix.com from 192.168.20.50
Nov 12 15:27:56 dnsmasq[944]: cached api-global.netflix.com is 154.16.65.88
Nov 12 15:27:56 dnsmasq[944]: query[A] secure.netflix.com from 192.168.20.50
Nov 12 15:27:56 dnsmasq[944]: cached secure.netflix.com is 154.16.65.88
Nov 12 15:27:56 dnsmasq[944]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 15:27:56 dnsmasq[944]: cached customerevents.netflix.com is <CNAME>
Nov 12 15:27:56 dnsmasq[944]: cached customerevents.geo.netflix.com is <CNAME>
Nov 12 15:27:56 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 12 15:27:56 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 12 15:27:56 dnsmasq[944]: cached customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 12 15:27:56 dnsmasq[944]: query[A] ichnaea.netflix.com from 192.168.20.50
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.netflix.com is <CNAME>
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.geo.netflix.com is <CNAME>
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.70.185.157
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.68.31.82
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 35.166.48.236
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.10.41.182
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 35.165.195.95
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.32.129.39
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 34.213.58.255
Nov 12 15:27:56 dnsmasq[944]: cached ichnaea.us-west-2.prodaa.netflix.com is 34.210.122.29
Nov 12 15:27:56 dnsmasq[944]: query[A] cdn-0.nflximg.com from 192.168.20.50
Nov 12 15:27:56 dnsmasq[944]: cached cdn-0.nflximg.com is <CNAME>
Nov 12 15:27:56 dnsmasq[944]: cached dscg.netflix.com.edgesuite.net is <CNAME>
Nov 12 15:27:56 dnsmasq[944]: cached a743.dscg.akamai.net is 23.205.115.155
Nov 12 15:27:56 dnsmasq[944]: cached a743.dscg.akamai.net is 23.205.115.162
Nov 12 15:28:05 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:28:05 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:28:05 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:28:08 dnsmasq[944]: query[A] www.google.com from 192.168.20.50
Nov 12 15:28:08 dnsmasq[944]: forwarded www.google.com to 8.8.4.4
Nov 12 15:28:08 dnsmasq[944]: reply www.google.com is 216.58.196.132
Nov 12 15:28:15 dnsmasq[944]: query[A] www.youtube.com from 192.168.20.50
Nov 12 15:28:15 dnsmasq[944]: forwarded www.youtube.com to 8.8.4.4
Nov 12 15:28:15 dnsmasq[944]: query[AAAA] www.youtube.com from 192.168.20.50
Nov 12 15:28:15 dnsmasq[944]: forwarded www.youtube.com to 8.8.4.4
Nov 12 15:28:15 dnsmasq[944]: reply www.youtube.com is <CNAME>
Nov 12 15:28:15 dnsmasq[944]: reply youtube-ui.l.google.com is 216.58.203.110
Nov 12 15:28:15 dnsmasq[944]: reply youtube-ui.l.google.com is 172.217.167.110
Nov 12 15:28:15 dnsmasq[944]: reply youtube-ui.l.google.com is 216.58.199.78
Nov 12 15:28:15 dnsmasq[944]: reply youtube-ui.l.google.com is 172.217.25.46
Nov 12 15:28:15 dnsmasq[944]: reply youtube-ui.l.google.com is 172.217.25.142
Nov 12 15:28:15 dnsmasq[944]: reply youtube-ui.l.google.com is 216.58.196.142
Nov 12 15:28:15 dnsmasq[944]: reply youtube-ui.l.google.com is 172.217.167.78
Nov 12 15:28:15 dnsmasq[944]: reply www.youtube.com is <CNAME>
Nov 12 15:28:15 dnsmasq[944]: reply youtube-ui.l.google.com is 2404:6800:4006:809::200e
Nov 12 15:28:15 dnsmasq[944]: query[A] s.ytimg.com from 192.168.20.50
Nov 12 15:28:15 dnsmasq[944]: forwarded s.ytimg.com to 8.8.4.4
Nov 12 15:28:15 dnsmasq[944]: query[AAAA] s.ytimg.com from 192.168.20.50
Nov 12 15:28:15 dnsmasq[944]: forwarded s.ytimg.com to 8.8.4.4
Nov 12 15:28:15 dnsmasq[944]: reply s.ytimg.com is 216.58.200.110
Nov 12 15:28:15 dnsmasq[944]: reply s.ytimg.com is 2404:6800:4006:804::200e
Nov 12 15:28:17 dnsmasq[944]: query[A] googleads.g.doubleclick.net from 192.168.20.50
Nov 12 15:28:17 dnsmasq[944]: /etc/pihole/gravity.list googleads.g.doubleclick.net is 0.0.0.0
Nov 12 15:28:17 dnsmasq[944]: query[AAAA] googleads.g.doubleclick.net from 192.168.20.50
Nov 12 15:28:17 dnsmasq[944]: /etc/pihole/gravity.list googleads.g.doubleclick.net is 0.0.0.0
Nov 12 15:28:18 dnsmasq[944]: query[A] www.gstatic.com from 192.168.20.50
Nov 12 15:28:18 dnsmasq[944]: forwarded www.gstatic.com to 8.8.4.4
Nov 12 15:28:18 dnsmasq[944]: query[AAAA] www.gstatic.com from 192.168.20.50
Nov 12 15:28:18 dnsmasq[944]: forwarded www.gstatic.com to 8.8.4.4
Nov 12 15:28:18 dnsmasq[944]: reply www.gstatic.com is 172.217.25.163
Nov 12 15:28:18 dnsmasq[944]: reply www.gstatic.com is 2404:6800:4006:808::2003
Nov 12 15:28:19 dnsmasq[944]: query[A] yt3.ggpht.com from 192.168.20.50
Nov 12 15:28:19 dnsmasq[944]: forwarded yt3.ggpht.com to 8.8.4.4
Nov 12 15:28:19 dnsmasq[944]: query[AAAA] yt3.ggpht.com from 192.168.20.50
Nov 12 15:28:19 dnsmasq[944]: forwarded yt3.ggpht.com to 8.8.4.4
Nov 12 15:28:19 dnsmasq[944]: reply yt3.ggpht.com is 216.58.199.65
Nov 12 15:28:19 dnsmasq[944]: reply yt3.ggpht.com is 2404:6800:4006:808::2001
Nov 12 15:28:19 dnsmasq[944]: query[A] static.doubleclick.net from 192.168.20.50
Nov 12 15:28:19 dnsmasq[944]: /etc/pihole/gravity.list static.doubleclick.net is 0.0.0.0
Nov 12 15:28:19 dnsmasq[944]: query[AAAA] static.doubleclick.net from 192.168.20.50
Nov 12 15:28:19 dnsmasq[944]: /etc/pihole/gravity.list static.doubleclick.net is 0.0.0.0
Nov 12 15:28:20 dnsmasq[944]: query[A] i.ytimg.com from 192.168.20.50
Nov 12 15:28:20 dnsmasq[944]: forwarded i.ytimg.com to 8.8.4.4
Nov 12 15:28:20 dnsmasq[944]: query[AAAA] i.ytimg.com from 192.168.20.50
Nov 12 15:28:20 dnsmasq[944]: forwarded i.ytimg.com to 8.8.4.4
Nov 12 15:28:20 dnsmasq[944]: reply i.ytimg.com is 172.217.167.86
Nov 12 15:28:20 dnsmasq[944]: reply i.ytimg.com is 2404:6800:4006:80b::2016
Nov 12 15:28:20 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:28:20 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:28:20 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:28:31 dnsmasq[944]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:28:31 dnsmasq[944]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:28:31 dnsmasq[944]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:28:49 dnsmasq[944]: query[A] pi.hole from 192.168.20.81
Nov 12 15:28:49 dnsmasq[944]: /etc/pihole/local.list pi.hole is 192.168.20.254

Doubleclick still seems to be blocked even though it's whitelisted...

OK here's something weird. To try and narrow down the issue a little I went to the blocklists page in the console and unchecked ALL the lists, planning to enable them one-by-one to see which one is doing it.

With all blocklists disabled, Netflix STILL does not work! Here's the log, not a single 0.0.0.0 in sight:

Nov 12 15:34:11 dnsmasq[831]: query[A] lgtvonline.lge.com from 192.168.20.50
Nov 12 15:34:11 dnsmasq[831]: cached lgtvonline.lge.com is <CNAME>
Nov 12 15:34:11 dnsmasq[831]: cached lgtvonline-lge-com-gslb.aws-prd.net is 52.78.37.138
Nov 12 15:34:11 dnsmasq[831]: cached lgtvonline-lge-com-gslb.aws-prd.net is 13.124.131.100
Nov 12 15:34:12 dnsmasq[831]: query[A] AU.lgtvsdp.com from 192.168.20.50
Nov 12 15:34:12 dnsmasq[831]: forwarded AU.lgtvsdp.com to 8.8.4.4
Nov 12 15:34:12 dnsmasq[831]: query[AAAA] AU.lgtvsdp.com from 192.168.20.50
Nov 12 15:34:12 dnsmasq[831]: forwarded AU.lgtvsdp.com to 8.8.4.4
Nov 12 15:34:12 dnsmasq[831]: reply AU.lgtvsdp.com is <CNAME>
Nov 12 15:34:12 dnsmasq[831]: reply au-lgtvsdp-com.aws-prd.net is 52.78.42.251
Nov 12 15:34:12 dnsmasq[831]: reply au-lgtvsdp-com.aws-prd.net is 52.78.49.83
Nov 12 15:34:12 dnsmasq[831]: reply au-lgtvsdp-com.aws-prd.net is 52.78.42.243
Nov 12 15:34:12 dnsmasq[831]: reply au-lgtvsdp-com.aws-prd.net is 52.79.165.71
Nov 12 15:34:12 dnsmasq[831]: reply AU.lgtvsdp.com is <CNAME>
Nov 12 15:34:12 dnsmasq[831]: reply au-lgtvsdp-com.aws-prd.net is NODATA-IPv6
Nov 12 15:34:14 dnsmasq[831]: query[A] AU.info.lgsmartad.com from 192.168.20.50
Nov 12 15:34:14 dnsmasq[831]: forwarded AU.info.lgsmartad.com to 8.8.4.4
Nov 12 15:34:14 dnsmasq[831]: query[AAAA] AU.info.lgsmartad.com from 192.168.20.50
Nov 12 15:34:14 dnsmasq[831]: forwarded AU.info.lgsmartad.com to 8.8.4.4
Nov 12 15:34:14 dnsmasq[831]: reply AU.info.lgsmartad.com is <CNAME>
Nov 12 15:34:14 dnsmasq[831]: reply au-info-lgsmartad-com.aws-prd.net is 13.209.216.135
Nov 12 15:34:14 dnsmasq[831]: reply au-info-lgsmartad-com.aws-prd.net is 13.209.107.66
Nov 12 15:34:14 dnsmasq[831]: reply AU.info.lgsmartad.com is <CNAME>
Nov 12 15:34:14 dnsmasq[831]: reply au-info-lgsmartad-com.aws-prd.net is NODATA-IPv6
Nov 12 15:34:15 dnsmasq[831]: query[A] embeddedassistant.googleapis.com from 192.168.20.50
Nov 12 15:34:15 dnsmasq[831]: forwarded embeddedassistant.googleapis.com to 8.8.4.4
Nov 12 15:34:15 dnsmasq[831]: query[AAAA] embeddedassistant.googleapis.com from 192.168.20.50
Nov 12 15:34:15 dnsmasq[831]: forwarded embeddedassistant.googleapis.com to 8.8.4.4
Nov 12 15:34:15 dnsmasq[831]: reply embeddedassistant.googleapis.com is 216.58.199.74
Nov 12 15:34:15 dnsmasq[831]: reply embeddedassistant.googleapis.com is 2404:6800:4006:80a::200a
Nov 12 15:34:24 dnsmasq[831]: query[A] 3573112786.airable.io from 192.168.20.2
Nov 12 15:34:24 dnsmasq[831]: forwarded 3573112786.airable.io to 8.8.4.4
Nov 12 15:34:24 dnsmasq[831]: reply 3573112786.airable.io is 148.251.121.4
Nov 12 15:34:24 dnsmasq[831]: query[A] ntp.airable.io from 192.168.20.2
Nov 12 15:34:24 dnsmasq[831]: forwarded ntp.airable.io to 8.8.4.4
Nov 12 15:34:24 dnsmasq[831]: reply ntp.airable.io is 45.32.196.44
Nov 12 15:34:24 dnsmasq[831]: query[A] esdk-ffl.spotify.com from 192.168.20.2
Nov 12 15:34:24 dnsmasq[831]: forwarded esdk-ffl.spotify.com to 8.8.4.4
Nov 12 15:34:24 dnsmasq[831]: query[AAAA] esdk-ffl.spotify.com from 192.168.20.2
Nov 12 15:34:24 dnsmasq[831]: forwarded esdk-ffl.spotify.com to 8.8.4.4
Nov 12 15:34:24 dnsmasq[831]: reply esdk-ffl.spotify.com is <CNAME>
Nov 12 15:34:24 dnsmasq[831]: reply weblb-wg.dual-gslb.spotify.com is 104.199.240.211
Nov 12 15:34:24 dnsmasq[831]: reply esdk-ffl.spotify.com is <CNAME>
Nov 12 15:34:24 dnsmasq[831]: reply weblb-wg.dual-gslb.spotify.com is NODATA-IPv6
Nov 12 15:34:24 dnsmasq[831]: query[A] apresolve.spotify.com from 192.168.20.2
Nov 12 15:34:24 dnsmasq[831]: forwarded apresolve.spotify.com to 8.8.4.4
Nov 12 15:34:24 dnsmasq[831]: query[AAAA] apresolve.spotify.com from 192.168.20.2
Nov 12 15:34:24 dnsmasq[831]: forwarded apresolve.spotify.com to 8.8.4.4
Nov 12 15:34:24 dnsmasq[831]: reply apresolve.spotify.com is <CNAME>
Nov 12 15:34:24 dnsmasq[831]: reply weblb-wg.dual-gslb.spotify.com is 104.199.240.211
Nov 12 15:34:24 dnsmasq[831]: reply apresolve.spotify.com is <CNAME>
Nov 12 15:34:24 dnsmasq[831]: reply weblb-wg.dual-gslb.spotify.com is NODATA-IPv6
Nov 12 15:34:25 dnsmasq[831]: query[A] gae2-accesspoint-a-qcqj.ap.spotify.com from 192.168.20.2
Nov 12 15:34:25 dnsmasq[831]: forwarded gae2-accesspoint-a-qcqj.ap.spotify.com to 8.8.4.4
Nov 12 15:34:25 dnsmasq[831]: query[AAAA] gae2-accesspoint-a-qcqj.ap.spotify.com from 192.168.20.2
Nov 12 15:34:25 dnsmasq[831]: forwarded gae2-accesspoint-a-qcqj.ap.spotify.com to 8.8.4.4
Nov 12 15:34:25 dnsmasq[831]: reply gae2-accesspoint-a-qcqj.ap.spotify.com is 104.199.240.58
Nov 12 15:34:25 dnsmasq[831]: reply gae2-accesspoint-a-qcqj.ap.spotify.com is NODATA-IPv6
Nov 12 15:34:26 dnsmasq[831]: query[A] avpro.global.yamaha.com from 192.168.20.2
Nov 12 15:34:26 dnsmasq[831]: forwarded avpro.global.yamaha.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: query[AAAA] avpro.global.yamaha.com from 192.168.20.2
Nov 12 15:34:26 dnsmasq[831]: forwarded avpro.global.yamaha.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: reply avpro.global.yamaha.com is <CNAME>
Nov 12 15:34:26 dnsmasq[831]: reply d20rj2my8cseg0.cloudfront.net is 54.192.151.127
Nov 12 15:34:26 dnsmasq[831]: reply d20rj2my8cseg0.cloudfront.net is 54.192.151.11
Nov 12 15:34:26 dnsmasq[831]: reply d20rj2my8cseg0.cloudfront.net is 54.192.151.22
Nov 12 15:34:26 dnsmasq[831]: reply d20rj2my8cseg0.cloudfront.net is 54.192.151.88
Nov 12 15:34:26 dnsmasq[831]: reply avpro.global.yamaha.com is <CNAME>
Nov 12 15:34:26 dnsmasq[831]: reply d20rj2my8cseg0.cloudfront.net is NODATA-IPv6
Nov 12 15:34:26 dnsmasq[831]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:34:26 dnsmasq[831]: forwarded nrdp50-appboot.netflix.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: query[A] nrdp.nccp.netflix.com from 192.168.20.50
Nov 12 15:34:26 dnsmasq[831]: forwarded nrdp.nccp.netflix.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: query[A] api-global.netflix.com from 192.168.20.50
Nov 12 15:34:26 dnsmasq[831]: forwarded api-global.netflix.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: query[A] secure.netflix.com from 192.168.20.50
Nov 12 15:34:26 dnsmasq[831]: forwarded secure.netflix.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 15:34:26 dnsmasq[831]: forwarded customerevents.netflix.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: query[A] ichnaea.netflix.com from 192.168.20.50
Nov 12 15:34:26 dnsmasq[831]: forwarded ichnaea.netflix.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: query[A] cdn-0.nflximg.com from 192.168.20.50
Nov 12 15:34:26 dnsmasq[831]: forwarded cdn-0.nflximg.com to 8.8.4.4
Nov 12 15:34:26 dnsmasq[831]: reply cdn-0.nflximg.com is <CNAME>
Nov 12 15:34:26 dnsmasq[831]: reply dscg.netflix.com.edgesuite.net is <CNAME>
Nov 12 15:34:26 dnsmasq[831]: reply a743.dscg.akamai.net is 23.205.115.162
Nov 12 15:34:26 dnsmasq[831]: reply a743.dscg.akamai.net is 23.205.115.155
Nov 12 15:34:27 dnsmasq[831]: reply nrdp.nccp.netflix.com is 154.16.65.88
Nov 12 15:34:27 dnsmasq[831]: reply api-global.netflix.com is 154.16.65.88
Nov 12 15:34:27 dnsmasq[831]: reply nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:34:27 dnsmasq[831]: reply appboot.netflix.com is 154.16.65.88
Nov 12 15:34:27 dnsmasq[831]: reply secure.netflix.com is 154.16.65.88
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.netflix.com is <CNAME>
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.geo.netflix.com is <CNAME>
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.68.31.82
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.us-west-2.prodaa.netflix.com is 52.89.190.6
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.148.94.175
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.148.89.232
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.149.89.34
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.us-west-2.prodaa.netflix.com is 52.89.185.104
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.201.206.254
Nov 12 15:34:27 dnsmasq[831]: reply ichnaea.us-west-2.prodaa.netflix.com is 54.70.185.157
Nov 12 15:34:27 dnsmasq[831]: reply customerevents.netflix.com is <CNAME>
Nov 12 15:34:27 dnsmasq[831]: reply customerevents.geo.netflix.com is <CNAME>
Nov 12 15:34:27 dnsmasq[831]: reply customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 12 15:34:27 dnsmasq[831]: reply customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 12 15:34:27 dnsmasq[831]: reply customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 12 15:34:28 dnsmasq[831]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:34:28 dnsmasq[831]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:34:28 dnsmasq[831]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:34:28 dnsmasq[831]: query[A] nrdp.nccp.netflix.com from 192.168.20.50
Nov 12 15:34:28 dnsmasq[831]: cached nrdp.nccp.netflix.com is 154.16.65.88
Nov 12 15:34:28 dnsmasq[831]: query[A] api-global.netflix.com from 192.168.20.50
Nov 12 15:34:28 dnsmasq[831]: cached api-global.netflix.com is 154.16.65.88
Nov 12 15:34:28 dnsmasq[831]: query[A] secure.netflix.com from 192.168.20.50
Nov 12 15:34:28 dnsmasq[831]: cached secure.netflix.com is 154.16.65.88
Nov 12 15:34:28 dnsmasq[831]: query[A] customerevents.netflix.com from 192.168.20.50
Nov 12 15:34:28 dnsmasq[831]: cached customerevents.netflix.com is <CNAME>
Nov 12 15:34:28 dnsmasq[831]: cached customerevents.geo.netflix.com is <CNAME>
Nov 12 15:34:28 dnsmasq[831]: cached customerevents.us-west-2.prodaa.netflix.com is 52.24.205.248
Nov 12 15:34:28 dnsmasq[831]: cached customerevents.us-west-2.prodaa.netflix.com is 52.88.3.121
Nov 12 15:34:28 dnsmasq[831]: cached customerevents.us-west-2.prodaa.netflix.com is 52.89.48.213
Nov 12 15:34:28 dnsmasq[831]: query[A] ichnaea.netflix.com from 192.168.20.50
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.netflix.com is <CNAME>
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.geo.netflix.com is <CNAME>
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.70.185.157
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.201.206.254
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.89.185.104
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.149.89.34
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.148.89.232
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.148.94.175
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.us-west-2.prodaa.netflix.com is 52.89.190.6
Nov 12 15:34:28 dnsmasq[831]: cached ichnaea.us-west-2.prodaa.netflix.com is 54.68.31.82
Nov 12 15:34:28 dnsmasq[831]: query[A] cdn-0.nflximg.com from 192.168.20.50
Nov 12 15:34:28 dnsmasq[831]: cached cdn-0.nflximg.com is <CNAME>
Nov 12 15:34:28 dnsmasq[831]: cached dscg.netflix.com.edgesuite.net is <CNAME>
Nov 12 15:34:28 dnsmasq[831]: cached a743.dscg.akamai.net is 23.205.115.155
Nov 12 15:34:28 dnsmasq[831]: cached a743.dscg.akamai.net is 23.205.115.162
Nov 12 15:34:38 dnsmasq[831]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:34:38 dnsmasq[831]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:34:38 dnsmasq[831]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:34:42 dnsmasq[831]: query[A] www.google.com from 192.168.20.50
Nov 12 15:34:42 dnsmasq[831]: forwarded www.google.com to 8.8.4.4
Nov 12 15:34:42 dnsmasq[831]: reply www.google.com is 216.58.196.132
Nov 12 15:34:49 dnsmasq[831]: query[A] www.youtube.com from 192.168.20.50
Nov 12 15:34:49 dnsmasq[831]: forwarded www.youtube.com to 8.8.4.4
Nov 12 15:34:49 dnsmasq[831]: query[AAAA] www.youtube.com from 192.168.20.50
Nov 12 15:34:49 dnsmasq[831]: forwarded www.youtube.com to 8.8.4.4
Nov 12 15:34:49 dnsmasq[831]: reply www.youtube.com is <CNAME>
Nov 12 15:34:49 dnsmasq[831]: reply youtube-ui.l.google.com is 216.58.203.110
Nov 12 15:34:49 dnsmasq[831]: reply youtube-ui.l.google.com is 172.217.167.110
Nov 12 15:34:49 dnsmasq[831]: reply youtube-ui.l.google.com is 216.58.199.78
Nov 12 15:34:49 dnsmasq[831]: reply youtube-ui.l.google.com is 172.217.25.46
Nov 12 15:34:49 dnsmasq[831]: reply youtube-ui.l.google.com is 172.217.25.142
Nov 12 15:34:49 dnsmasq[831]: reply youtube-ui.l.google.com is 216.58.196.142
Nov 12 15:34:49 dnsmasq[831]: reply youtube-ui.l.google.com is 172.217.167.78
Nov 12 15:34:49 dnsmasq[831]: reply www.youtube.com is <CNAME>
Nov 12 15:34:49 dnsmasq[831]: reply youtube-ui.l.google.com is 2404:6800:4006:809::200e
Nov 12 15:34:49 dnsmasq[831]: query[A] s.ytimg.com from 192.168.20.50
Nov 12 15:34:49 dnsmasq[831]: forwarded s.ytimg.com to 8.8.4.4
Nov 12 15:34:49 dnsmasq[831]: query[AAAA] s.ytimg.com from 192.168.20.50
Nov 12 15:34:49 dnsmasq[831]: forwarded s.ytimg.com to 8.8.4.4
Nov 12 15:34:49 dnsmasq[831]: reply s.ytimg.com is 216.58.200.110
Nov 12 15:34:49 dnsmasq[831]: reply s.ytimg.com is 2404:6800:4006:804::200e
Nov 12 15:34:51 dnsmasq[831]: query[A] googleads.g.doubleclick.net from 192.168.20.50
Nov 12 15:34:51 dnsmasq[831]: forwarded googleads.g.doubleclick.net to 8.8.4.4
Nov 12 15:34:51 dnsmasq[831]: query[AAAA] googleads.g.doubleclick.net from 192.168.20.50
Nov 12 15:34:51 dnsmasq[831]: forwarded googleads.g.doubleclick.net to 8.8.4.4
Nov 12 15:34:51 dnsmasq[831]: reply googleads.g.doubleclick.net is <CNAME>
Nov 12 15:34:51 dnsmasq[831]: reply pagead46.l.doubleclick.net is 172.217.167.98
Nov 12 15:34:51 dnsmasq[831]: reply googleads.g.doubleclick.net is <CNAME>
Nov 12 15:34:51 dnsmasq[831]: reply pagead46.l.doubleclick.net is 2404:6800:4006:807::2002
Nov 12 15:34:51 dnsmasq[831]: query[A] www.gstatic.com from 192.168.20.50
Nov 12 15:34:51 dnsmasq[831]: forwarded www.gstatic.com to 8.8.4.4
Nov 12 15:34:51 dnsmasq[831]: query[AAAA] www.gstatic.com from 192.168.20.50
Nov 12 15:34:51 dnsmasq[831]: forwarded www.gstatic.com to 8.8.4.4
Nov 12 15:34:51 dnsmasq[831]: reply www.gstatic.com is 172.217.25.163
Nov 12 15:34:51 dnsmasq[831]: reply www.gstatic.com is 2404:6800:4006:808::2003
Nov 12 15:34:52 dnsmasq[831]: query[A] yt3.ggpht.com from 192.168.20.50
Nov 12 15:34:52 dnsmasq[831]: forwarded yt3.ggpht.com to 8.8.4.4
Nov 12 15:34:52 dnsmasq[831]: query[AAAA] yt3.ggpht.com from 192.168.20.50
Nov 12 15:34:52 dnsmasq[831]: forwarded yt3.ggpht.com to 8.8.4.4
Nov 12 15:34:52 dnsmasq[831]: reply yt3.ggpht.com is 216.58.199.65
Nov 12 15:34:52 dnsmasq[831]: reply yt3.ggpht.com is 2404:6800:4006:808::2001
Nov 12 15:34:52 dnsmasq[831]: query[A] static.doubleclick.net from 192.168.20.50
Nov 12 15:34:52 dnsmasq[831]: forwarded static.doubleclick.net to 8.8.4.4
Nov 12 15:34:52 dnsmasq[831]: query[AAAA] static.doubleclick.net from 192.168.20.50
Nov 12 15:34:52 dnsmasq[831]: forwarded static.doubleclick.net to 8.8.4.4
Nov 12 15:34:52 dnsmasq[831]: reply static.doubleclick.net is <CNAME>
Nov 12 15:34:52 dnsmasq[831]: reply static-doubleclick-net.l.google.com is 172.217.167.70
Nov 12 15:34:53 dnsmasq[831]: reply static.doubleclick.net is <CNAME>
Nov 12 15:34:53 dnsmasq[831]: reply static-doubleclick-net.l.google.com is 2404:6800:4006:80a::2006
Nov 12 15:34:53 dnsmasq[831]: query[A] i.ytimg.com from 192.168.20.50
Nov 12 15:34:53 dnsmasq[831]: forwarded i.ytimg.com to 8.8.4.4
Nov 12 15:34:53 dnsmasq[831]: query[AAAA] i.ytimg.com from 192.168.20.50
Nov 12 15:34:53 dnsmasq[831]: forwarded i.ytimg.com to 8.8.4.4
Nov 12 15:34:53 dnsmasq[831]: reply i.ytimg.com is 172.217.167.86
Nov 12 15:34:53 dnsmasq[831]: reply i.ytimg.com is 2404:6800:4006:80b::2016
Nov 12 15:35:00 dnsmasq[831]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:35:00 dnsmasq[831]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:35:00 dnsmasq[831]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:35:11 dnsmasq[831]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:35:11 dnsmasq[831]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:35:11 dnsmasq[831]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:35:13 dnsmasq[831]: query[A] pi.hole from 192.168.20.81
Nov 12 15:35:13 dnsmasq[831]: /etc/pihole/local.list pi.hole is 192.168.20.254
Nov 12 15:35:51 dnsmasq[831]: query[A] v10.events.data.microsoft.com from 192.168.20.81
Nov 12 15:35:51 dnsmasq[831]: forwarded v10.events.data.microsoft.com to 8.8.4.4
Nov 12 15:35:51 dnsmasq[831]: reply v10.events.data.microsoft.com is <CNAME>
Nov 12 15:35:51 dnsmasq[831]: reply v10.events.data.microsoft.com.aria.akadns.net is <CNAME>
Nov 12 15:35:51 dnsmasq[831]: reply onecollector.cloudapp.aria.akadns.net is 40.122.160.14
Nov 12 15:35:52 dnsmasq[831]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:35:52 dnsmasq[831]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:35:52 dnsmasq[831]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:36:03 dnsmasq[831]: query[A] nrdp50-appboot.netflix.com from 192.168.20.50
Nov 12 15:36:03 dnsmasq[831]: cached nrdp50-appboot.netflix.com is <CNAME>
Nov 12 15:36:03 dnsmasq[831]: cached appboot.netflix.com is 154.16.65.88
Nov 12 15:36:18 dnsmasq[831]: query[A] pi.hole from 192.168.20.81
Nov 12 15:36:18 dnsmasq[831]: /etc/pihole/local.list pi.hole is 192.168.20.254

WTF? How can the Pihole be breaking Netflix on a single device, if it isn't doing anything?

Bump.. I still haven't found a solution other than to give the TV a different DNS address..

I am having the same exact issue but not only with Netflix but Disney Plus and Hulu. Main difference is every Netflix app on my network will not launch unless pointed to a outside DNS server. 4 Rokus, PS4, TVs and Bluray players. Doesn't matter if Pihole is enabled or not. I have also disabled all block lists just like you but still won't launch. Only way around it for me so far is with Cascading Routers. Have the pihole on the forward facing router and all devices on the back router. Set the back router DNS server to the IP of the forward router.

That sounds like a pretty different issue. My issue is that my TV, and ONLY my TV, will not connect to Netflix servers while using the PiHole as its DNS.

I have the same error code as you and just like you I have disabled pihole, and removed all blocklists. Netflix still wont launch but like I said the main difference is all of my devices are having issues.

The cascading routers work with all the back traffic going into the front router with pihole. Do you happen to be using an Asus router with Merlin?

Hm, interesting. I have an Asus RT-86U with Merlin, there was a Merlin update recently too. The Asus provides ethernet/wifi to the house, and gets its WAN from the router that was supplied by my telco.

Have you made any progress on your issue? Mine was "solved" by telling the TV to use Google's DNS but that isn't an acceptable long-term solution :confused:

Your tests and logs go to prove that Pi-hole's filtering is not causing this issue.

But somehow, Netflix doesn't like talking to a DNS server that is not public, with the router being the only exception (as demonstrated by @JonnyB's router cascade). This is probably due to Netflix seeming to be excruciatingly rigorous at shutting out access via VPN or through a proxy.

Now, I don't have a Netflix account, an Asus Router or an LG TV, so the following paragraphs are kind of a blind shot attempt to apply a mildly related solution to a different problem. You have to decide whether it's worth a try.

When trying to fence my TV from leaving my home network in ways I didn't approve of, I ultimately resorted to putting it into a separate WLAN raised by a separate Zero W where all DNS traffic was forced to Pi-hole, regardless which DNS server my TV was using. To that end, I had to alter the Zero's prerouting table.

As far as I am aware of, Asus routers allow ssh login, so you could give that approach a try by extending your router's iptables. I won't post them, as there is an easier way in your case: You happen to run your router with Merlin, so you can set up DNS Filters.
From the UI, find LAN | DNS Filter, switch "Enable DNS-based Filtering" to ON, and select "Router" from Global Filter Mode. Assuming you have defined Pi-hole as local DNS server via the DHCP settings, leave the custom entries blank.
(I am assuming Merlin's documentation as well as a corresponding screenshot are up to date)

Both approaches - iptables via ssh or DNS filters via UI - should produce the same result:
They force any(*) DNS traffic on your network to reroute through Pi-hole.
So when your TV requests to resolve api-global.netflix.com through Google's 8.8.8.8, your router will show that request friendly but firmly to your Pi-hole instead, while your TV thinks it is still talking to Google.

I normally try out my suggestions, but obviously can't do that here - so I can just hope this helps somehow :wink:

If you were already aware of those options, it would still be of interest if you could confirm they are not alleviating your problem.


(*): In fact, only the UI option might do that, as there might be other DNS ports (e.g. port 853 for DoT) in use as well that my iptables statements do not account for.

Do mind that a lot of stock Asus firmware's dont behave nice when using its internal DHCP service:

@kameramandan So some else we have in common both of us are using 86u with merlin so this is getting interesting. I ended up buying another 86u and kept the cascading router setup.

@Bucking_Horn This being a Holiday Weekend in the US I am unable to test any of those yet. If the internet goes down by my own doing (even for 2 mins) I wont hear the end of it

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.