Pi-Hole stops sending DNS replies every evening

recursive · December 29, 2020, 11:03pm

Expected Behaviour:

Pi-hole works 24/7.

Raspberry Pi OS Lite on Raspberry Pi 3 Model B Plus Rev 1.3 with a dedicated power supply (5V, 3A) and directly connected to the router (Fritz!Box 7520 running Fritz!OS 7.21) via a short patch cable
Operating System: Raspbian GNU/Linux 10 (buster)
Kernel: Linux 5.4.79-v7+
Architecture: arm
Pi-hole v5.2.2, Web Interface v5.2.2, FTL v5.3.4

Actual Behaviour:

Pi-Hole stops replying to DNS-queries at the end of the day.

Debug Token:

https://tricorder.pi-hole.net/idx8vyns88

Though this log was created after I had already restarted the DNS server (sry!). If necessary I can provide a log during the outage tomorrow evening.
I've tried everything I was able to find regarding similar issues on the web.

The pi-hole originally had the fritzbox as upstream DNS-server which forwards to 185.95.218.42 and 5.9.164.112. I've changed it to the fritzbox having the pi-hole as upstream DNS-server forwarding to 185.95.218.42 and 46.182.19.48. (no improvement)
It uses log2ram to be gentle to the sd-card and the NTP-server ist set to ptbtime1.ptb.de.
IPv6 is disabled in the router and no IPv6-DNS-servers were added to either router or pihole.

During the outage there are simply no replies in the pihole.log. For example from following query:

Dec 29 23:53:15 dnsmasq[18045]: query[A] encrypted-tbn0.gstatic.com from 192.168.178.2
Dec 29 23:53:15 dnsmasq[18045]: forwarded encrypted-tbn0.gstatic.com to 46.182.19.48
Dec 29 23:53:15 dnsmasq[18045]: reply encrypted-tbn0.gstatic.com is 142.250.74.206

The last line would be missing.

I've also ran following commands on the pi via ssh during the outage (both ssh and pinging the pi are still working):

pi@raspberrypi:~ $ sudo systemctl status dnsmasq
Unit dnsmasq.service could not be found.

pi@raspberrypi:~ $ sudo systemctl status pihole-FTL.service
● pihole-FTL.service - LSB: pihole-FTL daemon
   Loaded: loaded (/etc/init.d/pihole-FTL; generated)
   Active: active (exited) since Tue 2020-12-29 12:35:19 CET; 10h ago
     Docs: man:systemd-sysv-generator(8)
  Process: 8916 ExecStart=/etc/init.d/pihole-FTL start (code=exited, status=0/SU

Dec 29 12:35:19 raspberrypi systemd[1]: Starting LSB: pihole-FTL daemon...
Dec 29 12:35:19 raspberrypi pihole-FTL[8916]: Not running
Dec 29 12:35:19 raspberrypi su[8934]: (to pihole) root on none
Dec 29 12:35:19 raspberrypi su[8934]: pam_unix(su:session): session opened for u
Dec 29 12:35:19 raspberrypi pihole-FTL[8916]: FTL started!
Dec 29 12:35:19 raspberrypi su[8934]: pam_unix(su:session): session closed for u
Dec 29 12:35:19 raspberrypi systemd[1]: Started LSB: pihole-FTL daemon.

pi@raspberrypi:~ $ dig google.com

; <<>> DiG 9.11.5-P4-5.1+deb10u2-Raspbian <<>> google.com
;; global options: +cmd
;; connection timed out; no servers could be reached

Update 1:

I didn't even have to wait until the evening, it just happened again, not even 11 hours after the last time. I tried creating a debug log via the web interface, but that only caused the web interface to stop responding and no log was created. Running pihole -d via ssh didn't finish either after 5 minutes, but it gave me following output:

This process collects information from your Pi-hole, and optionally uploads it to a unique and random directory on tricorder.pi-hole.net.

The intent of this script is to allow users to self-diagnose their installations.  This is accomplished by running tests against our software and providing the user with links to FAQ articles when a problem is detected.  Since we are a small team and Pi-hole has been growing steadily, it is our hope that this will help us spend more time on development.

NOTE: All log files auto-delete after 48 hours and ONLY the Pi-hole developers can access your data via the given token. We have taken these extra steps to secure your data and will work to further reduce any personal information gathered.

*** [ INITIALIZING ]
[i] 2020-12-30:09:57:28 debug log has been initialized.

*** [ INITIALIZING ] Sourcing setup variables
[i] Sourcing /etc/pihole/setupVars.conf...

*** [ DIAGNOSING ]: Core version
[i] Core: v5.2.2 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249)
[i] Remotes: origin     https://github.com/pi-hole/pi-hole.git (fetch)
             origin     https://github.com/pi-hole/pi-hole.git (push)
[i] Branch: master
[i] Commit: v5.2.2-0-g41bdb74

*** [ DIAGNOSING ]: Web version
[i] Web: v5.2.2 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249)
[i] Remotes: origin     https://github.com/pi-hole/AdminLTE.git (fetch)
             origin     https://github.com/pi-hole/AdminLTE.git (push)
[i] Branch: master
[i] Commit: v5.2.2-0-g780dff0

*** [ DIAGNOSING ]: FTL version
[✓] FTL: v5.3.4

*** [ DIAGNOSING ]: lighttpd version
[i] 1.4.53

*** [ DIAGNOSING ]: php version
[i] 7.3.19

*** [ DIAGNOSING ]: Operating system
[i] dig return code:  10
[i] dig response:  dig: couldn't get address for 'ns1.pi-hole.net': failure
[✗] Distro:  Raspbian
[✗] Error: Raspbian is not a supported distro (https://docs.pi-hole.net/main/prerequisites/)

*** [ DIAGNOSING ]: SELinux
[i] SELinux not detected

*** [ DIAGNOSING ]: FirewallD
[i] Firewalld service inactive

*** [ DIAGNOSING ]: Processor
[✓] armv7l

*** [ DIAGNOSING ]: Networking
[✓] IPv4 address(es) bound to the eth0 interface:
   192.168.178.10/24 matches the IP found in /etc/pihole/setupVars.conf

[✓] IPv6 address(es) bound to the eth0 interface:
   fe80::390d:14fe:7514:cbb4 does not match the IP found in /etc/pihole/setupVars.conf (https://discourse.pi-hole.net/t/use-ipv6-ula-addresses-for-pi-hole/2127)

   ^ Please note that you may have more than one IP address listed.
   As long as one of them is green, and it matches what is in /etc/pihole/setupVars.conf, there is no need for concern.

   The link to the FAQ is for an issue that sometimes occurs when the IPv6 address changes, which is why we check for it.

[i] Default IPv4 gateway: 192.168.178.2
   * Pinging 192.168.178.2...
[✓] Gateway responded.

*** [ DIAGNOSING ]: Ports in use
*:22 sshd (IPv4)
*:22 sshd (IPv6)
[80] is in use by lighttpd
[80] is in use by lighttpd
[53] is in use by pihole-FTL
[53] is in use by pihole-FTL
[4711] is in use by pihole-FTL
[4711] is in use by pihole-FTL

*** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain
[✓] js.ptengine.cn is 0.0.0.0 via localhost (127.0.0.1)
[✓] js.ptengine.cn is 0.0.0.0 via Pi-hole (192.168.178.10)
[✓] doubleclick.com is 216.58.207.174 via a remote, public DNS server (8.8.8.8)

*** [ DIAGNOSING ]: Discovering active DHCP servers (takes 10 seconds)
   Scanning all your interfaces for DHCP servers
   Timeout: 10 seconds

   * Received 548 bytes from eth0:192.168.178.2
     Offered IP address: 192.168.178.10
     Server IP address: 192.168.178.2
     Relay-agent IP address: N/A
     BOOTP server: (empty)
     BOOTP file: (empty)
     DHCP options:
      Message type: DHCPOFFER (2)
      server-identifier: 192.168.178.2
      lease-time: 864000 ( 10d )
      renewal-time: 432000 ( 5d )
      rebinding-time: 756000 ( 8d 18h )
      netmask: 255.255.255.0
      router: 192.168.178.2
      dns-server: 192.168.178.2
      domain-name: "fritz.box"
      broadcast: 192.168.178.255
      ntp-server: 192.168.178.2
      Unknown option 158 with length 5
      --- end of options ---

   DHCP packets received on interface lo: 0
   DHCP packets received on interface eth0: 1

*** [ DIAGNOSING ]: Pi-hole processes
[✓] lighttpd daemon is active
[✓] pihole-FTL daemon is active

*** [ DIAGNOSING ]: Pi-hole-FTL full status
   ● pihole-FTL.service - LSB: pihole-FTL daemon
   Loaded: loaded (/etc/init.d/pihole-FTL; generated)
   Active: active (exited) since Tue 2020-12-29 23:32:14 CET; 10h ago
     Docs: man:systemd-sysv-generator(8)
  Process: 18023 ExecStart=/etc/init.d/pihole-FTL start (code=exited, status=0/SUCCESS)

Dec 29 23:32:14 raspberrypi systemd[1]: Starting LSB: pihole-FTL daemon...
Dec 29 23:32:14 raspberrypi pihole-FTL[18023]: Not running
Dec 29 23:32:14 raspberrypi su[18041]: (to pihole) root on none
Dec 29 23:32:14 raspberrypi su[18041]: pam_unix(su:session): session opened for user pihole by (uid=0)
Dec 29 23:32:14 raspberrypi pihole-FTL[18023]: FTL started!
Dec 29 23:32:14 raspberrypi su[18041]: pam_unix(su:session): session closed for user pihole
Dec 29 23:32:14 raspberrypi systemd[1]: Started LSB: pihole-FTL daemon.

*** [ DIAGNOSING ]: Setup variables
    BLOCKING_ENABLED=true
    ADMIN_EMAIL=
    WEBUIBOXEDLAYOUT=boxed
    WEBTHEME=default-dark
    PIHOLE_INTERFACE=eth0
    IPV4_ADDRESS=192.168.178.10/24
    IPV6_ADDRESS=
    QUERY_LOGGING=true
    INSTALL_WEB_SERVER=true
    INSTALL_WEB_INTERFACE=true
    LIGHTTPD_ENABLED=true
    CACHE_SIZE=10000
    DNSMASQ_LISTENING=single
    PIHOLE_DNS_1=185.95.218.42
    PIHOLE_DNS_2=46.182.19.48
    DNS_FQDN_REQUIRED=true
    DNS_BOGUS_PRIV=true
    DNSSEC=false
    REV_SERVER=false

*** [ DIAGNOSING ]: Dashboard and block page
^C
pi@raspberrypi:~ $ sudo reboot

Weirdly enough the pi-hole started sending DNS replies again by itself, a few minutes after it had stopped, without me restarting the DNS resolver this time (I was still waiting for the debug log to be generated, to no avail).
And I've noticed that the number of queries rises significantly with the outage (both during yesterday evenings outage and just now), which I can't explain:

recursive · December 30, 2020, 11:41am

Update 2:

This is getting annoying! It just happened again, but it didn't fix itsself this time and neither did flushing the network table, restarting the DNS resolver, rebooting the pi or repairing pihole (pihole -r). However it did finish the pihole -d this time, after I had flushed the logs and network table and restarted the DNS resolver, but the issue persisted:

This process collects information from your Pi-hole, and optionally uploads it t                                                      o a unique and random directory on tricorder.pi-hole.net.

The intent of this script is to allow users to self-diagnose their installations                                                      .  This is accomplished by running tests against our software and providing the                                                       user with links to FAQ articles when a problem is detected.  Since we are a smal                                                      l team and Pi-hole has been growing steadily, it is our hope that this will help                                                       us spend more time on development.

NOTE: All log files auto-delete after 48 hours and ONLY the Pi-hole developers c                                                      an access your data via the given token. We have taken these extra steps to secu                                                      re your data and will work to further reduce any personal information gathered.

*** [ INITIALIZING ]
[i] 2020-12-30:11:49:10 debug log has been initialized.

*** [ INITIALIZING ] Sourcing setup variables
[i] Sourcing /etc/pihole/setupVars.conf...

*** [ DIAGNOSING ]: Core version
[i] Core: v5.2.2 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249)
[i] Remotes: origin     https://github.com/pi-hole/pi-hole.git (fetch)
             origin     https://github.com/pi-hole/pi-hole.git (push)
[i] Branch: master
[i] Commit: v5.2.2-0-g41bdb74

*** [ DIAGNOSING ]: Web version
[i] Web: v5.2.2 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249)
[i] Remotes: origin     https://github.com/pi-hole/AdminLTE.git (fetch)
             origin     https://github.com/pi-hole/AdminLTE.git (push)
[i] Branch: master
[i] Commit: v5.2.2-0-g780dff0

*** [ DIAGNOSING ]: FTL version
[✓] FTL: v5.3.4

*** [ DIAGNOSING ]: lighttpd version
[i] 1.4.53

*** [ DIAGNOSING ]: php version
[i] 7.3.19

*** [ DIAGNOSING ]: Operating system
[i] dig return code:  10
[i] dig response:  dig: couldn't get address for 'ns1.pi-hole.net': failure
[✗] Distro:  Raspbian
[✗] Error: Raspbian is not a supported distro (https://docs.pi-hole.net/main/prerequisites/)

*** [ DIAGNOSING ]: SELinux
[i] SELinux not detected

*** [ DIAGNOSING ]: FirewallD
[i] Firewalld service inactive

*** [ DIAGNOSING ]: Processor
[✓] armv7l

*** [ DIAGNOSING ]: Networking
[✓] IPv4 address(es) bound to the eth0 interface:
   192.168.178.10/24 matches the IP found in /etc/pihole/setupVars.conf

[✓] IPv6 address(es) bound to the eth0 interface:
   fe80::390d:14fe:7514:cbb4 does not match the IP found in /etc/pihole/setupVars.conf (https://discourse.pi-hole.net/t/use-ipv6-ula-addresses-for-pi-hole/2127)

   ^ Please note that you may have more than one IP address listed.
   As long as one of them is green, and it matches what is in /etc/pihole/setupVars.conf, there is no need for concern.

   The link to the FAQ is for an issue that sometimes occurs when the IPv6 address changes, which is why we check for it.

[i] Default IPv4 gateway: 192.168.178.2
   * Pinging 192.168.178.2...
[✓] Gateway responded.

*** [ DIAGNOSING ]: Ports in use
*:22 sshd (IPv4)
*:22 sshd (IPv6)
[80] is in use by lighttpd
[80] is in use by lighttpd
[53] is in use by pihole-FTL
[53] is in use by pihole-FTL
[4711] is in use by pihole-FTL
[4711] is in use by pihole-FTL

*** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain
[✓] fadedsnow.com is 0.0.0.0 via localhost (127.0.0.1)
[✓] fadedsnow.com is 0.0.0.0 via Pi-hole (192.168.178.10)
[✓] doubleclick.com is 216.58.207.174 via a remote, public DNS server (8.8.8.8)

*** [ DIAGNOSING ]: Discovering active DHCP servers (takes 10 seconds)
   Scanning all your interfaces for DHCP servers
   Timeout: 10 seconds

   * Received 548 bytes from eth0:192.168.178.2
     Offered IP address: 192.168.178.10
     Server IP address: 192.168.178.2
     Relay-agent IP address: N/A
     BOOTP server: (empty)
     BOOTP file: (empty)
     DHCP options:
      Message type: DHCPOFFER (2)
      server-identifier: 192.168.178.2
      lease-time: 864000 ( 10d )
      renewal-time: 432000 ( 5d )
      rebinding-time: 756000 ( 8d 18h )
      netmask: 255.255.255.0
      router: 192.168.178.2
      dns-server: 192.168.178.2
      domain-name: "fritz.box"
      broadcast: 192.168.178.255
      ntp-server: 192.168.178.2
      Unknown option 158 with length 5
      --- end of options ---

   DHCP packets received on interface eth0: 1
   DHCP packets received on interface lo: 0

*** [ DIAGNOSING ]: Pi-hole processes
[✓] lighttpd daemon is active
[✓] pihole-FTL daemon is active

*** [ DIAGNOSING ]: Pi-hole-FTL full status
   ● pihole-FTL.service - LSB: pihole-FTL daemon
   Loaded: loaded (/etc/init.d/pihole-FTL; generated)
   Active: active (exited) since Wed 2020-12-30 11:48:23 CET; 1min 18s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 4778 ExecStart=/etc/init.d/pihole-FTL start (code=exited, status=0/SUCCESS)

Dec 30 11:48:23 raspberrypi systemd[1]: Starting LSB: pihole-FTL daemon...
Dec 30 11:48:23 raspberrypi pihole-FTL[4778]: Not running
Dec 30 11:48:23 raspberrypi su[4796]: (to pihole) root on none
Dec 30 11:48:23 raspberrypi su[4796]: pam_unix(su:session): session opened for user pihole by (uid=0)
Dec 30 11:48:23 raspberrypi pihole-FTL[4778]: FTL started!
Dec 30 11:48:23 raspberrypi su[4796]: pam_unix(su:session): session closed for user pihole
Dec 30 11:48:23 raspberrypi systemd[1]: Started LSB: pihole-FTL daemon.

*** [ DIAGNOSING ]: Setup variables
    BLOCKING_ENABLED=true
    ADMIN_EMAIL=
    WEBUIBOXEDLAYOUT=boxed
    WEBTHEME=default-dark
    DNSMASQ_LISTENING=single
    DNS_FQDN_REQUIRED=true
    DNS_BOGUS_PRIV=true
    DNSSEC=false
    REV_SERVER=false
    PIHOLE_INTERFACE=eth0
    IPV4_ADDRESS=192.168.178.10/24
    IPV6_ADDRESS=
    PIHOLE_DNS_1=185.95.218.42
    PIHOLE_DNS_2=46.182.19.48
    QUERY_LOGGING=true
    INSTALL_WEB_SERVER=true
    INSTALL_WEB_INTERFACE=true
    LIGHTTPD_ENABLED=true
    CACHE_SIZE=10000

*** [ DIAGNOSING ]: Dashboard and block page
[✗] Block page X-Header: X-Header does not match or could not be retrieved.
HTTP/1.1 200 OK
Content-type: text/html; charset=UTF-8
Expires: Wed, 30 Dec 2020 10:49:42 GMT
Cache-Control: max-age=0
Date: Wed, 30 Dec 2020 10:49:42 GMT
Server: lighttpd/1.4.53

[✓] Web interface X-Header: X-Pi-hole: The Pi-hole Web interface is working!

*** [ DIAGNOSING ]: Gravity List and Database
-rw-rw-r-- 1 pihole pihole 21041152 Dec 30 11:23 /etc/pihole/gravity.db

*** [ DIAGNOSING ]: Info table
   property              value
   --------------------  ----------------------------------------
   version               13
   updated               1609321268
   gravity_count         271950
   Last gravity run finished at: Wed 30 Dec 10:41:08 CET 2020

   ----- First 10 Gravity Domains -----
   a.ads1.msn.com
   a.ads2.msads.net
   a.ads2.msn.com
   a.rad.msn.com
   ac3.msn.com
   activity.windows.com
   adnexus.net
   adnxs.com
   ads.msn.com
   ads1.msads.net


*** [ DIAGNOSING ]: Groups
   id    enabled  name                                                date_added           date_modified        description           
   ----  -------  --------------------------------------------------  -------------------  -------------------  --------------------------------------------------
   0           1  Default                                             2020-12-26 22:08:00  2020-12-26 22:08:00                        

*** [ DIAGNOSING ]: Domainlist (0/1 = exact white-/blacklist, 2/3 = regex white-/blacklist)
   id    type  enabled  group_ids     domain                                                                                                date_added           date_modified        comment
   ----  ----  -------  ------------  ----------------------------------------------------------------------------------------------------  -------------------  -------------------  --------------------------------------------------
   2      1          1  0             www.ecdinterface.philips.com                                                                          2020-12-20 13:37:21  2020-12-30 00:25:00
   4       2         1  0             (\.|^)redd\.it$                                                                                       2020-12-20 14:53:01  2020-12-26 22:08:00
   6       2         1  0             (\.|^)reddit\.com$                                                                                    2020-12-20 14:56:27  2020-12-26 22:08:00
   7       2         1  0             (\.|^)redditstatic\.com$                                                                              2020-12-20 15:03:55  2020-12-26 22:08:00
   8       2         1  0             (\.|^)redditmedia\.com$                                                                               2020-12-20 15:05:21  2020-12-26 22:08:00
   9       2         1  0             (\.|^)twitter\.com$                                                                                   2020-12-20 15:35:21  2020-12-26 22:08:00
   10      2         1  0             (\.|^)twimg\.com$                                                                                     2020-12-20 15:47:18  2020-12-26 22:08:00
   12      2         1  0             (\.|^)connatix\.com$                                                                                  2020-12-27 11:10:49  2020-12-27 11:10:49
   13     1          1  0             diagnostics.meethue.com                                                                               2020-12-30 00:24:55  2020-12-30 00:24:55

*** [ DIAGNOSING ]: Clients

*** [ DIAGNOSING ]: Adlists
   id    enabled  group_ids     address                                                                                               date_added           date_modified        comment
   ----  -------  ------------  ----------------------------------------------------------------------------------------------------  -------------------  -------------------  --------------------------------------------------
   3           1  0             https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt               2020-12-20 09:17:38  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   4           1  0             https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-social/hosts           2020-12-20 09:19:50  2020-12-26 22:07:58  Steven Black
   34          1  0             https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts_without_controversies.t  2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   35          1  0             https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts                         2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   36          1  0             https://v.firebog.net/hosts/static/w3kbl.txt                                                          2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   37          1  0             https://adaway.org/hosts.txt                                                                          2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   38          1  0             https://v.firebog.net/hosts/AdguardDNS.txt                                                            2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   39          1  0             https://v.firebog.net/hosts/Admiral.txt                                                               2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   40          1  0             https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt                            2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   41          1  0             https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt                                            2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   42          1  0             https://v.firebog.net/hosts/Easylist.txt                                                              2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   43          1  0             https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&amp;showintro=0&amp;mimetype=plaintex  2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   44          1  0             https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts                      2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   45          1  0             https://raw.githubusercontent.com/bigdargon/hostsVN/master/hosts                                      2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   46          1  0             https://v.firebog.net/hosts/Easyprivacy.txt                                                           2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   47          1  0             https://v.firebog.net/hosts/Prigent-Ads.txt                                                           2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   48          1  0             https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-blocklist.txt                        2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   49          1  0             https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts                       2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   51          1  0             https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt                                            2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   52          1  0             https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%  2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   53          1  0             https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt                                     2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   54          1  0             https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt                                  2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   56          1  0             https://v.firebog.net/hosts/Prigent-Crypto.txt                                                        2020-12-20 09:26:35  2020-12-26 22:07:58  https://v.firebog.net/hosts/lists.php
   57          1  0             https://mirror.cedia.org.ec/malwaredomains/immortal_domains.txt                                       2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   58          1  0             https://www.malwaredomainlist.com/hostslist/hosts.txt                                                 2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   59          1  0             https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/M  2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   60          1  0             https://phishing.army/download/phishing_army_blocklist_extended.txt                                   2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   61          1  0             https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt                          2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   62          1  0             https://v.firebog.net/hosts/Shalla-mal.txt                                                            2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   63          1  0             https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt                             2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   64          1  0             https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts                         2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   65          1  0             https://urlhaus.abuse.ch/downloads/hostfile/                                                          2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php
   66          1  0             https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser                                             2020-12-20 09:26:36  2020-12-26 22:07:59  https://v.firebog.net/hosts/lists.php

*** [ DIAGNOSING ]: contents of /etc/pihole

-rw-r--r-- 1 root root 50 Dec 30 10:41 /etc/pihole/local.list
   192.168.178.10 raspberrypi
   192.168.178.10 pi.hole

-rw-r--r-- 1 root root 234 Dec 30 10:36 /etc/pihole/logrotate
   /var/log/pihole.log {
        su root root
        daily
        copytruncate
        rotate 5
        compress
        delaycompress
        notifempty
        nomail
   }
   /var/log/pihole-FTL.log {
        su root root
        weekly
        copytruncate
        rotate 3
        compress
        delaycompress
        notifempty
        nomail
   }

-rw-rw-r-- 1 pihole root 15 Dec 30 10:36 /etc/pihole/pihole-FTL.conf
   PRIVACYLEVEL=0

*** [ DIAGNOSING ]: contents of /etc/dnsmasq.d

-rw-r--r-- 1 root root 1434 Dec 30 10:36 /etc/dnsmasq.d/01-pihole.conf
   addn-hosts=/etc/pihole/local.list
   addn-hosts=/etc/pihole/custom.list
   localise-queries
   no-resolv
   cache-size=10000
   log-queries
   log-facility=/var/log/pihole.log
   local-ttl=2
   log-async
   server=185.95.218.42
   server=46.182.19.48
   domain-needed
   expand-hosts
   bogus-priv
   interface=eth0
   server=/use-application-dns.net/

*** [ DIAGNOSING ]: contents of /etc/lighttpd

-rw-r--r-- 1 root root 0 Dec 30 10:36 /etc/lighttpd/external.conf

-rw-r--r-- 1 root root 4066 Dec 30 10:36 /etc/lighttpd/lighttpd.conf
   server.modules = (
       "mod_access",
       "mod_accesslog",
       "mod_auth",
       "mod_expire",
       "mod_compress",
       "mod_redirect",
       "mod_setenv",
       "mod_rewrite"
   )
   server.document-root        = "/var/www/html"
   server.error-handler-404    = "/pihole/index.php"
   server.upload-dirs          = ( "/var/cache/lighttpd/uploads" )
   server.errorlog             = "/var/log/lighttpd/error.log"
   server.pid-file             = "/run/lighttpd.pid"
   server.username             = "www-data"
   server.groupname            = "www-data"
   server.port                 = 80
   accesslog.filename          = "/var/log/lighttpd/access.log"
   accesslog.format            = "%{%s}t|%V|%r|%s|%b"
   index-file.names            = ( "index.php", "index.html", "index.lighttpd.html" )
   url.access-deny             = ( "~", ".inc", ".md", ".yml", ".ini" )
   static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
   compress.cache-dir = "/var/cache/lighttpd/compress/"
   compress.filetype  = (
       "application/json",
       "application/vnd.ms-fontobject",
       "application/xml",
       "font/eot",
       "font/opentype",
       "font/otf",
       "font/ttf",
       "image/bmp",
       "image/svg+xml",
       "image/vnd.microsoft.icon",
       "image/x-icon",
       "text/css",
       "text/html",
       "text/javascript",
       "text/plain",
       "text/xml"
   )
   mimetype.assign = (
       ".ico"   => "image/x-icon",
       ".jpeg"  => "image/jpeg",
       ".jpg"   => "image/jpeg",
       ".png"   => "image/png",
       ".svg"   => "image/svg+xml",
       ".css"   => "text/css; charset=utf-8",
       ".html"  => "text/html; charset=utf-8",
       ".js"    => "text/javascript; charset=utf-8",
       ".json"  => "application/json; charset=utf-8",
       ".map"   => "application/json; charset=utf-8",
       ".txt"   => "text/plain; charset=utf-8",
       ".eot"   => "application/vnd.ms-fontobject",
       ".otf"   => "font/otf",
       ".ttc"   => "font/collection",
       ".ttf"   => "font/ttf",
       ".woff"  => "font/woff",
       ".woff2" => "font/woff2"
   )
   include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port
   include_shell "find /etc/lighttpd/conf-enabled -name '*.conf' -a ! -name 'letsencrypt.conf' -printf 'include \"%p\"
' 2>/dev/null"
   $HTTP["url"] =~ "^/admin/" {
       setenv.add-response-header = (
           "X-Pi-hole" => "The Pi-hole Web interface is working!",
           "X-Frame-Options" => "DENY"
       )
       $HTTP["url"] =~ "\.(eot|otf|tt[cf]|woff2?)$" {
           setenv.add-response-header = ( "Access-Control-Allow-Origin" => "*" )
       }
   }
   $HTTP["url"] =~ "^/admin/\.(.*)" {
       url.access-deny = ("")
   }
   expire.url = ( "" => "access plus 0 seconds" )
   include_shell "cat external.conf 2>/dev/null"

*** [ DIAGNOSING ]: contents of /etc/cron.d

-rw-r--r-- 1 root root 1755 Dec 30 10:36 /etc/cron.d/pihole
   40 3   * * 7   root    PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updateGravity >/var/log/pihole_updateGravity.log || cat /var/log/pihole_updateGravity.log
   00 00   * * *   root    PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole flush once quiet
   @reboot root /usr/sbin/logrotate /etc/pihole/logrotate
   */10 *  * * *   root    PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker local
   21 13  * * *   root    PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker remote
   @reboot root    PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker remote reboot

*** [ DIAGNOSING ]: contents of /var/log/lighttpd

-rw-r--r-- 1 www-data www-data 22520 Dec 30 11:49 /var/log/lighttpd/error.log
   -----head of error.log------
   2020-12-26 21:58:50: (server.c.1464) server started (lighttpd/1.4.53)
   2020-12-26 22:00:34: (server.c.2059) server stopped by UID = 0 PID = 1
   2020-12-26 22:00:35: (server.c.1464) server started (lighttpd/1.4.53)
   2020-12-26 22:06:24: (server.c.2059) server stopped by UID = 0 PID = 1
   2020-12-26 22:06:36: (server.c.1464) server started (lighttpd/1.4.53)
   2020-12-26 22:07:25: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined offset: 2 in /var/www/html/admin/scripts/pi-hole/php/update_checker.php on line 58
   2020-12-26 22:07:59: (mod_fastcgi.c.421) FastCGI-stderr: PHP Warning:  SQLite3::exec(): no such table: blacklist in /var/www/html/admin/scripts/pi-hole/php/teleporter.php on line 90
   2020-12-26 22:07:59: (mod_fastcgi.c.421) FastCGI-stderr: PHP Warning:  SQLite3::exec(): no such table: regex_blacklist in /var/www/html/admin/scripts/pi-hole/php/teleporter.php on line 90
   2020-12-26 22:07:59: (mod_fastcgi.c.421) FastCGI-stderr: PHP Warning:  SQLite3::exec(): no such table: whitelist in /var/www/html/admin/scripts/pi-hole/php/teleporter.php on line 90
   2020-12-26 22:07:59: (mod_fastcgi.c.421) FastCGI-stderr: PHP Warning:  SQLite3::exec(): no such table: regex_whitelist in /var/www/html/admin/scripts/pi-hole/php/teleporter.php on line 90
   2020-12-26 22:08:00: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-26 22:08:00: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-27 23:43:03: (server.c.1464) server started (lighttpd/1.4.53)
   2020-12-28 00:45:52: (server.c.1464) server started (lighttpd/1.4.53)
   2020-12-28 02:09:03: (server.c.2059) server stopped by UID = 0 PID = 1
   2020-12-28 02:09:17: (server.c.1464) server started (lighttpd/1.4.53)
   2020-12-28 22:50:15: (server.c.2059) server stopped by UID = 0 PID = 1
   2020-12-28 22:50:28: (server.c.1464) server started (lighttpd/1.4.53)
   2020-12-28 22:51:11: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined offset: 1 in /var/www/html/admin/scripts/pi-hole/php/update_checker.php on line 57
   2020-12-28 22:51:11: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined offset: 2 in /var/www/html/admin/scripts/pi-hole/php/update_checker.php on line 58
   2020-12-28 23:04:37: (server.c.2059) server stopped by UID = 0 PID = 1
   2020-12-28 23:04:57: (server.c.1464) server started (lighttpd/1.4.53)
   2020-12-28 23:21:35: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-28 23:21:35: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-28 23:21:43: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73

   -----tail of error.log------
   2020-12-30 11:22:45: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:46:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:46:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:46:45: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:46:45: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:47:02: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:47:02: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:47:50: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:47:50: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:47:58: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:47:58: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:48:03: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:48:03: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:48:18: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:48:18: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:48:24: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:48:24: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:48:28: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:48:28: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:49:19: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:49:19: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:49:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:49:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
   2020-12-30 11:49:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
   2020-12-30 11:49:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice:  Undefined variable: serverName in /var/www/html/pihole/index.php on line 74

*** [ DIAGNOSING ]: contents of /var/log

-rw-r--r-- 1 pihole pihole 9319 Dec 30 11:49 /var/log/pihole-FTL.log
   -----head of pihole-FTL.log------
   [2020-12-30 11:48:13.453 4605M] Resizing "FTL-queries" from 1376256 to (28672 * 56) == 1605632 (/dev/shm: 1.9MB used, 484.9MB total)
   [2020-12-30 11:48:16.231 4605M] Shutting down...
   [2020-12-30 11:48:16.321 4605M] Finished final database update
   [2020-12-30 11:48:16.324 4605M] ########## FTL terminated after 18s ! ##########
   [2020-12-30 11:48:17.586 4724M] ########## FTL started! ##########
   [2020-12-30 11:48:17.586 4724M] FTL branch: master
   [2020-12-30 11:48:17.586 4724M] FTL version: v5.3.4
   [2020-12-30 11:48:17.586 4724M] FTL commit: fc3bb0f
   [2020-12-30 11:48:17.586 4724M] FTL date: 2020-12-25 19:23:09 +0100
   [2020-12-30 11:48:17.586 4724M] FTL user: pihole
   [2020-12-30 11:48:17.586 4724M] Compiled for armv7hf (compiled on CI) using arm-linux-gnueabihf-gcc (Debian 6.3.0-18) 6.3.0 20170516
   [2020-12-30 11:48:17.586 4724M] Starting config file parsing (/etc/pihole/pihole-FTL.conf)
   [2020-12-30 11:48:17.586 4724M]    SOCKET_LISTENING: only local
   [2020-12-30 11:48:17.586 4724M]    AAAA_QUERY_ANALYSIS: Show AAAA queries
   [2020-12-30 11:48:17.586 4724M]    MAXDBDAYS: max age for stored queries is 365 days
   [2020-12-30 11:48:17.586 4724M]    RESOLVE_IPV6: Resolve IPv6 addresses
   [2020-12-30 11:48:17.586 4724M]    RESOLVE_IPV4: Resolve IPv4 addresses
   [2020-12-30 11:48:17.586 4724M]    DBINTERVAL: saving to DB file every minute
   [2020-12-30 11:48:17.586 4724M]    DBFILE: Using /etc/pihole/pihole-FTL.db
   [2020-12-30 11:48:17.586 4724M]    MAXLOGAGE: Importing up to 24.0 hours of log data
   [2020-12-30 11:48:17.587 4724M]    PRIVACYLEVEL: Set to 0
   [2020-12-30 11:48:17.587 4724M]    IGNORE_LOCALHOST: Show queries from localhost
   [2020-12-30 11:48:17.587 4724M]    BLOCKINGMODE: Null IPs for blocked domains
   [2020-12-30 11:48:17.587 4724M]    ANALYZE_ONLY_A_AND_AAAA: Disabled. Analyzing all queries
   [2020-12-30 11:48:17.587 4724M]    DBIMPORT: Importing history from database
   [2020-12-30 11:48:17.587 4724M]    PIDFILE: Using /run/pihole-FTL.pid
   [2020-12-30 11:48:17.587 4724M]    PORTFILE: Using /run/pihole-FTL.port
   [2020-12-30 11:48:17.587 4724M]    SOCKETFILE: Using /run/pihole/FTL.sock
   [2020-12-30 11:48:17.587 4724M]    SETUPVARSFILE: Using /etc/pihole/setupVars.conf
   [2020-12-30 11:48:17.587 4724M]    MACVENDORDB: Using /etc/pihole/macvendor.db
   [2020-12-30 11:48:17.587 4724M]    GRAVITYDB: Using /etc/pihole/gravity.db
   [2020-12-30 11:48:17.587 4724M]    PARSE_ARP_CACHE: Active
   [2020-12-30 11:48:17.587 4724M]    CNAME_DEEP_INSPECT: Active
   [2020-12-30 11:48:17.587 4724M]    DELAY_STARTUP: No delay requested.
   [2020-12-30 11:48:17.587 4724M]    BLOCK_ESNI: Enabled, blocking _esni.{blocked domain}

   -----tail of pihole-FTL.log------
   [2020-12-30 11:48:23.568 4798M]    GRAVITYDB: Using /etc/pihole/gravity.db
   [2020-12-30 11:48:23.568 4798M]    PARSE_ARP_CACHE: Active
   [2020-12-30 11:48:23.568 4798M]    CNAME_DEEP_INSPECT: Active
   [2020-12-30 11:48:23.568 4798M]    DELAY_STARTUP: No delay requested.
   [2020-12-30 11:48:23.568 4798M]    BLOCK_ESNI: Enabled, blocking _esni.{blocked domain}
   [2020-12-30 11:48:23.568 4798M]    NICE: Set process niceness to -10 (default)
   [2020-12-30 11:48:23.568 4798M]    MAXNETAGE: Removing IP addresses and host names from network table after 365 days
   [2020-12-30 11:48:23.568 4798M]    NAMES_FROM_NETDB: Enabled, trying to get names from network database
   [2020-12-30 11:48:23.568 4798M]    EDNS0_ECS: Overwrite client from ECS information
   [2020-12-30 11:48:23.568 4798M]    REFRESH_HOSTNAMES: Periodically refreshing IPv4 names
   [2020-12-30 11:48:23.568 4798M] Finished config file parsing
   [2020-12-30 11:48:23.568 4798M] Creating mutex
   [2020-12-30 11:48:23.570 4798M] Database version is 9
   [2020-12-30 11:48:23.570 4798M] Imported 0 alias-clients
   [2020-12-30 11:48:23.571 4798M] Database successfully initialized
   [2020-12-30 11:48:23.571 4798M] New upstream server: 46.182.19.48:53 (0/1024)
   [2020-12-30 11:48:23.572 4798M] Imported 34 queries from the long-term database
   [2020-12-30 11:48:23.572 4798M]  -> Total DNS queries: 34
   [2020-12-30 11:48:23.572 4798M]  -> Cached DNS queries: 2
   [2020-12-30 11:48:23.572 4798M]  -> Forwarded DNS queries: 29
   [2020-12-30 11:48:23.572 4798M]  -> Blocked DNS queries: 3
   [2020-12-30 11:48:23.572 4798M]  -> Unknown DNS queries: 0
   [2020-12-30 11:48:23.572 4798M]  -> Unique domains: 12
   [2020-12-30 11:48:23.572 4798M]  -> Unique clients: 3
   [2020-12-30 11:48:23.572 4798M]  -> Known forward destinations: 1
   [2020-12-30 11:48:23.572 4798M] Successfully accessed setupVars.conf
   [2020-12-30 11:48:23.577 4800M] PID of FTL process: 4800
   [2020-12-30 11:48:23.577 4800/T4801] Listening on port 4711 for incoming IPv4 telnet connections
   [2020-12-30 11:48:23.578 4800/T4802] Listening on port 4711 for incoming IPv6 telnet connections
   [2020-12-30 11:48:23.578 4800/T4803] Listening on Unix socket
   [2020-12-30 11:48:23.578 4800M] INFO: FTL is running as user pihole (UID 999)
   [2020-12-30 11:48:23.579 4800M] Reloading DNS cache
   [2020-12-30 11:48:23.579 4800M] Blocking status is enabled
   [2020-12-30 11:48:23.706 4800/T4804] Compiled 7 whitelist and 0 blacklist regex filters for 3 clients in 4.0 msec
   [2020-12-30 11:49:35.664 4800M] New upstream server: 185.95.218.42:53 (1/1024)

*** [ DIAGNOSING ]: contents of /dev/shm
-rw------- 1 pihole pihole 339968 Dec 30 11:48 /dev/shm/FTL-clients
-rw------- 1 pihole pihole 144 Dec 30 11:48 /dev/shm/FTL-counters
-rw------- 1 pihole pihole 4096 Dec 30 11:48 /dev/shm/FTL-dns-cache
-rw------- 1 pihole pihole 65536 Dec 30 11:48 /dev/shm/FTL-domains
-rw------- 1 pihole pihole 28 Dec 30 11:48 /dev/shm/FTL-lock
-rw------- 1 pihole pihole 20480 Dec 30 11:48 /dev/shm/FTL-overTime
-rw------- 1 pihole pihole 4096 Dec 30 11:48 /dev/shm/FTL-per-client-regex
-rw------- 1 pihole pihole 229376 Dec 30 11:49 /dev/shm/FTL-queries
-rw------- 1 pihole pihole 12 Dec 30 11:48 /dev/shm/FTL-settings
-rw------- 1 pihole pihole 4096 Dec 30 11:48 /dev/shm/FTL-strings
-rw------- 1 pihole pihole 28672 Dec 30 11:48 /dev/shm/FTL-upstreams

*** [ DIAGNOSING ]: Pi-hole diagnosis messages

*** [ DIAGNOSING ]: Locale
    LANG=en_GB.UTF-8

*** [ DIAGNOSING ]: Pi-hole log
-rw-r--r-- 1 pihole pihole 33252 Dec 30 11:49 /var/log/pihole.log
   -----head of pihole.log------
   Dec 30 11:48:13 dnsmasq[4605]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
   Dec 30 11:48:13 dnsmasq[4605]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
   Dec 30 11:48:13 dnsmasq[4605]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
   Dec 30 11:48:14 dnsmasq[4605]: query[A] www.google.com from 192.168.178.2
   Dec 30 11:48:14 dnsmasq[4605]: forwarded www.google.com to 46.182.19.48
   Dec 30 11:48:14 dnsmasq[4605]: forwarded www.google.com to 185.95.218.42
   Dec 30 11:48:15 dnsmasq[4605]: query[A] nexusrules.officeapps.live.com from 192.168.178.2
   Dec 30 11:48:15 dnsmasq[4605]: gravity blocked nexusrules.officeapps.live.com is 0.0.0.0
   Dec 30 11:48:16 dnsmasq[4605]: exiting on receipt of SIGTERM
   Dec 30 11:48:17 dnsmasq[4726]: started, version pi-hole-2.82 cachesize 10000
   Dec 30 11:48:17 dnsmasq[4726]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n IDN DHCP DHCPv6 Lua TFTP no-conntrack ipset auth DNSSEC loop-detect inotify dumpfile
   Dec 30 11:48:17 dnsmasq[4726]: using only locally-known addresses for domain use-application-dns.net
   Dec 30 11:48:17 dnsmasq[4726]: using nameserver 46.182.19.48#53
   Dec 30 11:48:17 dnsmasq[4726]: using nameserver 185.95.218.42#53
   Dec 30 11:48:17 dnsmasq[4726]: read /etc/hosts - 5 addresses
   Dec 30 11:48:17 dnsmasq[4726]: read /etc/pihole/custom.list - 0 addresses
   Dec 30 11:48:17 dnsmasq[4726]: read /etc/pihole/local.list - 2 addresses
   Dec 30 11:48:18 dnsmasq[4726]: query[A] epdg.epc.mnc002.mcc262.pub.3gppnetwork.org from 192.168.178.14
   Dec 30 11:48:18 dnsmasq[4726]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 46.182.19.48
   Dec 30 11:48:18 dnsmasq[4726]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 185.95.218.42


********************************************
********************************************
[✓] ** FINISHED DEBUGGING! **

    * The debug log can be uploaded to tricorder.pi-hole.net for sharing with developers only.
    * For more information, see: https://pi-hole.net/2016/11/07/crack-our-medical-tricorder-win-a-raspberry-pi-3/
    * If available, we'll use openssl to upload the log, otherwise it will fall back to netcat.

[?] Would you like to upload the log? [y/N] y
    * Using curl for transmission.
    * curl failed, falling back to netcat for transmission.
nc: getaddrinfo for host "tricorder.pi-hole.net" port 9999: Temporary failure in name resolution
[✗]  There was an error uploading your debug log.
   * Please try again or contact the Pi-hole team for assistance.
   * A local copy of the debug log can be found at: /var/log/pihole_debug.log

recursive · December 30, 2020, 11:41am

Here is also a longer log of the issue:

Dec 30 11:56:07 dnsmasq[4800]: query[A] diagnostics.meethue.com from 192.168.178.2
Dec 30 11:56:07 dnsmasq[4800]: exactly blacklisted diagnostics.meethue.com is 0.0.0.0
Dec 30 11:56:08 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:08 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:08 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:08 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:08 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:08 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:09 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:09 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:09 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:10 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:10 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:10 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:11 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:11 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:11 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:12 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:12 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:12 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:12 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:12 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:12 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:12 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:12 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:12 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:13 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:13 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:13 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:13 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:13 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:13 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:14 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:14 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:14 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:15 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:15 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:15 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:16 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:16 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:16 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:16 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:16 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:16 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:17 dnsmasq[4800]: query[A] ws.pusherapp.com from 192.168.178.2
Dec 30 11:56:17 dnsmasq[4800]: forwarded ws.pusherapp.com to 46.182.19.48
Dec 30 11:56:17 dnsmasq[4800]: forwarded ws.pusherapp.com to 185.95.218.42
Dec 30 11:56:18 dnsmasq[4800]: query[A] ws.pusherapp.com from 192.168.178.2
Dec 30 11:56:18 dnsmasq[4800]: forwarded ws.pusherapp.com to 46.182.19.48
Dec 30 11:56:18 dnsmasq[4800]: forwarded ws.pusherapp.com to 185.95.218.42
Dec 30 11:56:19 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:19 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:19 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:19 dnsmasq[4800]: query[A] ws.pusherapp.com from 192.168.178.2
Dec 30 11:56:19 dnsmasq[4800]: forwarded ws.pusherapp.com to 46.182.19.48
Dec 30 11:56:19 dnsmasq[4800]: forwarded ws.pusherapp.com to 185.95.218.42
Dec 30 11:56:20 dnsmasq[4800]: query[AAAA] www.ecdinterface.philips.com from 192.168.178.2
Dec 30 11:56:20 dnsmasq[4800]: exactly blacklisted www.ecdinterface.philips.com is ::
Dec 30 11:56:20 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:20 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:20 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:20 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:20 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:20 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:20 dnsmasq[4800]: query[A] sockjs.pusher.com from 192.168.178.2
Dec 30 11:56:20 dnsmasq[4800]: forwarded sockjs.pusher.com to 46.182.19.48
Dec 30 11:56:20 dnsmasq[4800]: forwarded sockjs.pusher.com to 185.95.218.42
Dec 30 11:56:21 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:21 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:21 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:21 dnsmasq[4800]: query[A] sockjs.pusher.com from 192.168.178.2
Dec 30 11:56:21 dnsmasq[4800]: forwarded sockjs.pusher.com to 46.182.19.48
Dec 30 11:56:21 dnsmasq[4800]: forwarded sockjs.pusher.com to 185.95.218.42
Dec 30 11:56:21 dnsmasq[4800]: query[A] ws.pusherapp.com from 192.168.178.2
Dec 30 11:56:21 dnsmasq[4800]: forwarded ws.pusherapp.com to 46.182.19.48
Dec 30 11:56:21 dnsmasq[4800]: forwarded ws.pusherapp.com to 185.95.218.42
Dec 30 11:56:22 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:22 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:22 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:22 dnsmasq[4800]: query[A] sockjs.pusher.com from 192.168.178.2
Dec 30 11:56:22 dnsmasq[4800]: forwarded sockjs.pusher.com to 46.182.19.48
Dec 30 11:56:22 dnsmasq[4800]: forwarded sockjs.pusher.com to 185.95.218.42
Dec 30 11:56:23 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:23 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:23 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:24 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:24 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:24 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:24 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:24 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:24 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:24 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:24 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:24 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:24 dnsmasq[4800]: query[A] sockjs.pusher.com from 192.168.178.2
Dec 30 11:56:24 dnsmasq[4800]: forwarded sockjs.pusher.com to 46.182.19.48
Dec 30 11:56:24 dnsmasq[4800]: forwarded sockjs.pusher.com to 185.95.218.42
Dec 30 11:56:25 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:25 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:25 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:25 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:25 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:25 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:25 dnsmasq[4800]: query[A] ws.pusherapp.com from 192.168.178.2
Dec 30 11:56:25 dnsmasq[4800]: forwarded ws.pusherapp.com to 46.182.19.48
Dec 30 11:56:25 dnsmasq[4800]: forwarded ws.pusherapp.com to 185.95.218.42
Dec 30 11:56:26 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:26 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:26 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:27 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:27 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:27 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:28 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:28 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:28 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:28 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:28 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:28 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:28 dnsmasq[4800]: query[A] sockjs.pusher.com from 192.168.178.2
Dec 30 11:56:28 dnsmasq[4800]: forwarded sockjs.pusher.com to 46.182.19.48
Dec 30 11:56:28 dnsmasq[4800]: forwarded sockjs.pusher.com to 185.95.218.42
Dec 30 11:56:31 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:31 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:31 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42
Dec 30 11:56:32 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:32 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:32 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:32 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:32 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:32 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:33 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:33 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:33 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:34 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:34 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:34 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:36 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:36 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:36 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:36 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:36 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:36 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:37 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:37 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:37 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:38 dnsmasq[4800]: query[A] epdg.epc.mnc001.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:38 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:38 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:38 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:38 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:38 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:39 dnsmasq[4800]: query[A] epdg.epc.mnc002.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:39 dnsmasq[4800]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:39 dnsmasq[4800]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:39 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:39 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:39 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:40 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:40 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:40 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:40 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:40 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:40 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:40 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:40 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:40 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:41 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:41 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:41 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:41 dnsmasq[4800]: query[A] epdg.epc.mnc001.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:41 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:41 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:42 dnsmasq[4800]: query[A] epdg.epc.mnc002.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:42 dnsmasq[4800]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:42 dnsmasq[4800]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:43 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:43 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:43 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:44 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:44 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:44 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:44 dnsmasq[4800]: query[A] timeline55-clientstats1.pusher.com from 192.168.178.2
Dec 30 11:56:44 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 46.182.19.48
Dec 30 11:56:44 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 185.95.218.42
Dec 30 11:56:44 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:44 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:44 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:45 dnsmasq[4800]: query[A] timeline55-clientstats1.pusher.com from 192.168.178.2
Dec 30 11:56:45 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 46.182.19.48
Dec 30 11:56:45 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 185.95.218.42
Dec 30 11:56:45 dnsmasq[4800]: query[A] epdg.epc.mnc001.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:45 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:45 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:45 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:45 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:45 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:46 dnsmasq[4800]: query[A] timeline55-clientstats1.pusher.com from 192.168.178.2
Dec 30 11:56:46 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 46.182.19.48
Dec 30 11:56:46 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 185.95.218.42
Dec 30 11:56:46 dnsmasq[4800]: query[A] epdg.epc.mnc002.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:46 dnsmasq[4800]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:46 dnsmasq[4800]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:46 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:46 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:46 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:47 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:47 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:47 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:48 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:48 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:48 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:48 dnsmasq[4800]: query[A] timeline55-clientstats1.pusher.com from 192.168.178.2
Dec 30 11:56:48 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 46.182.19.48
Dec 30 11:56:48 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 185.95.218.42
Dec 30 11:56:48 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:48 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:48 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:49 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:49 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:49 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:50 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:50 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:50 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:51 dnsmasq[4800]: query[A] epdg.epc.mnc001.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:51 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:51 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:51 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:51 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:51 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:52 dnsmasq[4800]: query[A] epdg.epc.mnc002.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:52 dnsmasq[4800]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:52 dnsmasq[4800]: forwarded epdg.epc.mnc002.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:52 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:52 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:52 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:52 dnsmasq[4800]: query[A] timeline55-clientstats1.pusher.com from 192.168.178.2
Dec 30 11:56:52 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 46.182.19.48
Dec 30 11:56:52 dnsmasq[4800]: forwarded timeline55-clientstats1.pusher.com to 185.95.218.42
Dec 30 11:56:52 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:52 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:52 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:52 dnsmasq[4800]: query[A] r5---sn-h0jeenek.googlevideo.com from 192.168.178.2
Dec 30 11:56:52 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 46.182.19.48
Dec 30 11:56:52 dnsmasq[4800]: forwarded r5---sn-h0jeenek.googlevideo.com to 185.95.218.42
Dec 30 11:56:53 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:53 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:53 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:55 dnsmasq[4800]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.2
Dec 30 11:56:55 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 46.182.19.48
Dec 30 11:56:55 dnsmasq[4800]: forwarded n7j5t1wt46pg.statuspage.io to 185.95.218.42
Dec 30 11:56:56 dnsmasq[4800]: query[A] go.microsoft.com from 192.168.178.2
Dec 30 11:56:56 dnsmasq[4800]: forwarded go.microsoft.com to 46.182.19.48
Dec 30 11:56:56 dnsmasq[4800]: forwarded go.microsoft.com to 185.95.218.42
Dec 30 11:56:56 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:56 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:56 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:57 dnsmasq[4800]: query[A] epdg.epc.mnc001.mcc262.pub.3gppnetwork.org from 192.168.178.14
Dec 30 11:56:57 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 46.182.19.48
Dec 30 11:56:57 dnsmasq[4800]: forwarded epdg.epc.mnc001.mcc262.pub.3gppnetwork.org to 185.95.218.42
Dec 30 11:56:57 dnsmasq[4800]: query[A] r5---sn-h0jeln7r.googlevideo.com from 192.168.178.2
Dec 30 11:56:57 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 46.182.19.48
Dec 30 11:56:57 dnsmasq[4800]: forwarded r5---sn-h0jeln7r.googlevideo.com to 185.95.218.42
Dec 30 11:56:58 dnsmasq[4800]: query[A] client.wns.windows.com from 192.168.178.2
Dec 30 11:56:58 dnsmasq[4800]: forwarded client.wns.windows.com to 46.182.19.48
Dec 30 11:56:58 dnsmasq[4800]: forwarded client.wns.windows.com to 185.95.218.42

As you can see, queries are being received and forwarded, but no DNS replies are being sent. I don't understand why.

And here is me trying to fix it on the raspberry:

pi@raspberrypi:~ $
<login redacted>
pi@192.168.178.10's password:
Linux raspberrypi 5.4.79-v7+ #1373 SMP Mon Nov 23 13:22:33 GMT 2020 armv7l

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Wed Dec 30 11:49:04 2020 from 192.168.178.23
pi@raspberrypi:~ $ pihole -r

  [✓] Root user check

        .;;,.
        .ccccc:,.
         :cccclll:.      ..,,
          :ccccclll.   ;ooodc
           'ccll:;ll .oooodc
             .;cll.;;looo:.
                 .. ','.
                .',,,,,,'.
              .',,,,,,,,,,.
            .',,,,,,,,,,,,....
          ....''',,,,,,,'.......
        .........  ....  .........
        ..........      ..........
        ..........      ..........
        .........  ....  .........
          ........,,,,,,,'......
            ....',,,,,,,,,,,,.
               .',,,,,,,,,'.
                .',,,,,,'.
                  ..'''.

  [✓] Update local cache of available packages
  [i] Existing PHP installation detected : PHP version 7.3.19-1~deb10u1
  [i] Repair option selected

  [✓] Checking apt-get for upgraded packages... up to date!

  [i] Installer Dependency checks...
  [✓] Checking for dhcpcd5
  [✓] Checking for git
  [✓] Checking for iproute2
  [✓] Checking for whiptail
  [✓] Checking for dnsutils

  [✗] Retrieval of supported OS list failed. dig failed with return code 10.
      Unable to determine if the detected OS (Raspbian 10) is supported
      Possible causes for this include:
        - Firewall blocking certain DNS lookups from Pi-hole device
        - ns1.pi-hole.net being blocked (required to obtain TXT record from versions.pi-hole.net containing supported operating systems)
        - Other internet connectivity issues

      https://docs.pi-hole.net/main/prerequesites/#supported-operating-systems

      If you wish to attempt to continue anyway, you can try one of the following commands to skip this check:

      e.g: If you are seeing this message on a fresh install, you can run:
             curl -sSL https://install.pi-hole.net | PIHOLE_SKIP_OS_CHECK=true sudo -E bash

           If you are seeing this message after having run pihole -up:
             PIHOLE_SKIP_OS_CHECK=true sudo -E pihole -r
           (In this case, your previous run of pihole -up will have already updated the local repository)

      It is possible that the installation will still fail at this stage due to an unsupported configuration.
      If that is the case, you can feel free to ask the community on Discourse with the Community Help category:
      https://discourse.pi-hole.net/c/bugs-problems-issues/community-help/

pi@raspberrypi:~ $ sudo reboot
pi@raspberrypi:~ $
<login redacted>
pi@192.168.178.10's password:
Linux raspberrypi 5.4.79-v7+ #1373 SMP Mon Nov 23 13:22:33 GMT 2020 armv7l

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Wed Dec 30 11:59:40 2020 from 192.168.178.23
pi@raspberrypi:~ $ pihole -r

  [✓] Root user check

        .;;,.
        .ccccc:,.
         :cccclll:.      ..,,
          :ccccclll.   ;ooodc
           'ccll:;ll .oooodc
             .;cll.;;looo:.
                 .. ','.
                .',,,,,,'.
              .',,,,,,,,,,.
            .',,,,,,,,,,,,....
          ....''',,,,,,,'.......
        .........  ....  .........
        ..........      ..........
        ..........      ..........
        .........  ....  .........
          ........,,,,,,,'......
            ....',,,,,,,,,,,,.
               .',,,,,,,,,'.
                .',,,,,,'.
                  ..'''.

  [✓] Update local cache of available packages
  [i] Existing PHP installation detected : PHP version 7.3.19-1~deb10u1
  [i] Repair option selected

  [✓] Checking apt-get for upgraded packages... up to date!

  [i] Installer Dependency checks...
  [✓] Checking for dhcpcd5
  [✓] Checking for git
  [✓] Checking for iproute2
  [✓] Checking for whiptail
  [✓] Checking for dnsutils

  [✓] Supported OS detected
  [i] SELinux not detected
  [i] Performing reconfiguration, skipping download of local repos
  [✓] Resetting repository within /etc/.pihole...
  [✓] Resetting repository within /var/www/html/admin...
  [i] Main Dependency checks...
  [✓] Checking for cron
  [✓] Checking for curl
  [✓] Checking for iputils-ping
  [✓] Checking for lsof
  [✓] Checking for netcat
  [✓] Checking for psmisc
  [✓] Checking for sudo
  [✓] Checking for unzip
  [✓] Checking for wget
  [✓] Checking for idn2
  [✓] Checking for sqlite3
  [✓] Checking for libcap2-bin
  [✓] Checking for dns-root-data
  [✓] Checking for libcap2
  [✓] Checking for lighttpd
  [✓] Checking for php7.3-common
  [✓] Checking for php7.3-cgi
  [✓] Checking for php7.3-sqlite3
  [✓] Checking for php7.3-xml
  [✓] Checking for php7.3-json
  [✓] Checking for php7.3-intl

  [✓] Enabling lighttpd service to start on reboot...
  [✓] Checking for user 'pihole'

  [i] FTL Checks...

  [✓] Detected ARMv7 processor (with hard-float support)
  [i] Checking for existing FTL binary...
  [i] Downloading and Installing FTL...curl: (6) Could not resolve host: github-production-release-asset-2e65be.s3.amazonaws.com
  [✗] Downloading and Installing FTL
  Error: URL https://github.com/pi-hole/ftl/releases/latest/download/pihole-FTL-armv7-linux-gnueabihf not found
  [✗] FTL Engine not installed
pi@raspberrypi:~ $ ping google.com
ping: google.com: Temporary failure in name resolution
pi@raspberrypi:~ $ sudo reboot
<login redacted>
pi@192.168.178.10's password:
Linux raspberrypi 5.4.79-v7+ #1373 SMP Mon Nov 23 13:22:33 GMT 2020 armv7l

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Wed Dec 30 12:09:29 2020 from 192.168.178.23
pi@raspberrypi:~ $ pihole -r

  [✓] Root user check

        .;;,.
        .ccccc:,.
         :cccclll:.      ..,,
          :ccccclll.   ;ooodc
           'ccll:;ll .oooodc
             .;cll.;;looo:.
                 .. ','.
                .',,,,,,'.
              .',,,,,,,,,,.
            .',,,,,,,,,,,,....
          ....''',,,,,,,'.......
        .........  ....  .........
        ..........      ..........
        ..........      ..........
        .........  ....  .........
          ........,,,,,,,'......
            ....',,,,,,,,,,,,.
               .',,,,,,,,,'.
                .',,,,,,'.
                  ..'''.

  [✓] Update local cache of available packages
  [i] Existing PHP installation detected : PHP version 7.3.19-1~deb10u1
  [i] Reconfigure option selected

  [✓] Checking apt-get for upgraded packages... up to date!

  [i] Installer Dependency checks...
  [✓] Checking for dhcpcd5
  [✓] Checking for git
  [✓] Checking for iproute2
  [✓] Checking for whiptail
  [✓] Checking for dnsutils

  [✓] Supported OS detected
  [i] SELinux not detected
  [i] Using upstream DNS: Custom (185.95.218.42, 46.182.19.48)
  [i] Static IP already configured
  [i] Unable to find IPv6 ULA/GUA address, IPv6 adblocking will not be enabled
  [i] IPv4 address: 192.168.178.10/24
  [i] IPv6 address:
  [i] Web Interface On
  [i] Web Server On
  [i] Logging On.
  [i] Privacy level 0  [i] Performing reconfiguration, skipping download of local repos
  [✓] Resetting repository within /etc/.pihole...
  [✓] Resetting repository within /var/www/html/admin...
  [i] Main Dependency checks...
  [✓] Checking for cron
  [✓] Checking for curl
  [✓] Checking for iputils-ping
  [✓] Checking for lsof
  [✓] Checking for netcat
  [✓] Checking for psmisc
  [✓] Checking for sudo
  [✓] Checking for unzip
  [✓] Checking for wget
  [✓] Checking for idn2
  [✓] Checking for sqlite3
  [✓] Checking for libcap2-bin
  [✓] Checking for dns-root-data
  [✓] Checking for libcap2
  [✓] Checking for lighttpd
  [✓] Checking for php7.3-common
  [✓] Checking for php7.3-cgi
  [✓] Checking for php7.3-sqlite3
  [✓] Checking for php7.3-xml
  [✓] Checking for php7.3-json
  [✓] Checking for php7.3-intl

  [✓] Enabling lighttpd service to start on reboot...
  [✓] Checking for user 'pihole'

  [i] FTL Checks...

  [✓] Detected ARMv7 processor (with hard-float support)
  [i] Checking for existing FTL binary...
  [i] Latest FTL Binary already installed (v5.3.4). Confirming Checksum...
  [i] Checksum correct. No need to download!
  [✓] Installing scripts from /etc/.pihole

  [i] Installing configs from /etc/.pihole...
  [i] Existing dnsmasq.conf found... it is not a Pi-hole file, leaving alone!
  [✓] Copying 01-pihole.conf to /etc/dnsmasq.d/01-pihole.conf

  [i] Installing blocking page...
  [✓] Creating directory for blocking page, and copying files
  [i] Backing up index.lighttpd.html
      No default index.lighttpd.html file found... not backing up

  [✓] Installing sudoer file

  [✓] Installing latest Cron script

  [✓] Installing latest logrotate script
  [i] Backing up /etc/dnsmasq.conf to /etc/dnsmasq.conf.old
  [✓] man pages installed and database updated
  [i] Testing if systemd-resolved is enabled
  [i] Systemd-resolved is not enabled
  [✓] Restarting lighttpd service...
  [✓] Enabling lighttpd service to start on reboot...
  [i] Restarting services...
  [✓] Enabling pihole-FTL service to start on reboot...
  [✓] Restarting pihole-FTL service...
  [✓] Deleting existing list cache
  [i] Neutrino emissions detected...
  [✓] Pulling blocklist source list into range

  [✓] Preparing new gravity database
  [i] Using libz compression

  [i] Target: https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
  [✓] Status: Retrieval successful
  [i] Received 367 domains

  [i] Target: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-social/hosts
  [✓] Status: Retrieval successful
  [i] Received 63704 domains

  [i] Target: https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts_without_controversies.txt
  [✓] Status: Retrieval successful
  [i] Received 15135 domains

  [i] Target: https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts
  [✓] Status: Retrieval successful
  [i] Received 73 domains

  [i] Target: https://v.firebog.net/hosts/static/w3kbl.txt
  [✓] Status: Retrieval successful
  [i] Received 775 domains

  [i] Target: https://adaway.org/hosts.txt
  [✓] Status: Retrieval successful
  [i] Received 9187 domains

  [i] Target: https://v.firebog.net/hosts/AdguardDNS.txt
  [✓] Status: Retrieval successful
  [i] Received 38961 domains

  [i] Target: https://v.firebog.net/hosts/Admiral.txt
  [✓] Status: Retrieval successful
  [i] Received 662 domains

  [i] Target: https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt
  [✓] Status: Retrieval successful
  [i] Received 42296 domains

  [i] Target: https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
  [✓] Status: Retrieval successful
  [i] Received 2701 domains

  [i] Target: https://v.firebog.net/hosts/Easylist.txt
  [✓] Status: Retrieval successful
  [i] Received 12487 domains

  [i] Target: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&amp;showintro=0&amp;mimetype=plaintext
  [✓] Status: Retrieval successful
  [i] Received 3563 domains

  [i] Target: https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts
  [✓] Status: Retrieval successful
  [i] Received 10 domains

  [i] Target: https://raw.githubusercontent.com/bigdargon/hostsVN/master/hosts
  [✓] Status: Retrieval successful
  [i] Received 18430 domains

  [i] Target: https://v.firebog.net/hosts/Easyprivacy.txt
  [✓] Status: Retrieval successful
  [i] Received 2980 domains

  [i] Target: https://v.firebog.net/hosts/Prigent-Ads.txt
  [✓] Status: Retrieval successful
  [i] Received 3670 domains

  [i] Target: https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-blocklist.txt
  [✓] Status: Retrieval successful
  [i] Received 13914 domains

  [i] Target: https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts
  [✓] Status: Retrieval successful
  [i] Received 1286 domains

  [i] Target: https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt
  [✓] Status: Retrieval successful
  [i] Received 56977 domains

  [i] Target: https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt
  [✓] Status: Retrieval successful
  [i] Received 157 domains

  [i] Target: https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
  [✓] Status: Retrieval successful
  [i] Received 282 domains

  [i] Target: https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt
  [✓] Status: Retrieval successful
  [i] Received 2735 domains

  [i] Target: https://v.firebog.net/hosts/Prigent-Crypto.txt
  [✓] Status: Retrieval successful
  [i] Received 8674 domains

  [i] Target: https://mirror.cedia.org.ec/malwaredomains/immortal_domains.txt
  [✓] Status: Retrieval successful
  [i] Received 3196 domains

  [i] Target: https://www.malwaredomainlist.com/hostslist/hosts.txt
  [✓] Status: Retrieval successful
  [i] Received 0 domains

  [i] Target: https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txt
  [✓] Status: Retrieval successful
  [i] Received 2046 domains

  [i] Target: https://phishing.army/download/phishing_army_blocklist_extended.txt
  [✓] Status: Retrieval successful
  [i] Received 20058 domains

  [i] Target: https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt
  [✓] Status: Retrieval successful
  [i] Received 396 domains

  [i] Target: https://v.firebog.net/hosts/Shalla-mal.txt
  [✓] Status: Retrieval successful
  [i] Received 19218 domains

  [i] Target: https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt
  [✓] Status: Retrieval successful
  [i] Received 8084 domains

  [i] Target: https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts
  [✓] Status: Retrieval successful
  [i] Received 2567 domains

  [i] Target: https://urlhaus.abuse.ch/downloads/hostfile/
  [✓] Status: Retrieval successful
  [i] Received 1221 domains

  [i] Target: https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser
  [✓] Status: Retrieval successful
  [i] Received 3595 domains

  [✓] Storing downloaded domains in new gravity database
  [✓] Building tree
  [✓] Swapping databases
  [i] Number of gravity domains: 359407 (272083 unique domains)
  [i] Number of exact blacklisted domains: 2
  [i] Number of regex blacklist filters: 0
  [i] Number of exact whitelisted domains: 0
  [i] Number of regex whitelist filters: 7
  [✓] Flushing DNS cache
  [✓] Cleaning up stray matter

  [✓] DNS service is listening
     [✓] UDP (IPv4)
     [✓] TCP (IPv4)
     [✓] UDP (IPv6)
     [✓] TCP (IPv6)

  [✓] Pi-hole blocking is enabled
  [i] View the web interface at http://pi.hole/admin or http://192.168.178.10/admin

  [i] You may now configure your devices to use the Pi-hole as their DNS server
  [i] Pi-hole DNS (IPv4): 192.168.178.10
  [i] If you set a new IP address, please restart the server running the Pi-hole

  [i] The install log is located at: /etc/pihole/install.log
Installation Complete!

(after reinstalling/reconfiguring pihole I finally had internet again, for now)

Please help me!

deHakkelaar · December 30, 2020, 5:21pm

Sounds like the connection to the upstream configured DNS servers in Pi-hole (46.182.19.48 & 185.95.218.42) is causing troubles.
When the issue occurs, can you post output for below pls ?

On Pi-hole:

traceroute -n 46.182.19.48

nslookup pi.hole localhost

nslookup pi-hole.net localhost

nslookup pi-hole.net 46.182.19.48

nslookup pi-hole.net 185.95.218.42

And from a connected client (Windows, MacOS or Linux) in a command prompt/terminal:

nslookup pi.hole 192.168.178.10

nslookup pi-hole.net 192.168.178.10

nslookup pi-hole.net 46.182.19.48

nslookup pi-hole.net 185.95.218.42

EDIT: You could temporarily, for diagnosing, try select one of the other supplied upstream DNS servers for Pi-hole like Cloudflare or Google.

recursive · January 3, 2021, 7:57am

First of all: happy new year! And thank you for your help @deHakkelaar!

It is so weird! I've switched the DNS server to cloudflare and the setup back to client - pi-hole - fritzbox - DNS provider. While it didn't fix the issue, it seems to recover faster with cloudflare now.
However, right now I can't access the spotify streaming server (spclient.wg.spotify.com), google or youtube and it didn't recover by itsself yet. For whatever reason, other sites work without a problem. I don't understand it!
This is the output I received after going through the commands you gave me directly after said sites weren't being resolved again:

On Pi-hole:

pi@raspberrypi:~ $ traceroute -n 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 60 byte packets
 1  192.168.178.2  0.480 ms  0.440 ms  0.449 ms
 2  62.155.245.116  4.853 ms  5.232 ms  5.241 ms
 3  * * *
 4  * * *
 5  62.157.250.38  13.665 ms  13.638 ms  13.473 ms
 6  195.22.215.192  22.020 ms  21.221 ms  21.058 ms
 7  195.22.215.59  22.256 ms  24.239 ms  21.595 ms
 8  1.1.1.1  23.259 ms  24.034 ms  23.685 ms
pi@raspberrypi:~ $ nslookup pi.hole localhost
Server:         localhost
Address:        ::1#53

Name:   pi.hole
Address: 192.168.178.10

pi@raspberrypi:~ $ nslookup pi-hole.net localhost
Server:         localhost
Address:        ::1#53

Non-authoritative answer:
Name:   pi-hole.net
Address: 192.124.249.118

pi@raspberrypi:~ $ nslookup pi-hole.net 1.1.1.1
Server:         1.1.1.1
Address:        1.1.1.1#53

Non-authoritative answer:
Name:   pi-hole.net
Address: 192.124.249.118

pi@raspberrypi:~ $ nslookup pi-hole.net 1.0.0.1
Server:         1.0.0.1
Address:        1.0.0.1#53

Non-authoritative answer:
Name:   pi-hole.net
Address: 192.124.249.118

From a connected Windows-client:

C:\Users\human>nslookup pi.hole 192.168.178.10
Server:  raspberrypi
Address:  192.168.178.10

Name:    pi.hole
Address:  192.168.178.10


C:\Users\human>nslookup pi-hole.net 192.168.178.10
Server:  raspberrypi
Address:  192.168.178.10

Non-authoritative answer:
Name:    pi-hole.net
Address:  192.124.249.118


C:\Users\human>nslookup pi-hole.net 1.1.1.1
Server:  one.one.one.one
Address:  1.1.1.1

Non-authoritative answer:
Name:    pi-hole.net
Address:  192.124.249.118


C:\Users\human>nslookup pi-hole.net 1.0.0.1
Server:  one.one.one.one
Address:  1.0.0.1

Non-authoritative answer:
Name:    pi-hole.net
Address:  192.124.249.118

The last lines of the pihole.log file (live) going through some working and some not working sites:

Jan  3 09:24:09 dnsmasq[29358]: query[A] www.google.de from 192.168.178.23
Jan  3 09:24:09 dnsmasq[29358]: forwarded www.google.de to 192.168.178.2
Jan  3 09:24:09 dnsmasq[29358]: forwarded www.google.de to 192.168.178.2
Jan  3 09:24:09 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:15 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:24:15 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:15 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:15 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:18 dnsmasq[29358]: query[A] www.youtube.com from 192.168.178.23
Jan  3 09:24:18 dnsmasq[29358]: forwarded www.youtube.com to 192.168.178.2
Jan  3 09:24:18 dnsmasq[29358]: forwarded www.youtube.com to 192.168.178.2
Jan  3 09:24:18 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:19 dnsmasq[29358]: query[AAAA] diagnostics.meethue.com from 192.168.178.20
Jan  3 09:24:19 dnsmasq[29358]: exactly blacklisted diagnostics.meethue.com is ::
Jan  3 09:24:19 dnsmasq[29358]: query[A] diagnostics.meethue.com from 192.168.178.20
Jan  3 09:24:19 dnsmasq[29358]: exactly blacklisted diagnostics.meethue.com is 0.0.0.0
Jan  3 09:24:21 dnsmasq[29358]: query[AAAA] www.ecdinterface.philips.com from 192.168.178.20
Jan  3 09:24:21 dnsmasq[29358]: exactly blacklisted www.ecdinterface.philips.com is ::
Jan  3 09:24:21 dnsmasq[29358]: query[A] www.ecdinterface.philips.com from 192.168.178.20
Jan  3 09:24:21 dnsmasq[29358]: exactly blacklisted www.ecdinterface.philips.com is 0.0.0.0
Jan  3 09:24:22 dnsmasq[29358]: query[A] www.chefkoch.de from 192.168.178.23
Jan  3 09:24:22 dnsmasq[29358]: forwarded www.chefkoch.de to 192.168.178.2
Jan  3 09:24:22 dnsmasq[29358]: query[A] www.chefkoch.de from 192.168.178.23
Jan  3 09:24:22 dnsmasq[29358]: forwarded www.chefkoch.de to 192.168.178.2
Jan  3 09:24:22 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.48
Jan  3 09:24:22 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.51
Jan  3 09:24:22 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.47
Jan  3 09:24:22 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.45
Jan  3 09:24:22 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.46
Jan  3 09:24:22 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.49
Jan  3 09:24:22 dnsmasq[29358]: query[A] www.chefkoch.de from 192.168.178.23
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.49
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.46
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.45
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.47
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.51
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.48
Jan  3 09:24:22 dnsmasq[29358]: query[A] www.chefkoch.de from 192.168.178.23
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.48
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.49
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.46
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.45
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.47
Jan  3 09:24:22 dnsmasq[29358]: cached www.chefkoch.de is 185.13.208.51
Jan  3 09:24:22 dnsmasq[29358]: query[AAAA] www.chefkoch.de from 192.168.178.23
Jan  3 09:24:22 dnsmasq[29358]: forwarded www.chefkoch.de to 192.168.178.2
Jan  3 09:24:22 dnsmasq[29358]: reply www.chefkoch.de is NODATA-IPv6
Jan  3 09:24:23 dnsmasq[29358]: query[A] cdn.ampproject.org from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded cdn.ampproject.org to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: reply cdn.ampproject.org is <CNAME>
Jan  3 09:24:23 dnsmasq[29358]: reply cdn-content.ampproject.org is 216.58.201.65
Jan  3 09:24:23 dnsmasq[29358]: query[A] cdn.ampproject.org from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: cached cdn.ampproject.org is <CNAME>
Jan  3 09:24:23 dnsmasq[29358]: cached cdn-content.ampproject.org is 216.58.201.65
Jan  3 09:24:23 dnsmasq[29358]: query[A] static.chefkoch-cdn.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded static.chefkoch-cdn.de to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: query[A] cdn-content.ampproject.org from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: cached cdn-content.ampproject.org is 216.58.201.65
Jan  3 09:24:23 dnsmasq[29358]: query[AAAA] cdn-content.ampproject.org from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded cdn-content.ampproject.org to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: query[A] static.chefkoch-cdn.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded static.chefkoch-cdn.de to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: query[A] img.chefkoch-cdn.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded img.chefkoch-cdn.de to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: reply static.chefkoch-cdn.de is <CNAME>
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.49
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.45
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.46
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.48
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.47
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.51
Jan  3 09:24:23 dnsmasq[29358]: query[A] api.chefkoch.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded api.chefkoch.de to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: reply cdn-content.ampproject.org is 2a00:1450:4014:800::2001
Jan  3 09:24:23 dnsmasq[29358]: query[AAAA] cdn-content.ampproject.org from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: cached cdn-content.ampproject.org is 2a00:1450:4014:800::2001
Jan  3 09:24:23 dnsmasq[29358]: query[A] img.chefkoch-cdn.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded img.chefkoch-cdn.de to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: query[A] api.chefkoch.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded api.chefkoch.de to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: reply img.chefkoch-cdn.de is <CNAME>
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is 116.202.2.230
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is 94.130.191.142
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is 116.203.4.199
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is 116.203.5.154
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is 116.202.1.149
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is 116.202.2.173
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is 116.202.1.241
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is 116.202.3.47
Jan  3 09:24:23 dnsmasq[29358]: reply api.chefkoch.de is <CNAME>
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.51
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.47
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.45
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.46
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.49
Jan  3 09:24:23 dnsmasq[29358]: reply www.chefkoch.de is 185.13.208.48
Jan  3 09:24:23 dnsmasq[29358]: query[A] fonts.googleapis.com from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded fonts.googleapis.com to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: query[A] fonts.googleapis.com from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded fonts.googleapis.com to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: query[A] img-cdn.chefkoch-cdn.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: cached img-cdn.chefkoch-cdn.de is 116.202.3.47
Jan  3 09:24:23 dnsmasq[29358]: cached img-cdn.chefkoch-cdn.de is 116.202.1.241
Jan  3 09:24:23 dnsmasq[29358]: cached img-cdn.chefkoch-cdn.de is 116.202.2.173
Jan  3 09:24:23 dnsmasq[29358]: cached img-cdn.chefkoch-cdn.de is 116.202.1.149
Jan  3 09:24:23 dnsmasq[29358]: cached img-cdn.chefkoch-cdn.de is 116.203.5.154
Jan  3 09:24:23 dnsmasq[29358]: cached img-cdn.chefkoch-cdn.de is 116.203.4.199
Jan  3 09:24:23 dnsmasq[29358]: cached img-cdn.chefkoch-cdn.de is 94.130.191.142
Jan  3 09:24:23 dnsmasq[29358]: cached img-cdn.chefkoch-cdn.de is 116.202.2.230
Jan  3 09:24:23 dnsmasq[29358]: query[AAAA] img-cdn.chefkoch-cdn.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded img-cdn.chefkoch-cdn.de to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: reply fonts.googleapis.com is 216.58.201.106
Jan  3 09:24:23 dnsmasq[29358]: query[AAAA] img-cdn.chefkoch-cdn.de from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded img-cdn.chefkoch-cdn.de to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: reply img-cdn.chefkoch-cdn.de is NODATA-IPv6
Jan  3 09:24:23 dnsmasq[29358]: query[A] ocsp.pki.goog from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded ocsp.pki.goog to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: query[A] ocsp.pki.goog from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded ocsp.pki.goog to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: reply ocsp.pki.goog is <CNAME>
Jan  3 09:24:23 dnsmasq[29358]: reply pki-goog.l.google.com is 216.58.201.99
Jan  3 09:24:23 dnsmasq[29358]: query[A] pki-goog.l.google.com from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: cached pki-goog.l.google.com is 216.58.201.99
Jan  3 09:24:23 dnsmasq[29358]: query[AAAA] pki-goog.l.google.com from 192.168.178.23
Jan  3 09:24:23 dnsmasq[29358]: forwarded pki-goog.l.google.com to 192.168.178.2
Jan  3 09:24:23 dnsmasq[29358]: reply pki-goog.l.google.com is 2a00:1450:4014:801::2003
Jan  3 09:24:24 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:24:24 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:24 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:24 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:26 dnsmasq[29358]: query[A] BRW7440BBBE561C.fritz.box from 192.168.178.23
Jan  3 09:24:26 dnsmasq[29358]: forwarded BRW7440BBBE561C.fritz.box to 192.168.178.2
Jan  3 09:24:26 dnsmasq[29358]: reply BRW7440BBBE561C.fritz.box is 192.168.178.22
Jan  3 09:24:30 dnsmasq[29358]: query[A] www.wolframalpha.com from 192.168.178.23
Jan  3 09:24:30 dnsmasq[29358]: forwarded www.wolframalpha.com to 192.168.178.2
Jan  3 09:24:30 dnsmasq[29358]: query[A] www.wolframalpha.com from 192.168.178.23
Jan  3 09:24:30 dnsmasq[29358]: forwarded www.wolframalpha.com to 192.168.178.2
Jan  3 09:24:30 dnsmasq[29358]: reply www.wolframalpha.com is 140.177.18.77
Jan  3 09:24:30 dnsmasq[29358]: reply www.wolframalpha.com is 140.177.16.21
Jan  3 09:24:30 dnsmasq[29358]: reply www.wolframalpha.com is 140.177.16.25
Jan  3 09:24:30 dnsmasq[29358]: reply www.wolframalpha.com is 140.177.16.37
Jan  3 09:24:30 dnsmasq[29358]: reply www.wolframalpha.com is 140.177.17.102
Jan  3 09:24:30 dnsmasq[29358]: reply www.wolframalpha.com is 140.177.18.13
Jan  3 09:24:30 dnsmasq[29358]: query[A] www.wolframalpha.com from 192.168.178.23
Jan  3 09:24:30 dnsmasq[29358]: cached www.wolframalpha.com is 140.177.18.13
Jan  3 09:24:30 dnsmasq[29358]: cached www.wolframalpha.com is 140.177.17.102
Jan  3 09:24:30 dnsmasq[29358]: cached www.wolframalpha.com is 140.177.16.37
Jan  3 09:24:30 dnsmasq[29358]: cached www.wolframalpha.com is 140.177.16.25
Jan  3 09:24:30 dnsmasq[29358]: cached www.wolframalpha.com is 140.177.16.21
Jan  3 09:24:30 dnsmasq[29358]: cached www.wolframalpha.com is 140.177.18.77
Jan  3 09:24:30 dnsmasq[29358]: query[AAAA] www.wolframalpha.com from 192.168.178.23
Jan  3 09:24:30 dnsmasq[29358]: cached www.wolframalpha.com is NODATA-IPv6
Jan  3 09:24:32 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:24:32 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:32 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:24:32 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:32 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:39 dnsmasq[29358]: query[A] n7j5t1wt46pg.statuspage.io from 192.168.178.23
Jan  3 09:24:39 dnsmasq[29358]: forwarded n7j5t1wt46pg.statuspage.io to 192.168.178.2
Jan  3 09:24:39 dnsmasq[29358]: forwarded n7j5t1wt46pg.statuspage.io to 192.168.178.2
Jan  3 09:24:39 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:41 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:24:41 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:41 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:41 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:51 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:24:51 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:51 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:51 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:51 dnsmasq[29358]: query[AAAA] diagnostics.meethue.com from 192.168.178.20
Jan  3 09:24:51 dnsmasq[29358]: exactly blacklisted diagnostics.meethue.com is ::
Jan  3 09:24:51 dnsmasq[29358]: query[A] diagnostics.meethue.com from 192.168.178.20
Jan  3 09:24:51 dnsmasq[29358]: exactly blacklisted diagnostics.meethue.com is 0.0.0.0
Jan  3 09:24:51 dnsmasq[29358]: query[AAAA] www.ecdinterface.philips.com from 192.168.178.20
Jan  3 09:24:51 dnsmasq[29358]: exactly blacklisted www.ecdinterface.philips.com is ::
Jan  3 09:24:51 dnsmasq[29358]: query[A] www.ecdinterface.philips.com from 192.168.178.20
Jan  3 09:24:51 dnsmasq[29358]: exactly blacklisted www.ecdinterface.philips.com is 0.0.0.0
Jan  3 09:24:51 dnsmasq[29358]: query[A] startpage.com from 192.168.178.23
Jan  3 09:24:51 dnsmasq[29358]: forwarded startpage.com to 192.168.178.2
Jan  3 09:24:51 dnsmasq[29358]: query[A] startpage.com from 192.168.178.23
Jan  3 09:24:51 dnsmasq[29358]: forwarded startpage.com to 192.168.178.2
Jan  3 09:24:51 dnsmasq[29358]: reply startpage.com is 145.131.132.84
Jan  3 09:24:52 dnsmasq[29358]: query[A] startpage.com from 192.168.178.23
Jan  3 09:24:52 dnsmasq[29358]: cached startpage.com is 145.131.132.84
Jan  3 09:24:52 dnsmasq[29358]: query[AAAA] startpage.com from 192.168.178.23
Jan  3 09:24:52 dnsmasq[29358]: forwarded startpage.com to 192.168.178.2
Jan  3 09:24:52 dnsmasq[29358]: reply startpage.com is NODATA-IPv6
Jan  3 09:24:56 dnsmasq[29358]: query[A] BRW7440BBBE561C.fritz.box from 192.168.178.23
Jan  3 09:24:56 dnsmasq[29358]: forwarded BRW7440BBBE561C.fritz.box to 192.168.178.2
Jan  3 09:24:56 dnsmasq[29358]: reply BRW7440BBBE561C.fritz.box is 192.168.178.22
Jan  3 09:24:57 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:24:57 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:57 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:24:57 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:24:57 dnsmasq[29358]: query[A] www.youtube.com from 192.168.178.23
Jan  3 09:24:57 dnsmasq[29358]: forwarded www.youtube.com to 192.168.178.2
Jan  3 09:24:57 dnsmasq[29358]: forwarded www.youtube.com to 192.168.178.2
Jan  3 09:24:57 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:02 dnsmasq[29358]: query[A] www.google.de from 192.168.178.23
Jan  3 09:25:02 dnsmasq[29358]: forwarded www.google.de to 192.168.178.2
Jan  3 09:25:02 dnsmasq[29358]: forwarded www.google.de to 192.168.178.2
Jan  3 09:25:02 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:03 dnsmasq[29358]: query[A] www.google.com from 192.168.178.23
Jan  3 09:25:03 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:03 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:03 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:07 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:25:07 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:25:07 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:25:07 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:12 dnsmasq[29358]: query[A] www.google.com from 192.168.178.14
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:12 dnsmasq[29358]: query[A] www.google.com from 192.168.178.14
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:12 dnsmasq[29358]: query[A] www.google.com from 192.168.178.14
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:12 dnsmasq[29358]: query[A] www.google.com from 192.168.178.14
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:12 dnsmasq[29358]: query[A] www.google.com from 192.168.178.14
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:12 dnsmasq[29358]: query[A] www.google.com from 192.168.178.14
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: forwarded www.google.com to 192.168.178.2
Jan  3 09:25:12 dnsmasq[29358]: reply error is SERVFAIL
Jan  3 09:25:13 dnsmasq[29358]: query[A] spclient.wg.spotify.com from 192.168.178.23
Jan  3 09:25:13 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:25:13 dnsmasq[29358]: forwarded spclient.wg.spotify.com to 192.168.178.2
Jan  3 09:25:13 dnsmasq[29358]: reply error is SERVFAIL

Trying to reach google from the pi:

pi@raspberrypi:~ $ ping google.de
PING google.de (172.217.21.227) 56(84) bytes of data.
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=1 ttl=119 time=14.8 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=2 ttl=119 time=14.7 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=3 ttl=119 time=14.4 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=4 ttl=119 time=14.7 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=5 ttl=119 time=14.5 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=6 ttl=119 time=14.3 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=7 ttl=119 time=14.4 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=8 ttl=119 time=14.7 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=9 ttl=119 time=14.5 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=10 ttl=119 time=14.7 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=11 ttl=119 time=14.7 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=12 ttl=119 time=14.2 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=13 ttl=119 time=14.5 ms
64 bytes from fra16s13-in-f227.1e100.net (172.217.21.227): icmp_seq=14 ttl=119 time=14.7 ms
^C
--- google.de ping statistics ---
14 packets transmitted, 14 received, 0% packet loss, time 91ms
rtt min/avg/max/mdev = 14.196/14.548/14.825/0.246 ms
pi@raspberrypi:~ $ ^C
pi@raspberrypi:~ $ traceroute -n 172.217.21.227
traceroute to 172.217.21.227 (172.217.21.227), 30 hops max, 60 byte packets
 1  192.168.178.2  0.600 ms  0.513 ms  0.550 ms
 2  62.155.245.116  4.961 ms  6.111 ms  5.989 ms
 3  217.5.117.22  14.037 ms  14.911 ms  14.789 ms
 4  217.5.117.22  14.445 ms  14.324 ms  14.202 ms
 5  72.14.195.222  13.364 ms  13.516 ms  13.391 ms
 6  10.252.36.254  13.674 ms 10.252.55.62  13.348 ms 10.252.36.254  13.001 ms
 7  172.253.75.126  14.091 ms 108.170.247.113  13.319 ms 209.85.252.232  12.744 ms
 8  74.125.244.83  13.179 ms 108.170.247.103  12.736 ms 74.125.244.100  12.603 ms
 9  172.253.70.103  14.746 ms 172.253.72.249  14.204 ms 172.253.70.103  14.128 ms
10  142.250.46.170  15.666 ms  16.235 ms  17.016 ms
11  209.85.252.215  17.089 ms 108.170.226.2  16.084 ms 209.85.252.215  17.644 ms
12  108.170.252.65  17.330 ms 108.170.251.193  16.279 ms 108.170.252.65  16.769 ms
13  108.170.235.249  15.377 ms 108.170.235.251  15.944 ms 108.170.235.249  15.277 ms
14  172.217.21.227  15.307 ms  15.203 ms  15.138 ms
pi@raspberrypi:~ $ traceroute -n google.de
traceroute to google.de (172.217.21.227), 30 hops max, 60 byte packets
 1  192.168.178.2  0.507 ms  0.469 ms  0.445 ms
 2  62.155.245.116  17.246 ms  17.376 ms  17.219 ms
 3  * * *
 4  * * *
 5  72.14.195.222  12.992 ms  13.001 ms  12.880 ms
 6  * * *
 7  74.125.244.97  13.866 ms 209.85.253.76  11.919 ms 172.253.75.126  13.126 ms
 8  74.125.244.82  14.419 ms 108.170.247.103  30.725 ms 74.125.244.82  13.644 ms
 9  172.253.72.249  14.252 ms 216.239.62.243  14.120 ms 172.253.72.249  14.105 ms
10  172.253.79.190  16.178 ms  16.094 ms 142.250.46.170  15.967 ms
11  72.14.239.244  15.906 ms 209.85.252.215  16.615 ms 72.14.239.244  16.158 ms
12  108.170.251.193  15.694 ms 108.170.252.65  16.624 ms 108.170.251.193  15.196 ms
13  108.170.235.249  15.607 ms  15.031 ms  15.344 ms
14  172.217.21.227  15.298 ms  14.999 ms  15.271 ms

Any ideas?

What I don't understand either, is why the upstream DNS-server should be the issue. I've used the previous DNS-servers since I've gotten the Fritzbox about a year ago and the pi-hole was only added between client and Fritzbox initially and now again.

Update

Youtube came back by itsself after an hour, the rest after i changed the setup back to client - fritzbox - pi-hole - DNS server (cloudflare). Having the pihole after the fritzbox seems to be more stable, though in theory it shouldn't make a difference. This is weird!!!

deHakkelaar · January 3, 2021, 5:24pm

One thing is obvious/common, its always the upstream configured DNS server(s) thats not replying or failing (from below):

recursive:

During the outage there are simply no replies in the pihole.log. For example from following query:
Dec 29 23:53:15 dnsmasq[18045]: query[A] encrypted-tbn0.gstatic.com from 192.168.178.2
Dec 29 23:53:15 dnsmasq[18045]: forwarded encrypted-tbn0.gstatic.com to 46.182.19.48
Dec 29 23:53:15 dnsmasq[18045]: reply encrypted-tbn0.gstatic.com is 142.250.74.206
The last line would be missing.

recursive:

Jan  3 09:24:09 dnsmasq[29358]: query[A] www.google.de from 192.168.178.23
Jan  3 09:24:09 dnsmasq[29358]: forwarded www.google.de to 192.168.178.2
Jan  3 09:24:09 dnsmasq[29358]: forwarded www.google.de to 192.168.178.2
Jan  3 09:24:09 dnsmasq[29358]: reply error is SERVFAIL

Above, and results for the nslookup's, makes me believe nothing wrong with the Pi-hole software.
I suspect you've missconfigured something somewhere, some router security feature like "rebind protection" blocking or created a "DNS forwarding loop" somewhere.
Try setup the router to advertise the Pi-hole IP for DNS to the clients through DHCP like described in below doc:

And dont configure you router to use Pi-hole upstream in the router WAN/Internet DNS settings and thus possibly creating a "DNS forwarding loop" or partial loop (if configure conditional forwarding in Pi-hole).
Also when configure an upstream DNS server for Pi-hole that has DNSSEC, make sure date/time is in sync/not too far off on the Pi-hole host:

timedatectl

recursive · January 11, 2021, 7:08am

Final Update:

I've finally figured it out and you are completely correct.

In the initial setup, where I would not receive a reply to DNS queries, the issue were the DNS servers. The first DNS-server (185.95.218.42) from Digitale Gesellschaft is apparently configured to only support DoT and DoH, with no fallback to unencrypted DNS queries. And the second DNS-server (46.182.19.48) from Digitalcourage had frequent outages in the past few weeks, (Zensurfreier DNS-Server | Digitalcourage). So without me noticing, my initial setup relied on only one DNS server with frequent outages.
The second setup with cloudflare, where I received a servfail, seems to have failed due to pihole being before the fritzbox. I do however not understand, why that only happened with some websites after some time. The rebind protection you mentioned is enabled in the router by default and cannot be disabled as far as I know, though pi.hole is added as an exception.

Solution:
Installing cloudflared on my Raspberry Pi and editing its settings to use the DNS-server from Digitale Gesellschaft. And using the setup client - fritzbox - pi-hole - DNS server, with the Fritzbox advertising the Pi-hole IP for DNS to the clients through DHCP, as mentioned in the post above.

Thank you very much for your help @deHakkelaar! My setup finally ran without an issue for the past couple of days.

deHakkelaar · January 11, 2021, 9:25am

Yeah you probably would have figured that out with below one timing out:

You probably mean:

Client --> Pi-hole --> cloudflared --> ... --> root DNS servers

If you configured Fritzbox DHCP-->DNS to point to the Pi-hole IP only, the clients will query Pi-hole for DNS and not the Fritzbox.
You can see what DNS server(s) will be assigned to the clients through DHCP with below one run on Pi-hole:

pi@ph5:~ $ pihole-FTL dhcp-discover
[..]
   dns-server: 10.0.0.2
[..]

system · February 1, 2021, 9:25am

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.