Pi-hole v6 blocking an entry with a regex allow

I recently upgraded from v5 to v6. While on v5, I had a regex allow of (\.|^)microsoft\.com$

After the v6 upgrade, the domain browser.pipe.aria.microsoft.com was blocked.

Clicking on the block entry shows:

Found 1 domain exactly matching 'browser.pipe.aria.microsoft.com':

- [(\.|^)microsoft\.com$]
regex allow domain
added: 2025-01-24 10:15:05
last modified: 2025-01-24 10:15:05
enabled, used in 1 group
no comment

But it also shows 2 entries on Gravity block lists ( [https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts] and [https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/pro.plus.txt] ).

Why didn't the regex allow take priority over the 2 block list entries?

Per this post on reddit, https://www.reddit.com/r/pihole/comments/1itt7me/v6_antigravity_domain/, a domain found on a regex whitelist should cause the rest of the tests to be skipped. Am I missing something or is there some reason why the regex whitelist wasn't respected?

Please upload a debug log and post just the token URL that is generated after the log is uploaded by running the following command from the Pi-hole host terminal:

pihole -d

or if you run your Pi-hole as a Docker container:

docker exec -it <pihole-container-name-or-id> pihole -d

where you substitute <pihole-container-name-or-id> as required.

Thanks for the quick reply. Here's the debug token:
https://tricorder.pi-hole.net/pBera8NL/

Additional info: I have 2 Pi-holes, and both were updated within a few minutes of each other. This log is from what is my secondary Pi-hole. I don't see any requests to browser.pipe.aria.microsoft.com on my primary Pi-hole.

What was shown in the query log table exactly?

Click on the table row to expand the details and post here the details, specially Query Status field.

Here you go.

What are the outputs of the following commands from the Pi-hole host OS terminal:

dig browser.pipe.aria.microsoft.com @127.0.0.1

Here you go:

The domain was not blocked, as you expected.

Could you provide the matching entries from pihole.log, e.g. for your previous lookup around 15:43:

sudo grep 15:43.*browser.pipe.aria.microsoft.com /var/log/pihole.log

Here you go:

image

The domain was not blocked, as you expected.

Why does the query log show it as blocked by gravity? I didn't expect it to be blocked. I expected my regex whiitelist to be respected.

FYI, upgraded to 6.0.3 this AM, and now the request shows a green reply.

1 Like

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.