Pihole seems to work and not work at the same time?

[matthewrg]

Hello! After much chagrin and head bashing I finally got pihole to run on a raspber But the problem I’m having now is I can see pihole lists all of devices as clients but isn’t actually blocking ads! I know this because turtlecute reports a score of 5 on my Windows PC using Microsoft Edge. Can you please help?

• Operating System: Windows 11 Pro
• Raspberry Pi 3
• Netgear C7000v2

Debug Token:

Debug log removed by moderator

We only want the Token posted, not the log contents. This is done to protect your privacy.

[deHakkelaar]

@matthewrg

Recursive DNS server 1/2: 2001:1998:f00:1::1
Recursive DNS server 2/2: 2001:1998:f00:2::1

Your clients are bypassing Pi-hole via above DNS servers that are not Pi-holed:

$ dig +short -x 2001:1998:f00:1::1
dns-cac-lb-01.rr.com.

Most DNS implementations prefer IPv6 over IPv4 for transport.

You have a couple of options:

• Disable DNS servers advertised via IPv6 RA (Router Advertisement) on the router;
• Advertise the Pi's ULA IP as the sole DNS server via IPv6 RA on the router;
• Disable IPv6 support on the router for the LAN side only.

Check out "Router setup" below with some examples:

Overview of Pi-hole - Pi-hole documentation

[jfb]

@matthewrg

isn’t actually blocking ads! I know this because turtlecute reports a score of 5 on my Windows PC using Microsoft Edge.

Do you see ads on your devices?

From a client that you believe should be connected to the Pi-Hole for DNS, from the command prompt or terminal on that client (and not via ssh or Putty to the Pi), what is the output of

nslookup pi.hole

nslookup flurry.com

nslookup flurry.com 192.168.0.16

[matthewrg]

C:\Users\Owner>nslookup pi.hole
Server: dns-cac-lb-01.rr.com
Address: 2001:1998:f00:1::1

*** dns-cac-lb-01.rr.com can't find pi.hole: Non-existent domain

C:\Users\Owner>nslookup flurry.com
Server: dns-cac-lb-01.rr.com
Address: 2001:1998:f00:1::1

Non-authoritative answer:
Name: flurry.com
Addresses: 76.223.84.192
13.248.158.7

C:\Users\Owner>nslookup flurry.com 192.168.0.16
Server: pi.hole
Address: 192.168.0.16

Name: flurry.com
Addresses: ::
0.0.0.0

[matthewrg]

Unfortunately it looks like my router isn’t going to allow me to make the required changes.

[deHakkelaar]

Ask your ISP if they can help get rid of those two IPv6 RA advertised RDNSS addresses (Recursive DNS Server) to allow you to run your own DNS service:

RFC 8106: IPv6 Router Advertisement Options for DNS Configuration

They often have more options available then you do.
If you run below one, it will broadcast an IPv4 DHCPDISCOVER plus an IPv6 RS (Router Solicitation) and catches the responses from the router(s) etc:

sudo pihole-FTL dhcp-discover

If correct, you should see below two lines in the output that you need to get rid of:

@matthewrg

Recursive DNS server 1/2: 2001:1998:f00:1::1
Recursive DNS server 2/2: 2001:1998:f00:2::1

As a last resort, you could ask them to disable IPv6 support on the router entirely for the LAN side only.
I run without just fine.