Pihole problem

DanSchaper · February 20, 2020, 1:40am

In CMD try nslookup pi.hole and nslookup doubleclick.net

bananasplit · February 20, 2020, 1:43am

nslookup.txt (137 Bytes)

bananasplit · February 20, 2020, 1:44am

double.txt (133 Bytes)

DanSchaper · February 20, 2020, 1:50am

Why have you disabled query logging?

bananasplit · February 20, 2020, 1:51am

In a forum it stated that it destroys SD..But now I have it enabled..

DanSchaper · February 20, 2020, 1:54am

Okay, try nslookup doubleclick.com and check the web interface to see if it's showed as OK or Pi-hole'd.

bananasplit · February 20, 2020, 1:56am

for the first time ever,I saw something that said status blocked (gravity)..I think that's good,but you know better..

DanSchaper · February 20, 2020, 1:58am

What domain was blocked?

bananasplit · February 20, 2020, 1:59am

doubleclick.com shows in red and blocked (gravity)

jfb · February 20, 2020, 2:06am

And what browser are you using?

bananasplit · February 20, 2020, 2:06am

Chrome..But I also tried Firefox with no luck..

jfb · February 20, 2020, 2:09am

If you are seeing ads in that page, then that browser or client is not using Pi-Hole. Tail the Pi-Hole log and ensure that the DNS traffic from that browser is going to Pi-Hole.

bananasplit · February 20, 2020, 2:16am

If i correctly understand what you said,I can confirm that the traffic from my browser goes through pi-hole..it has logs like this:

Feb 20 04:15:03 dnsmasq[4030]: query[A] data.cnn.com from 192.168.1.12
Feb 20 04:15:03 dnsmasq[4030]: /etc/pihole/gravity.list data.cnn.com is 0.0.0.0
Feb 20 04:15:03 dnsmasq[4030]: query[A] data.cnn.com from 192.168.1.12
Feb 20 04:15:03 dnsmasq[4030]: /etc/pihole/gravity.list data.cnn.com is 0.0.0.0
Feb 20 04:15:03 dnsmasq[4030]: query[A] e12596.dscj.akamaiedge.net from 192.168.1.12
Feb 20 04:15:03 dnsmasq[4030]: forwarded e12596.dscj.akamaiedge.net to 149.112.112.112
Feb 20 04:15:03 dnsmasq[4030]: query[A] data.cnn.com from 192.168.1.12
Feb 20 04:15:03 dnsmasq[4030]: /etc/pihole/gravity.list data.cnn.com is 0.0.0.0
Feb 20 04:15:03 dnsmasq[4030]: query[AAAA] e12596.dscj.akamaiedge.net from 192.168.1.12
Feb 20 04:15:03 dnsmasq[4030]: forwarded e12596.dscj.akamaiedge.net to 149.112.112.112
Feb 20 04:15:04 dnsmasq[4030]: reply e12596.dscj.akamaiedge.net is 23.36.225.200
Feb 20 04:15:04 dnsmasq[4030]: reply e12596.dscj.akamaiedge.net is 2a02:26f0:6b:581::3134
Feb 20 04:15:04 dnsmasq[4030]: reply e12596.dscj.akamaiedge.net is 2a02:26f0:6b:58a::3134`

bananasplit · February 20, 2020, 2:21am

but again,on the CNN page provided before,it displays an ad from Lidl.Also,on other test pages it displays ads..

DanSchaper · February 20, 2020, 2:29am

Pi-hole is working, it's blocking domains. What lists do you have enabled? I'm pretty much running out of ideas so I'll be backing out of the conversation soon.

jfb · February 20, 2020, 2:33am

Use the tools linked in the earlier reply to determine the source of the ads.

bananasplit · February 20, 2020, 2:38am

if you are asking about my upstream dns servers I had quad9.But also tried all of them together,then tried cloudflare alone,google alone..In any case,the same.
EVERY page displays ads.

bananasplit · February 20, 2020, 2:40am

It's not that a single page displays ads.it's that ANY page which has ads,displays them..I wish I could show you..

jfb · February 20, 2020, 2:41am

You can grab a screen capture and post that graphic directly into a reply here. Also post the complete URL and I'll see if I can duplicate.

bananasplit · February 20, 2020, 2:44am

let's say https://edition.cnn.com/

ads both right (the shoe) and on top..(previously on top it had a lidl ad)