# PiHole is connected to network and can see devices. Doesn't block ads

**URL:** <https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909>\
**Category:** Help\
**Created:** [July 13, 2023, 1:32am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909 "2023-07-13T01:32:20Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [July 13, 2023, 1:32am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/1 "2023-07-13T01:32:20Z")

</div>

## Expected Behaviour:

Block ads. Testing on Android device. Setup on Windows 10.

## Actual Behaviour:

I previously had this PiHole up and running smoothly at a previous house. I couldn't get it to work at my new place and have done a fresh install. I have tried numerous things with no results and I suspect the router settings. I can see the devices when I log into my PiHole but it only picks up a few queries.

I have kind of reset everything so the debug my not show the correct settings. I've tried setting the DNS as my PiHoles ip on the router and that doesn't work. From my rudimentary understanding, I believe the DNS to be the culprit because the query log shows just a handful of domains being picked up.

## Debug Token:

[https://tricorder.pi-hole.net/HyP5aOVj/](https://tricorder.pi-hole.net/HyP5aOVj/)

---

<div class="post-metadata">

**Author:** ![rdwebdesign](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/rdwebdesign/32/51363_2.png) [@rdwebdesign](https://discourse.pi-hole.net/u/rdwebdesign)\
**Post date:** [July 13, 2023, 3:54am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/2 "2023-07-13T03:54:28Z")

</div>

The debug log shows Pi-hole is working, but your router is not distributing Pi-hole's IP as DNS server.  
It is actually advertising itself:

```auto
      router: 192.168.1.1
      domain-name: "lan"
      dns-server: 192.168.1.1

```

> [@mitchbade](#):
>
> I've tried setting the DNS as my PiHoles ip on the router and that doesn't work.

Where did you try to set the IP?  
On the DHCP (sometimes is called LAN or local network) section? Or on the WAN / Internet section?

You should try to set Pi-hole as DNS server on the DHCP/LAN section.  
After that you'll need to force the devices to renew DHCP leases, so they can use the new settings.

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [July 13, 2023, 4:14am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/3 "2023-07-13T04:14:42Z")

</div>

![image](https://discourse.pi-hole.net/uploads/default/original/3X/e/e/ee60414e7ce7d94054218715a32ca3503181d0ad.png)

 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/b/a/ba0e22f3e8690fe9647dbb9c575afaa6a760a1d3.png)

I tried messing around with the addresses section as well to no avail.

Here's the most current debug log.

[https://tricorder.pi-hole.net/xSvnuwpJ/](https://tricorder.pi-hole.net/xSvnuwpJ/)

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [July 13, 2023, 1:27pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/4 "2023-07-13T13:27:28Z")

</div>

While the setting page looks promising, it doesn't say if the DNS setting apply to the router itself (WAN) or the DHCP (LAN).  
There seems to be no specific setting for DNS under the LAN tab.

In you last debug log, your router still advertises only itself as DNS server.

You could try to disable the routers DHCP server and activate Pi-holes DHCP server. If you can't disable it, limit the DHCP as much as possible and use a non-overlapping pool on Pi-hole.

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [July 13, 2023, 4:28pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/5 "2023-07-13T16:28:04Z")

</div>

Would that look something like this? I had tried this setup in the past with no luck. The debug log still shows the router as the DNS.

(I tried it both with the routers DNS option turned off and on)

 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/7/8/78ca934cee93170cccab3675361d50816a0984c2.png)

 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/0/0/001995aba198707cd93ee911220198f0c43ecb04.png)

[https://tricorder.pi-hole.net/P8zcqMhe/](https://tricorder.pi-hole.net/P8zcqMhe/)

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [July 13, 2023, 5:06pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/6 "2023-07-13T17:06:06Z")

</div>

The debug now shows rightfully 2 DHCP servers on your network. One of them (Pi-hole) advertises itself as DNS server.

```auto
      broadcast: 192.168.1.255
      dns-server: 192.168.1.70
      domain-name: "lan"
      router: 192.168.1.1

```

You need to dis/reconnect your devices from the network to pickup the new settings.

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [July 13, 2023, 5:34pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/7 "2023-07-13T17:34:28Z")

</div>

I've tried restarting my router, PiHole and phone(along with forgetting the network and starting a new connection). Same result. Would a full unplug of everything be necessary?

Here are my phone settings just to make sure I'm doing those right.

 ![Screenshot_20230713-122705](https://discourse.pi-hole.net/uploads/default/original/3X/6/b/6b1dadd15ad64d2ed9dacb18ec144dee456a8481.png)

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [July 13, 2023, 6:06pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/8 "2023-07-13T18:06:21Z")

</div>

Don't insert another DNS server next to Pi-hole. Why don't you use IP assignment via DHCP? Did you turn off Private DNS?

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [July 13, 2023, 6:37pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/9 "2023-07-13T18:37:24Z")

</div>

Please forgive me if I misinterpret anything as I have a basic understanding of these settings.

> insert another DNS

If that's referring to the 8.8.4.4 address, that's actually blank. There's no address there.

> IP assignment via DHCP

I thought I had to manually point my phone to the Pi-hole using the static setting? I've tried using the DHCP setting on my phone and get the same result.

> turn off Private DNS

I turned it off yesterday as a potential solution and have kept it off since.

 ![Screenshot_20230713-132919](https://discourse.pi-hole.net/uploads/default/original/3X/5/c/5c4c19ae6c2167383f809bb119e3e25189df72e0.png)

I really appreciate both of you helping me.

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [July 13, 2023, 8:17pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/10 "2023-07-13T20:17:58Z")

</div>

> [@mitchbade](#):
>
> If that's referring to the 8.8.4.4 address, that's actually blank.

Ah... I didn't spot that.

> [@mitchbade](#):
>
> I thought I had to manually point my phone to the Pi-hole using the static setting? I've tried using the DHCP setting on my phone and get the same result.

In theory with the above setup (2 DHCP servers), your phone should pick up Pi-hole as DNS server via DHCP as well.

> [@mitchbade](#):
>
> I turned it off yesterday as a potential solution and have kept it off since.

Good.

\_\_

So despite static IP on your phone you don't see queries on the Pi-hole's Query log?

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [July 14, 2023, 12:50am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/11 "2023-07-14T00:50:46Z")

</div>

> [@yubiuser](#):
>
> So despite static IP on your phone you don't see queries on the Pi-hole's Query log?

I can see only a handful of queries. It's usually from when I restart a device so I know it's talking to it. I use an app and Chrome to test each time and ads have shown up every time. I've tried turning off mobile data and no results. I tried it on my desktop while turning off uBlock and there were ads everywhere.

Just to recap, here is where everything is set and the most current debug log:

This is the query log after browsing for a while on my phone and desktop.

 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/d/2/d26435c2439c6a0700b3d0dac4cc4627ed5200fc.png)  
 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/1/4/14955c04ff8c2aa2425e4dfe4d3a33c4f53b2bf8.png)  
 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/5/8/58877be2b339a0219d74d5e85f72093dff91a5e5.png)  
 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/3/1/312093d61df224bea5f4fb47ef7d767527775af6.png)  
 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/2/d/2d174269e22ace061270518bc326cae0e893d2d5.png)  
 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/5/5/55a059963f5694c06383c256159b11859bbf8e5f.png)

[https://tricorder.pi-hole.net/dHFOMvsq/](https://tricorder.pi-hole.net/dHFOMvsq/)

---

<div class="post-metadata">

**Author:** ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)\
**Post date:** [July 18, 2023, 8:24pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/12 "2023-07-18T20:24:53Z")

</div>

I'm not sure why it's not working. It looks like your `RokuLivingRoom` is using Pi-hole as DNS server and a device with IP ending in `.180` (which interestingly is outside of your DHCP scope) as well.

You debug log expired, please generate a new one.

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [July 18, 2023, 10:52pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/13 "2023-07-18T22:52:38Z")

</div>

I believe that .180 address is my desktop that I've been troubleshooting everything on which is interesting.

Would having my network hidden be an issue? It's currently hidden but I have tried it with it not and it made no discernable difference.

Current debug log as of today: [https://tricorder.pi-hole.net/VxypHNPT/](https://tricorder.pi-hole.net/VxypHNPT/)

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [August 2, 2023, 4:01pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/14 "2023-08-02T16:01:07Z")

</div>

Any possible solution?

Posting a reply so the topic doesn't close just yet.

---

<div class="post-metadata">

**Author:** ![deHakkelaar](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dehakkelaar/32/674_2.png) [@deHakkelaar](https://discourse.pi-hole.net/u/deHakkelaar)\
**Post date:** [August 3, 2023, 2:02am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/15 "2023-08-03T02:02:36Z")

</div>

DHCP is for IPv4.  
Have you checked for IPv6?  
Other DNS servers (not Pi-holed) can be advertised through IPv6 routere advertisement.  
On that Windows machine, what does below show when run in a CMD prompt?

`netsh interface ipv6 show dnsservers`

Are all those (if a couple of them) Pi-holed?

> [@Why should Pi-hole be my only DNS server?](https://discourse.pi-hole.net/t/why-should-pi-hole-be-my-only-dns-server/3376):
>
> Reduced Ad Blocking Capability The main reason you should Pi-hole as your only DNS server is that you will see increased performance in the blocking of ads. If you have two DNS servers (Pi-hole and something else), your network clients may not always query Pi-hole for name resolution. If a query happens to be answered from a non-Pi-hole DNS server, your block lists will not apply (since that DNS server doesn't know about them). All Queries Need To Go Through Pi-hole First Since other DNS serv…

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [August 4, 2023, 6:33pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/16 "2023-08-04T18:33:12Z")

</div>

> [@deHakkelaar](#):
>
> Have you checked for IPv6?

I think you might be onto something. Here's the log from when I ran the CMD prompt. Also, a screenshot of my router, which to my understanding, shows that a IPv6 is being used?

C:\WINDOWS\System32\>netsh interface ipv6 show dnsservers

Configuration for interface "Ethernet"  
DNS servers configured through DHCP: None  
Register with which suffix: Primary only

Configuration for interface "Local Area Connection 2"  
Statically Configured DNS Servers: fec0:0:0:ffff::1%1  
fec0:0:0:ffff::2%1  
fec0:0:0:ffff::3%1  
Register with which suffix: Primary only

Configuration for interface "Local Area Connection"  
DNS servers configured through DHCP: fec0:0:0:ffff::1%1  
fec0:0:0:ffff::2%1  
fec0:0:0:ffff::3%1  
Register with which suffix: Primary only

Configuration for interface "Local Area Connection\* 1"  
DNS servers configured through DHCP: fec0:0:0:ffff::1%1  
fec0:0:0:ffff::2%1  
fec0:0:0:ffff::3%1  
Register with which suffix: Primary only

Configuration for interface "Local Area Connection\* 10"  
Statically Configured DNS Servers: fec0:0:0:ffff::1%1  
fec0:0:0:ffff::2%1  
fec0:0:0:ffff::3%1  
Register with which suffix: Primary only

Configuration for interface "Local Area Connection\* 13"  
DNS servers configured through DHCP: fec0:0:0:ffff::1%1  
fec0:0:0:ffff::2%1  
fec0:0:0:ffff::3%1  
Register with which suffix: Primary only

Configuration for interface "Wi-Fi"  
DNS servers configured through DHCP: 2001:4860:4860::8888  
2001:4860:4860::8844  
Register with which suffix: Primary only

Configuration for interface "Loopback Pseudo-Interface 1"  
Statically Configured DNS Servers: fec0:0:0:ffff::1%1  
fec0:0:0:ffff::2%1  
fec0:0:0:ffff::3%1  
Register with which suffix: Primary only

 ![image](https://discourse.pi-hole.net/uploads/default/original/3X/1/b/1b4777a6765482e310e85773b02f7cdd628b086e.png)

---

<div class="post-metadata">

**Author:** ![deHakkelaar](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dehakkelaar/32/674_2.png) [@deHakkelaar](https://discourse.pi-hole.net/u/deHakkelaar)\
**Post date:** [August 4, 2023, 8:05pm UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/17 "2023-08-04T20:05:51Z")

</div>

> [@mitchbade](#):
>
> Configuration for interface "Wi-Fi"  
> DNS servers configured through DHCP: 2001:4860:4860::8888  
> 2001:4860:4860::8844  
> Register with which suffix: Primary only

Is above client connected through Wifi?  
Both above IP's are Google's and would cause the clients to use these DNS servers bypassing Pi-hole blocking (IPv6 is preferred over IPv4):

```auto
pi@ph5b:~ $ dig +short -x 2001:4860:4860::8888
dns.google.

```

```auto
pi@ph5b:~ $ dig +short -x 2001:4860:4860::8844
dns.google.

```

Consult your router manual how to configure DNS for IPv6.  
Or if not possible, you could opt to disable IPv6 support on the router entirely **for your LAN only**... if router settings allow.

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [August 5, 2023, 1:12am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/18 "2023-08-05T01:12:24Z")

</div>

> [@deHakkelaar](#):
>
> Is above client connected through Wifi?

How can I tell what client that is? The only thing using LAN right now is two TV's so it's possible it's one of those. My phone still shows ads and I can't even disable IPv6 on that.

> [@deHakkelaar](#):
>
> Consult your router manual how to configure DNS for IPv6.

The Google Fiber router only allows me to enter IPv4 addresses for DNS. Searching around, it doesn't seem I can configure for IPv6. Could you elaborate on what that entails because I'm not sure I'm looking in the right place.

> [@deHakkelaar](#):
>
> Or if not possible, you could opt to disable IPv6 support on the router entirely

Don't think this is possible with the Google Fiber router.

Would I be able to disable IPv6 if I bought a specific router or is that an ISP controlled thing?

---

<div class="post-metadata">

**Author:** ![mitchbade](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/mitchbade/32/36966_2.png) [@mitchbade](https://discourse.pi-hole.net/u/mitchbade)\
**Post date:** [August 5, 2023, 1:18am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/19 "2023-08-05T01:18:55Z")

</div>

Or hell, I'm open to switching ISP's at this point.

---

<div class="post-metadata">

**Author:** ![deHakkelaar](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dehakkelaar/32/674_2.png) [@deHakkelaar](https://discourse.pi-hole.net/u/deHakkelaar)\
**Post date:** [August 5, 2023, 3:11am UTC](https://discourse.pi-hole.net/t/pihole-is-connected-to-network-and-can-see-devices-doesnt-block-ads/63909/20 "2023-08-05T03:11:13Z")

</div>

> [@mitchbade](#):
>
> How can I tell what client that is?

With "client" I meant the Windows machine that you run that **netsh** command on.  
That command only exists on MS OS'es.  
And that MS client having Google's IPv6 addresses configured for DNS probably means all your clients have them configured.  
Below command run on that MS machine should also confirm having IPv6 DNS addresses configured:

`ipconfig /all`

Those IPv6 RA's are coming from your router and if you cant change or disable IPv6 RA DNS, only thing left is configuring all your devices with static DNS IP details manually.

> [@mitchbade](#):
>
> Would I be able to disable IPv6 if I bought a specific router or is that an ISP controlled thing?

Most affordable consumer routers allow to configure specific IPv6 settings.  
For Pi-hole the only thing important is that the router supports advertising IPv6 ULA prefixes via IPv6 RA like depicted in below screenshots:

> [@Use IPv6 ULA addresses for Pi-hole](https://discourse.pi-hole.net/t/use-ipv6-ula-addresses-for-pi-hole/2127/2):
>
> Deutsche Telekom - Speedport W 723V

And that you can actually change DNS servers that are advertised via IPv6 RA (either for IPv6 SLAAC or DHCPv6 address assignment).

EDIT: This guy explains allot of those details nicely:

> **[Why You Must Use ICMPv6 Router Advertisements (RAs)](https://blogs.infoblox.com/ipv6-coe/why-you-must-use-icmpv6-router-advertisements-ras/)**
>
> ICMPv6 RA messages have deeper meanings within the context of the functionality of IPv6-enabled LAN. Read to learn about the way that people view RA messages.