Hi everyone i have installed pihole + unbound. However, i cannot use custom dns server only.
To access internet i need to pick cloudflare or other dns servers.
Otherwise its giving the error on browser that
DNS_PROBE_STARTED
I am using docker compose file.
My log file is here:
https://tricorder.pi-hole.net/8XKuAI97/
Your image does not show the unbound IP.
It should be something like 127.0.0.1#5335.
Please, post your compose file.
Here it is:
version: '3'
networks:
dns_net:
driver: bridge
ipam:
config:
- subnet: 172.95.0.0/16
proxy:
external: true
services:
pihole:
container_name: pihole2
hostname: pihole
image: pihole/pihole:latest # remember to change this if you're using rpi
networks:
dns_net:
ipv4_address: 172.95.0.7
proxy:
ports:
- "53:53/tcp"
- "53:53/udp"
- "8085:80/tcp"
#- "443:443/tcp"
environment:
TZ: 'Europe/Istanbul'
WEBPASSWORD: '*********'
PIHOLE_DNS_: '172.95.0.8#5053'
volumes:
- '/home/ubuntu/docker/pihole/etc-pihole/:/etc/pihole/'
- '/home/ubuntu/docker/pihole/etc-dnsmasq.d/:/etc/dnsmasq.d/'
restart: unless-stopped
unbound:
container_name: unbound
image: mvance/unbound-rpi:latest # remember to change this if you're using rpi
networks:
dns_net:
ipv4_address: 172.95.0.8
volumes:
- /home/ubuntu/docker/unbound:/opt/unbound/etc/unbound
ports:
- "5053:53/tcp"
- "5053:53/udp"
healthcheck:
test: ["NONE"]
restart: unless-stopped```You are using the wrong subnet range.
Docker uses IPs within 172.16.0.0/12 range (from 172.16.0.0 up to 172.31.255.255).
You need to change the IPs in your compose file, unbound and Pi-hole settings.
You are running unbound and Pi-hole as Docker containers.
Let's see if and how your unbound container would answer a DNS request from your Pi-hole.
Run from the Docker host machine, what's the output of:
docker exec pihole2 dig discourse.pi-hole.net -p 5035 @172.95.0.8
On a side note:
You should probably be aware that mvance/unbound is not configuring unbound as a recursive resolver:
By default, this image forwards queries Cloudflare DNS server over TLS. In other words, it does not act as a recursive server.
If you'd want a recursive resolver, you'd have to apply a custom configuration for your unbound container.
i have changed it as you said but still have problem connecting to the internet without Upstream DNS Servers.
Would be good. i have changed the settings according to this (my ip is set to 172.16.0.0/12 now).
root@raspberrypi:~# docker exec pihole2 dig discourse.pi-hole.net -p 5053 @172.16.0.8
; <<>> DiG 9.16.48-Debian <<>> discourse.pi-hole.net -p 5053 @172.16.0.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10219
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;discourse.pi-hole.net. IN A
;; ANSWER SECTION:
discourse.pi-hole.net. 3600 IN A 52.14.183.198
;; Query time: 111 msec
;; SERVER: 172.16.0.8#5053(172.16.0.8)
;; WHEN: Tue Jan 14 00:33:26 +03 2025
;; MSG SIZE rcvd: 66
root@raspberrypi:~# docker exec pihole2 dig discourse.pi-hole.net -p 5035 @172.16.0.8
; <<>> DiG 9.16.48-Debian <<>> discourse.pi-hole.net -p 5035 @172.16.0.8
;; global options: +cmd
;; connection timed out; no servers could be reached
i watched this tutorial: Unbound in Docker with PiHole - Regain Your Privacy - Cybersecurity at Home
@Bucking_Horn You told me -p 5035 but in compose file my port is 5053.
This one has worked.
docker exec pihole2 dig discourse.pi-hole.net -p 5053 @172.16.0.8
Its output is above in codeblock.
Since, I am self learning these selfhosting stuff, I cannot understand whether its working on unbound or normal pihole. Can you clarify me? @Bucking_Horn
Updated debug log & Docker Compose:
Docker Compose:
version: '3'
networks:
dns_net:
driver: bridge
ipam:
config:
- subnet: 172.16.0.0/16
proxy:
external: true
services:
pihole:
container_name: pihole2
hostname: pihole
image: pihole/pihole:latest # remember to change this if you're using rpi
networks:
dns_net:
ipv4_address: 172.16.0.7
proxy:
ports:
- "53:53/tcp"
- "53:53/udp"
- "8085:80/tcp"
#- "443:443/tcp"
environment:
TZ: 'Europe/Istanbul'
WEBPASSWORD: '************'
PIHOLE_DNS_: '172.16.0.8#5053'
volumes:
- '/home/ubuntu/docker/pihole/etc-pihole/:/etc/pihole/'
- '/home/ubuntu/docker/pihole/etc-dnsmasq.d/:/etc/dnsmasq.d/'
restart: unless-stopped
unbound:
container_name: unbound
image: mvance/unbound-rpi:latest # remember to change this if you're using rpi
networks:
dns_net:
ipv4_address: 172.16.0.8
volumes:
- /home/ubuntu/docker/unbound:/opt/unbound/etc/unbound
ports:
- "5053:53/tcp"
- "5053:53/udp"
healthcheck:
test: ["NONE"]
restart: unless-stopped
Debug Log:
This process collects information from your Pi-hole, and optionally uploads it to a unique and random directory on tricorder.pi-hole.net.
The intent of this script is to allow users to self-diagnose their installations. This is accomplished by running tests against our software and providing the user with links to FAQ articles when a problem is detected. Since we are a small team and Pi-hole has been growing steadily, it is our hope that this will help us spend more time on development.
NOTE: All log files auto-delete after 48 hours and ONLY the Pi-hole developers can access your data via the given token. We have taken these extra steps to secure your data and will work to further reduce any personal information gathered.
*** [ INITIALIZING ]
[i] 2025-01-14:00:39:24 debug log has been initialized.
[i] System has been running for 3 days, 1 hours, 9 minutes
*** [ INITIALIZING ] Sourcing setup variables
[i] Sourcing /etc/pihole/setupVars.conf...
*** [ DIAGNOSING ]: Core version
[✓] Version: v5.18.3
[i] Remotes: origin https://github.com/pi-hole/pi-hole.git (fetch)
origin https://github.com/pi-hole/pi-hole.git (push)
[i] Branch: master
[i] Commit: v5.18.3-0-gbe5a8dc
*** [ DIAGNOSING ]: Web version
[✓] Version: v5.21
[i] Remotes: origin https://github.com/pi-hole/web.git (fetch)
origin https://github.com/pi-hole/web.git (push)
[i] Branch: master
[i] Commit: v5.21-0-gbe05b0f
*** [ DIAGNOSING ]: FTL version
[✓] Version: v5.25.2
[i] Branch: master
[i] Commit: 8943e260
*** [ DIAGNOSING ]: lighttpd version
[i] 1.4.59
*** [ DIAGNOSING ]: php version
[i] 7.4.33
*** [ DIAGNOSING ]: Operating system
[i] Pi-hole Docker Container: 2024.07.0
[✓] Distro: Debian
[✓] Version: 11
[✓] dig return code: 0
[i] dig response: "Raspbian=11,12 Ubuntu=20,22,23,24 Debian=11,12 Fedora=40,41 CentOS=9"
[✓] Distro and version supported
*** [ DIAGNOSING ]: SELinux
[i] SELinux not detected
*** [ DIAGNOSING ]: FirewallD
[✓] Firewalld service not detected
*** [ DIAGNOSING ]: Processor
[✓] aarch64
*** [ DIAGNOSING ]: Disk usage
Filesystem Size Used Avail Use% Mounted on
overlay 58G 40G 16G 72% /
tmpfs 64M 0 64M 0% /dev
shm 64M 2.9M 62M 5% /dev/shm
/dev/mmcblk0p2 58G 40G 16G 72% /etc/pihole
tmpfs 4.0G 0 4.0G 0% /proc/asound
tmpfs 4.0G 0 4.0G 0% /sys/firmware
*** [ DIAGNOSING ]: Network interfaces and addresses
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
1158: eth1@if1159: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:c0:a8:20:02 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 192.168.32.2/20 brd 192.168.47.255 scope global eth1
valid_lft forever preferred_lft forever
1160: eth0@if1161: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
link/ether 02:42:ac:10:00:07 brd ff:ff:ff:ff:ff:ff link-netnsid 0
inet 172.16.0.7/16 brd 172.16.255.255 scope global eth0
valid_lft forever preferred_lft forever
*** [ DIAGNOSING ]: Network routing table
default via 172.16.0.1 dev eth0
172.16.0.0/16 dev eth0 proto kernel scope link src 172.16.0.7
192.168.32.0/20 dev eth1 proto kernel scope link src 192.168.32.2
*** [ DIAGNOSING ]: Networking
[✓] IPv4 address(es) bound to the eth0 interface:
172.16.0.7/16
[✗] No IPv6 address(es) found on the eth0 interface.
[i] Default IPv4 gateway(s):
172.16.0.1
* Pinging first gateway 172.16.0.1...
[✓] Gateway responded.
[i] Default IPv6 gateway(s):
*** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain
[✓] www.fililys.info is 0.0.0.0 on lo (127.0.0.1)
[✓] www.fililys.info is 0.0.0.0 on eth1 (192.168.32.2)
[✓] www.fililys.info is 0.0.0.0 on eth0 (172.16.0.7)
[✓] doubleclick.com is 142.251.141.46 via a remote, public DNS server (8.8.8.8)
*** [ DIAGNOSING ]: Name resolution (IPv6) using a random blocked domain and a known ad-serving domain
[✓] jv.ytgs.lat is :: on lo (::1)
[✓] No IPv6 address available on eth1
[✓] No IPv6 address available on eth0
[✗] Failed to resolve doubleclick.com via a remote, public DNS server (2001:4860:4860::8888)
*** [ DIAGNOSING ]: Discovering active DHCP servers (takes 10 seconds)
Scanning all your interfaces for DHCP servers
Timeout: 10 seconds
DHCP packets received on interface eth1: 0
DHCP packets received on interface eth0: 0
*** [ DIAGNOSING ]: Pi-hole processes
[✓] lighttpd daemon is active
[✓] pihole-FTL daemon is active
*** [ DIAGNOSING ]: Pi-hole-FTL full status
[i] systemctl: command not found
*** [ DIAGNOSING ]: Lighttpd configuration test
[✓] No error in lighttpd configuration
*** [ DIAGNOSING ]: Setup variables
INSTALL_WEB_INTERFACE=true
PIHOLE_INTERFACE=eth0
QUERY_LOGGING=true
BLOCKING_ENABLED=true
DNSMASQ_LISTENING=all
DNS_FQDN_REQUIRED=false
DNS_BOGUS_PRIV=false
DNSSEC=false
REV_SERVER=false
PIHOLE_DNS_1=172.16.0.8#5053
*** [ DIAGNOSING ]: Dashboard headers
[✓] Web interface X-Header: X-Pi-hole: The Pi-hole Web interface is working!
*** [ DIAGNOSING ]: Pi-hole FTL Query Database
-rw-rw-r-- 1 pihole pihole 192K Jan 14 00:39 /etc/pihole/pihole-FTL.db
[i] Checking integrity of /etc/pihole/pihole-FTL.db ... (this can take several minutes)
[✓] Integrity of /etc/pihole/pihole-FTL.db intact
[i] Checking foreign key constraints of /etc/pihole/pihole-FTL.db ... (this can take several minutes)
[✓] No foreign key errors in /etc/pihole/pihole-FTL.db
*** [ DIAGNOSING ]: Gravity Database
-rw-rw-r-- 1 pihole pihole 6.7M Jan 14 00:31 /etc/pihole/gravity.db
[i] Checking integrity of /etc/pihole/gravity.db ... (this can take several minutes)
[✓] Integrity of /etc/pihole/gravity.db intact
[i] Checking foreign key constraints of /etc/pihole/gravity.db ... (this can take several minutes)
[✓] No foreign key errors in /etc/pihole/gravity.db
*** [ DIAGNOSING ]: Info table
property value
-------------------- ----------------------------------------
version 15
updated 1736803871
gravity_count 116155
Last gravity run finished at: Tue Jan 14 00:31:11 +03 2025
----- First 10 Gravity Domains -----
localhost.localdomain
ad-assets.futurecdn.net
ck.getcookiestxt.com
eu1.clevertap-prod.com
wizhumpgyros.com
coccyxwickimp.com
webmail-who-int.000webhostapp.com
010sec.com
01mspmd5yalky8.com
0byv9mgbn0.com
*** [ DIAGNOSING ]: Groups
id enabled name date_added date_modified description
---- ------- -------------------------------------------------- ------------------- ------------------- --------------------------------------------------
0 1 Default 2025-01-13 23:53:05 2025-01-13 23:53:05 The default group
*** [ DIAGNOSING ]: Domainlist (0/1 = exact white-/blacklist, 2/3 = regex white-/blacklist)
*** [ DIAGNOSING ]: Clients
*** [ DIAGNOSING ]: Adlists
id enabled group_ids address date_added date_modified comment
----- ------- ------------ ---------------------------------------------------------------------------------------------------- ------------------- ------------------- --------------------------------------------------
1 1 0 https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts 2025-01-13 23:53:05 2025-01-13 23:53:05 Migrated from /etc/pihole/adlists.list
*** [ DIAGNOSING ]: contents of /etc/pihole
-rw-r--r-- 1 root root 32 Jan 14 00:25 /etc/pihole/custom.list
192.168.31.179 npm.hasanjws.com
-rw-r--r-- 1 root root 65 Jan 14 00:31 /etc/pihole/local.list
-rw-r--r-- 1 root root 289 Jan 13 23:53 /etc/pihole/logrotate
/var/log/pihole/pihole.log {
su root root
daily
copytruncate
rotate 5
compress
delaycompress
notifempty
nomail
}
/var/log/pihole/FTL.log {
su root root
weekly
copytruncate
rotate 3
compress
delaycompress
notifempty
nomail
}
-rw-rw-r-- 1 pihole root 176 Jan 14 00:38 /etc/pihole/pihole-FTL.conf
MACVENDORDB=/macvendor.db
LOCAL_IPV4=0.0.0.0
RATE_LIMIT=1000/60
-rw-r--r-- 1 root root 382 Jan 14 00:31 /etc/pihole/versions
CORE_VERSION=v5.18.3
CORE_BRANCH=master
CORE_HASH=be5a8dc5
GITHUB_CORE_VERSION=v5.18.4
GITHUB_CORE_HASH=2cf046d5
WEB_VERSION=v5.21
WEB_BRANCH=master
WEB_HASH=be05b0f6
GITHUB_WEB_VERSION=v5.21
GITHUB_WEB_HASH=5c8945c8
FTL_VERSION=v5.25.2
FTL_BRANCH=master
FTL_HASH=8943e260
GITHUB_FTL_VERSION=v5.25.2
GITHUB_FTL_HASH=61a211f1
DOCKER_VERSION=2024.07.0
GITHUB_DOCKER_VERSION=2024.07.0
*** [ DIAGNOSING ]: contents of /etc/dnsmasq.d
-rw-r--r-- 1 root root 1.4K Jan 14 00:39 /etc/dnsmasq.d/01-pihole.conf
addn-hosts=/etc/pihole/local.list
addn-hosts=/etc/pihole/custom.list
localise-queries
no-resolv
log-queries
log-facility=/var/log/pihole/pihole.log
log-async
cache-size=10000
server=172.16.0.8#5053
except-interface=nonexisting
-rw-r--r-- 1 root root 557 Jan 14 00:25 /etc/dnsmasq.d/05-pihole-custom-cname.conf
cname=track-api.hasanjws.com,npm.hasanjws.com
cname=track.hasanjws.com,npm.hasanjws.com
cname=pihole.hasanjws.com,npm.hasanjws.com
cname=ptr.hasanjws.com,npm.hasanjws.com
cname=casa.hasanjws.com,npm.hasanjws.com
cname=vault.hasanjws.com,npm.hasanjws.com
cname=homepage.hasanjws.com,npm.hasanjws.com
cname=immich.hasanjws.com,npm.hasanjws.com
cname=dash.hasanjws.com,npm.hasanjws.com
cname=web.hasanjws.com,npm.hasanjws.com
cname=overseer.hasanjws.com,npm.hasanjws.com
cname=seerrbridge.hasanjws.com,npm.hasanjws.com
cname=plex.hasanjws.com,npm.hasanjws.com
-rw-r--r-- 1 root root 2.2K Jan 14 00:31 /etc/dnsmasq.d/06-rfc6761.conf
server=/test/
server=/localhost/
server=/invalid/
server=/bind/
server=/onion/
*** [ DIAGNOSING ]: contents of /etc/lighttpd
-rw-r--r-- 1 root root 2.2K Jan 19 2022 /etc/lighttpd/lighttpd.conf
server.modules = (
"mod_indexfile",
"mod_access",
"mod_alias",
"mod_redirect",
)
server.document-root = "/var/www/html"
server.upload-dirs = ( "/var/cache/lighttpd/uploads" )
server.errorlog = "/var/log/lighttpd/error.log"
server.pid-file = "/run/lighttpd.pid"
server.username = "www-data"
server.groupname = "www-data"
server.port = 80
server.feature-flags += ("server.h2proto" => "enable")
server.feature-flags += ("server.h2c" => "enable")
server.feature-flags += ("server.graceful-shutdown-timeout" => 5)
server.http-parseopts = (
"header-strict" => "enable",# default
"host-strict" => "enable",# default
"host-normalize" => "enable",# default
"url-normalize-unreserved"=> "enable",# recommended highly
"url-normalize-required" => "enable",# recommended
"url-ctrls-reject" => "enable",# recommended
"url-path-2f-decode" => "enable",# recommended highly (unless breaks app)
"url-path-dotseg-remove" => "enable",# recommended highly (unless breaks app)
)
index-file.names = ( "index.php", "index.html" )
url.access-deny = ( "~", ".inc" )
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port
include_shell "/usr/share/lighttpd/create-mime.conf.pl"
include "/etc/lighttpd/conf-enabled/*.conf"
server.modules += (
"mod_dirlisting",
"mod_staticfile",
)
*** [ DIAGNOSING ]: contents of /etc/lighttpd/conf.d
/etc/lighttpd/conf.d does not exist.
*** [ DIAGNOSING ]: contents of /etc/lighttpd/conf-enabled
total 4.0K
lrwxrwxrwx 1 root root 32 Jul 5 2024 05-setenv.conf -> ../conf-available/05-setenv.conf
lrwxrwxrwx 1 root root 35 Jul 5 2024 10-accesslog.conf -> ../conf-available/10-accesslog.conf
lrwxrwxrwx 1 root root 33 Jul 5 2024 10-fastcgi.conf -> ../conf-available/10-fastcgi.conf
-rw-r--r-- 1 root root 215 Jan 14 00:31 15-pihole-admin-redirect-docker.conf
lrwxrwxrwx 1 root root 38 Jul 5 2024 15-pihole-admin.conf -> ../conf-available/15-pihole-admin.conf
lrwxrwxrwx 1 root root 38 Jul 5 2024 /etc/lighttpd/conf-enabled/15-pihole-admin.conf -> ../conf-available/15-pihole-admin.conf
server.errorlog := "/var/log/lighttpd/error-pihole.log"
$HTTP["url"] =~ "^/admin/" {
server.document-root = "/var/www/html"
server.stream-response-body = 1
accesslog.filename = "/var/log/lighttpd/access-pihole.log"
accesslog.format = "%{%s}t|%h|%V|%r|%s|%b"
fastcgi.server = (
".php" => (
"localhost" => (
"socket" => "/run/lighttpd/pihole-php-fastcgi.socket",
"bin-path" => "/usr/bin/php-cgi",
"min-procs" => 1,
"max-procs" => 1,
"bin-environment" => (
"TZ" => "Europe/Istanbul",
"PIHOLE_DOCKER_TAG" => "",
"PHP_ERROR_LOG" => "/var/log/lighttpd/error-pihole.log",
"CORS_HOSTS" => "",
"VIRTUAL_HOST" => "pihole",
"PHP_FCGI_CHILDREN" => "4",
"PHP_FCGI_MAX_REQUESTS" => "10000",
),
"bin-copy-environment" => (
"PATH", "SHELL", "USER"
),
"broken-scriptfilename" => "enable",
)
)
)
setenv.add-response-header = (
"X-Pi-hole" => "The Pi-hole Web interface is working!",
"X-Frame-Options" => "DENY",
"X-XSS-Protection" => "0",
"X-Content-Type-Options" => "nosniff",
"Content-Security-Policy" => "default-src 'self' 'unsafe-inline';",
"X-Permitted-Cross-Domain-Policies" => "none",
"Referrer-Policy" => "same-origin"
)
$HTTP["url"] =~ "^/admin/\." {
url.access-deny = ("")
}
$HTTP["url"] =~ "/(teleporter|api_token)\.php$" {
$HTTP["referer"] =~ "/admin/settings\.php" {
setenv.set-response-header = ( "X-Frame-Options" => "SAMEORIGIN" )
}
}
}
else $HTTP["url"] == "/admin" {
url.redirect = ("" => "/admin/")
}
$HTTP["host"] == "pi.hole" {
$HTTP["url"] == "/" {
url.redirect = ("" => "/admin/")
}
}
server.modules += ( "mod_access", "mod_accesslog", "mod_redirect", "mod_fastcgi", "mod_setenv" )
*** [ DIAGNOSING ]: contents of /etc/cron.d
-rw-r--r-- 1 root root 1.7K Jan 14 00:31 /etc/cron.d/pihole
35 3 * * 7 root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updateGravity >/var/log/pihole/pihole_updateGravity.log || cat /var/log/pihole/pihole_updateGravity.log
00 00 * * * root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole flush once quiet
@reboot root /usr/sbin/logrotate --state /var/lib/logrotate/pihole /etc/pihole/logrotate
2 13 * * * root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker
@reboot root PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker reboot
*** [ DIAGNOSING ]: contents of /var/log/lighttpd
-rw-r--r-- 1 www-data www-data 267 Jan 14 00:31 /var/log/lighttpd/error-pihole.log
-----head of error-pihole.log------
2025-01-13 23:53:05: server.c.1513) server started (lighttpd/1.4.59)
2025-01-14 00:31:09: server.c.1513) server started (lighttpd/1.4.59)
2025-01-14 00:31:09: gw_backend.c.475) unlink /run/lighttpd/pihole-php-fastcgi.socket-0 after connect failed: Connection refused
-----tail of error-pihole.log------
2025-01-13 23:53:05: server.c.1513) server started (lighttpd/1.4.59)
2025-01-14 00:31:09: server.c.1513) server started (lighttpd/1.4.59)
2025-01-14 00:31:09: gw_backend.c.475) unlink /run/lighttpd/pihole-php-fastcgi.socket-0 after connect failed: Connection refused
*** [ DIAGNOSING ]: contents of /var/log/pihole
-rw-r--r-- 1 pihole pihole 25K Jan 14 00:39 /var/log/pihole/FTL.log
-----head of FTL.log------
[2025-01-14 00:25:59.462 2082M] Using log file /var/log/pihole/FTL.log
[2025-01-14 00:25:59.462 2082M] ########## FTL started on pihole! ##########
[2025-01-14 00:25:59.462 2082M] FTL branch: master
[2025-01-14 00:25:59.462 2082M] FTL version: v5.25.2
[2025-01-14 00:25:59.462 2082M] FTL commit: 8943e260
[2025-01-14 00:25:59.462 2082M] FTL date: 2024-05-08 20:59:50 +0100
[2025-01-14 00:25:59.462 2082M] FTL user: pihole
[2025-01-14 00:25:59.462 2082M] Compiled for aarch64 (compiled on CI) using aarch64-linux-gnu-gcc (Debian 8.3.0-2) 8.3.0
[2025-01-14 00:25:59.462 2082M] Starting config file parsing (/etc/pihole/pihole-FTL.conf)
[2025-01-14 00:25:59.462 2082M] SOCKET_LISTENING: only local
[2025-01-14 00:25:59.462 2082M] AAAA_QUERY_ANALYSIS: Show AAAA queries
[2025-01-14 00:25:59.462 2082M] MAXDBDAYS: max age for stored queries is 365 days
[2025-01-14 00:25:59.462 2082M] RESOLVE_IPV6: Resolve IPv6 addresses
[2025-01-14 00:25:59.462 2082M] RESOLVE_IPV4: Resolve IPv4 addresses
[2025-01-14 00:25:59.462 2082M] DBINTERVAL: saving to DB file every minute
[2025-01-14 00:25:59.462 2082M] DBFILE: Using /etc/pihole/pihole-FTL.db
[2025-01-14 00:25:59.462 2082M] MAXLOGAGE: Importing up to 24.0 hours of log data
[2025-01-14 00:25:59.462 2082M] PRIVACYLEVEL: Set to 0
[2025-01-14 00:25:59.462 2082M] IGNORE_LOCALHOST: Show queries from localhost
[2025-01-14 00:25:59.462 2082M] BLOCKINGMODE: Null IPs for blocked domains
[2025-01-14 00:25:59.462 2082M] ANALYZE_ONLY_A_AND_AAAA: Disabled. Analyzing all queries
[2025-01-14 00:25:59.462 2082M] DBIMPORT: Importing history from database
[2025-01-14 00:25:59.462 2082M] PIDFILE: Using /run/pihole-FTL.pid
[2025-01-14 00:25:59.462 2082M] SOCKETFILE: Using /run/pihole/FTL.sock
[2025-01-14 00:25:59.463 2082M] SETUPVARSFILE: Using /etc/pihole/setupVars.conf
[2025-01-14 00:25:59.463 2082M] MACVENDORDB: Using /macvendor.db
[2025-01-14 00:25:59.463 2082M] GRAVITYDB: Using /etc/pihole/gravity.db
[2025-01-14 00:25:59.463 2082M] PARSE_ARP_CACHE: Active
[2025-01-14 00:25:59.463 2082M] CNAME_DEEP_INSPECT: Active
[2025-01-14 00:25:59.463 2082M] DELAY_STARTUP: No delay requested.
[2025-01-14 00:25:59.463 2082M] BLOCK_ESNI: Enabled, blocking _esni.{blocked domain}
[2025-01-14 00:25:59.463 2082M] NICE: Cannot change niceness to -10 (permission denied)
[2025-01-14 00:25:59.463 2082M] MAXNETAGE: Removing IP addresses and host names from network table after 365 days
[2025-01-14 00:25:59.463 2082M] NAMES_FROM_NETDB: Enabled, trying to get names from network database
[2025-01-14 00:25:59.463 2082M] EDNS0_ECS: Overwrite client from ECS information
-----tail of FTL.log------
[2025-01-14 00:39:00.044 934M] BLOCK_ICLOUD_PR: Enabled
[2025-01-14 00:39:00.044 934M] CHECK_LOAD: Enabled
[2025-01-14 00:39:00.044 934M] CHECK_SHMEM: Warning if shared-memory usage exceeds 90%
[2025-01-14 00:39:00.044 934M] CHECK_DISK: Warning if certain disk usage exceeds 90%
[2025-01-14 00:39:00.044 934M] Finished config file parsing
[2025-01-14 00:39:00.044 934M] Creating mutex
[2025-01-14 00:39:00.044 934M] Creating mutex
[2025-01-14 00:39:00.044 934M] PID of FTL process: 934
[2025-01-14 00:39:00.044 934M] Database version is 12
[2025-01-14 00:39:00.045 934M] Resizing "FTL-strings" from 163840 to (327680 * 1) == 327680 (/dev/shm: 2.8MB used, 67.1MB total, FTL uses 2.8MB)
[2025-01-14 00:39:00.045 934M] Imported 0 alias-clients
[2025-01-14 00:39:00.045 934M] Database successfully initialized
[2025-01-14 00:39:00.081 934M] New upstream server: 172.16.0.8:5053 (0/2048)
[2025-01-14 00:39:00.083 934M] New upstream server: 9.9.9.11:53 (1/2048)
[2025-01-14 00:39:00.084 934M] New upstream server: 149.112.112.11:53 (2/2048)
[2025-01-14 00:39:00.088 934M] Imported 2297 queries from the long-term database
[2025-01-14 00:39:00.088 934M] -> Total DNS queries: 2297
[2025-01-14 00:39:00.088 934M] -> Cached DNS queries: 376
[2025-01-14 00:39:00.088 934M] -> Forwarded DNS queries: 1741
[2025-01-14 00:39:00.088 934M] -> Blocked DNS queries: 70
[2025-01-14 00:39:00.088 934M] -> Unknown DNS queries: 1
[2025-01-14 00:39:00.088 934M] -> Unique domains: 249
[2025-01-14 00:39:00.088 934M] -> Unique clients: 2
[2025-01-14 00:39:00.088 934M] -> Known forward destinations: 3
[2025-01-14 00:39:00.088 934M] Successfully accessed setupVars.conf
[2025-01-14 00:39:00.089 934M] listening on 0.0.0.0 port 53
[2025-01-14 00:39:00.089 934M] listening on :: port 53
[2025-01-14 00:39:00.089 934M] PID of FTL process: 934
[2025-01-14 00:39:00.089 934M] Listening on port 4711 for incoming IPv4 telnet connections
[2025-01-14 00:39:00.089 934M] Listening on port 4711 for incoming IPv6 telnet connections
[2025-01-14 00:39:00.090 934M] Listening on port 4711 for incoming socket telnet connections
[2025-01-14 00:39:00.090 934M] INFO: FTL is running as user pihole (UID 999)
[2025-01-14 00:39:00.090 934M] Reloading DNS cache
[2025-01-14 00:39:00.191 934/T950] Compiled 0 whitelist and 0 blacklist regex filters for 2 clients in 0.1 msec
[2025-01-14 00:39:00.191 934/T950] Blocking status is enabled
*** [ DIAGNOSING ]: contents of /dev/shm
total 2.9M
-rw------- 1 pihole pihole 336K Jan 14 00:39 FTL-clients
-rw------- 1 pihole pihole 248 Jan 14 00:39 FTL-counters
-rw------- 1 pihole pihole 16K Jan 14 00:39 FTL-dns-cache
-rw------- 1 pihole pihole 48K Jan 14 00:39 FTL-domains
-rw------- 1 pihole pihole 104 Jan 14 00:39 FTL-lock
-rw------- 1 pihole pihole 16K Jan 14 00:39 FTL-overTime
-rw------- 1 pihole pihole 16K Jan 14 00:39 FTL-per-client-regex
-rw------- 1 pihole pihole 896K Jan 14 00:39 FTL-queries
-rw------- 1 pihole pihole 16 Jan 14 00:39 FTL-settings
-rw------- 1 pihole pihole 320K Jan 14 00:39 FTL-strings
-rw------- 1 pihole pihole 1.3M Jan 14 00:39 FTL-upstreams
*** [ DIAGNOSING ]: contents of /etc
-rw-r--r-- 1 root root 37 Jan 14 00:31 /etc/dnsmasq.conf
conf-dir=/etc/dnsmasq.d
user=pihole
-rw-r--r-- 1 root root 306 Jan 14 00:31 /etc/resolv.conf
nameserver 127.0.0.11
options ndots:0
*** [ DIAGNOSING ]: Pi-hole diagnosis messages
*** [ DIAGNOSING ]: Locale
LANG=
*** [ DIAGNOSING ]: Pi-hole log
-rw-r--r-- 1 pihole pihole 526K Jan 14 00:39 /var/log/pihole/pihole.log
-----head of pihole.log------
Jan 14 00:00:03 dnsmasq[974]: query[A] pi.hole from 127.0.0.1
Jan 14 00:00:03 dnsmasq[974]: Pi-hole hostname pi.hole is 0.0.0.0
Jan 14 00:00:11 dnsmasq[974]: query[A] pihole.hasanjws.com from 192.168.31.31
Jan 14 00:00:11 dnsmasq[974]: cached pihole.hasanjws.com is NODATA-IPv4
Jan 14 00:00:11 dnsmasq[974]: query[HTTPS] pihole.hasanjws.com from 192.168.31.31
Jan 14 00:00:11 dnsmasq[974]: forwarded pihole.hasanjws.com to 149.112.112.11
Jan 14 00:00:11 dnsmasq[974]: reply pihole.hasanjws.com is NODATA
Jan 14 00:00:11 dnsmasq[974]: query[A] pihole.hasanjws.com from 192.168.31.31
Jan 14 00:00:11 dnsmasq[974]: cached pihole.hasanjws.com is NODATA-IPv4
Jan 14 00:00:12 dnsmasq[974]: query[A] lancache.steamcontent.com from 192.168.31.31
Jan 14 00:00:12 dnsmasq[974]: cached lancache.steamcontent.com is <CNAME>
Jan 14 00:00:12 dnsmasq[974]: cached origin-tier2.steampipe.steamcontent.com is <CNAME>
Jan 14 00:00:12 dnsmasq[974]: cached steampipe-origin-tier2.steamcontent.com is <CNAME>
Jan 14 00:00:12 dnsmasq[974]: forwarded lancache.steamcontent.com to 149.112.112.11
Jan 14 00:00:12 dnsmasq[974]: query[A] lancache.steamcontent.com from 192.168.31.31
Jan 14 00:00:12 dnsmasq[974]: cached lancache.steamcontent.com is <CNAME>
Jan 14 00:00:12 dnsmasq[974]: cached origin-tier2.steampipe.steamcontent.com is <CNAME>
Jan 14 00:00:12 dnsmasq[974]: forwarded lancache.steamcontent.com to 9.9.9.11
Jan 14 00:00:12 dnsmasq[974]: forwarded lancache.steamcontent.com to 149.112.112.11
Jan 14 00:00:12 dnsmasq[974]: forwarded lancache.steamcontent.com to 172.16.0.8#5053
-----tail of pihole.log------
Jan 14 00:39:17 dnsmasq[934]: forwarded a.nel.cloudflare.com to 172.16.0.8#5053
Jan 14 00:39:18 dnsmasq[934]: reply a.nel.cloudflare.com is NODATA
Jan 14 00:39:18 dnsmasq[934]: forwarded a.nel.cloudflare.com to 172.16.0.8#5053
Jan 14 00:39:18 dnsmasq[934]: reply a.nel.cloudflare.com is 35.190.80.1
Jan 14 00:39:23 dnsmasq[934]: query[A] gew4-spclient.spotify.com from 192.168.31.31
Jan 14 00:39:23 dnsmasq[934]: forwarded gew4-spclient.spotify.com to 172.16.0.8#5053
Jan 14 00:39:23 dnsmasq[934]: query[HTTPS] gew4-spclient.spotify.com from 192.168.31.31
Jan 14 00:39:23 dnsmasq[934]: forwarded gew4-spclient.spotify.com to 172.16.0.8#5053
Jan 14 00:39:23 dnsmasq[934]: reply gew4-spclient.spotify.com is <CNAME>
Jan 14 00:39:23 dnsmasq[934]: reply edge-web-gew4.dual-gslb.spotify.com is 35.186.224.28
Jan 14 00:39:23 dnsmasq[934]: reply gew4-spclient.spotify.com is <CNAME>
Jan 14 00:39:23 dnsmasq[934]: reply edge-web-gew4.dual-gslb.spotify.com is NODATA
Jan 14 00:39:25 dnsmasq[934]: query[A] www.fililys.info from 127.0.0.1
Jan 14 00:39:25 dnsmasq[934]: gravity blocked www.fililys.info is 0.0.0.0
Jan 14 00:39:25 dnsmasq[934]: query[A] www.fililys.info from 192.168.32.2
Jan 14 00:39:25 dnsmasq[934]: gravity blocked www.fililys.info is 0.0.0.0
Jan 14 00:39:25 dnsmasq[934]: query[A] www.fililys.info from 172.16.0.7
Jan 14 00:39:25 dnsmasq[934]: gravity blocked www.fililys.info is 0.0.0.0
Jan 14 00:39:25 dnsmasq[934]: query[AAAA] jv.ytgs.lat from ::1
Jan 14 00:39:25 dnsmasq[934]: gravity blocked jv.ytgs.lat is ::
********************************************
********************************************
[✓] ** FINISHED DEBUGGING! **
* The debug log can be uploaded to tricorder.pi-hole.net for sharing with developers only.
[i] Debug script running in automated mode
* Using curl for transmission.
*****************************************************************
*****************************************************************
[✓] Your debug token is: https://tricorder.pi-hole.net/EAceWj55/
[i] Logs are deleted 48 hours after upload.
*****************************************************************
*****************************************************************
* Provide the token above to the Pi-hole team for assistance at https://discourse.pi-hole.net
* A local copy of the debug log can be found at: /var/log/pihole/pihole_debug.log
still looking for solution
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.