Pihole records surge of DNS queries

smackso · May 29, 2020, 9:14pm

Hi,

I'm fairly new to Pihole and not very technical
Pihole detects a surge of DNS queries, that temporarily disconnects my internet. Originally, Pihole would crash because of the surge of DNS queires. So following possible deadlock in dataloader · Issue #1355 · pytorch/pytorch · GitHub comments, I increased the SHM size. However, as discussed this is only a bandaid solution to a larger problem.
Following the discussion from: FTL Offline - Lost Connection to API
I receive a surge of queries from these two domains
0 1121708 api.engage.bidsystem.com
1 404326 216.58.202.4.in-addr.arpa

I logged the queries as they came in to determine which device was the issue, using tail -f /var/log/pihole.log
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: reply error is SERVFAIL
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 127.17.0.1
May 30 05:19:03 dnsmasq[1460]: forwarded api.engage.bidsystem.com to 1.1.1.1
May 30 05:19:03 dnsmasq[1460]: query[A] api.engage.bidsystem.com from 127.0.0.1

And this is the FTL log
[2020-05-30 05:20:34.705 1460] Resizing "/FTL-queries" from 89653248 to 89915392
[2020-05-30 05:20:38.994 1460] Resizing "/FTL-queries" from 89915392 to 90177536
[2020-05-30 05:20:43.971 1460] Resizing "/FTL-queries" from 90177536 to 90439680
[2020-05-30 05:20:48.180 1460] Resizing "/FTL-queries" from 90439680 to 90701824
[2020-05-30 05:20:58.438 1460] Resizing "/FTL-queries" from 90701824 to 90963968
[2020-05-30 05:21:03.176 1460] Resizing "/FTL-queries" from 90963968 to 91226112
[2020-05-30 05:21:18.942 1460] Resizing "/FTL-queries" from 91226112 to 91488256
[2020-05-30 05:21:41.008 1460] Resizing "/FTL-queries" from 91488256 to 91750400
[2020-05-30 05:22:03.200 1460] Resizing "/FTL-queries" from 91750400 to 92012544
[2020-05-30 05:22:07.724 1460] Resizing "/FTL-queries" from 92012544 to 92274688
[2020-05-30 05:22:43.593 1460] Resizing "/FTL-queries" from 92274688 to 92536832

And if I black list the domain, I just get
May 30 05:32:17 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:17 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:17 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:17 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:17 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:17 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:17 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:17 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:17 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:17 dnsmasq[1460]: Maximum number of concurrent DNS queries reached (max: 150)
May 30 05:32:27 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:27 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:27 dnsmasq[1460]: query[A] catalog-public-service-prod06.ol.epicgames.com from 172.17.0.1
May 30 05:32:27 dnsmasq[1460]: cached catalog-public-service-prod06.ol.epicgames.com is
May 30 05:32:27 dnsmasq[1460]: cached catalogv2-svc-prod06-pub-772318179.us-east-1.elb.amazonaws.com is 54.174.108.91
May 30 05:32:27 dnsmasq[1460]: cached catalogv2-svc-prod06-pub-772318179.us-east-1.elb.amazonaws.com is 18.211.165.162
May 30 05:32:27 dnsmasq[1460]: cached catalogv2-svc-prod06-pub-772318179.us-east-1.elb.amazonaws.com is 54.82.245.68
May 30 05:32:27 dnsmasq[1460]: cached catalogv2-svc-prod06-pub-772318179.us-east-1.elb.amazonaws.com is 107.21.53.189
May 30 05:32:27 dnsmasq[1460]: cached catalogv2-svc-prod06-pub-772318179.us-east-1.elb.amazonaws.com is 34.236.122.157
May 30 05:32:27 dnsmasq[1460]: cached catalogv2-svc-prod06-pub-772318179.us-east-1.elb.amazonaws.com is 34.193.244.184
May 30 05:32:27 dnsmasq[1460]: cached catalogv2-svc-prod06-pub-772318179.us-east-1.elb.amazonaws.com is 35.171.214.220
May 30 05:32:27 dnsmasq[1460]: cached catalogv2-svc-prod06-pub-772318179.us-east-1.elb.amazonaws.com is 34.233.159.184
May 30 05:32:27 dnsmasq[1460]: query[A] www.google.com from 172.17.0.1
May 30 05:32:27 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:27 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:27 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:27 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:27 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:27 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:27 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:27 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:27 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:27 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] fcmconnection.googleapis.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded fcmconnection.googleapis.com to 127.17.0.1
May 30 05:32:28 dnsmasq[1460]: query[A] www.google.com from 127.0.0.1
May 30 05:32:28 dnsmasq[1460]: forwarded www.google.com to 127.17.0.1

I am not too sure how to determine whats causing the issue, and how to resolve it.

Thank you,
Kind Regards
Smackso

Expected Behaviour:
Pihole and internet working normally

Actual Behaviour:
Surge of DNS queries that disconnects internet

Debug Token:
Sorry I cant upload the debug token, I am not sure why. I get the folllowing
[?] Would you like to upload the log? [y/N] y
* Using curl for transmission.
[✗] There was an error uploading your debug log.

Please try again or contact the Pi-hole team for assistance.
A local copy of the debug log can be found at: /var/log/pihole_debug.log

deHakkelaar · May 29, 2020, 9:41pm

Seems as if you've created a DNS loop.
IP 127.17.0.1 seems to be one of your upstream DNS servers configured in Pihole.
But 127.17.0.1 is Pi-hole:

pi@ph5:~ $ dig +short chaos txt version.bind @127.17.0.1
"dnsmasq-pi-hole-2.81"

So DNS queries go loopty loop.

smackso · May 29, 2020, 10:29pm

Okay, so I just remove the 127.17.0.1 from the upstream DNS servers,
and replace it with another server, ie Cloudflare.
I was just following a guide from: Install Pi-hole on Windows 10 and live ad-free forever | Andrew Denty, who had noted that the DNS1 server had to be localhost in order for the Pihole to work.

Thank you!!

DanSchaper · May 29, 2020, 11:14pm

Is this running on docker? DNS1 is an environment variable for Docker. It's not for an upstream value.

Version 5 eliminates the need for docker containers to use localhost anymore.

smackso · May 30, 2020, 12:43am

Yes, its running on docker on my main pc. I am not too sure what you mean.
I just followed the guide from above, and it advised to put DNS1 as 127.17.0.1.
I had a look at the environmental variables for docker on the Github page. And it says DNS1 is for the primary upstream provider.

My internet has been working fine for the last 2 hours.

deHakkelaar · May 30, 2020, 1:11pm

So many blogs with Pi-hole instructions that fall short.
This one included.
Read the docs and things might clear up a bit:

smackso · May 30, 2020, 10:29pm

Yeah I tried following the setup link, but I am not very technical. I appreciate the help.

My internet has been working fine for the last 24 hrs.
Thank you!

system · June 20, 2020, 10:41pm

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.