Hey everybody, I'm very new to PiHole but I absolutely love it already.
I have setup my PiHole on a vServer which is not in my own network and have set the DNS server of my FritzBox to use that vServer. This works great, domains in the default group are blocked perfectly
My problem is, that domains, which are not in the default group, get through because I haven't setup a client yet. Since I want all my devices to use the same configuration and my router IP (also prefix) can change frequently I would like to setup a Client which in fact includes all possible clients. I think of something like 0:0:0:0:0:0:0:0/0 (or 0.0.0.0/0 for IPv4) or so but this does not work, it seems like my router (DS-Lite IPv6) is not recognized by that...
I know that this is not how one should use clients and groups but I still want to get the advantage of groups to easily toggle a bunch of domains at once.
Please upload a debug log and post just the token that is generated after the log is uploaded by running the following command from the Pi-hole host terminal:
pihole -d
or do it through the Web interface:
Tools > Generate Debug Log
Your requirements match Pi-hole's default behaviour:
All DNS clients are filtered by the default group.
Just assign all your allowed and blocked domains or lists to the default group.
You are running two open resolvers at 212.<redacted>.16 and .17, which would pose a potential threat for all Internet users, e.g. by serving as a multiplier in a DNS Amplification attack.
The Pi-hole team strongly discourages Pi-hole’s usage as an open resolver , and we won't provide support in that case.
First, close Port 53/DNS for incoming traffic on your vServer.
Connect your aspiring clients by means of a VPN (i.e. set up a VPN server on your vServer), and configure Pi-hole to listen exclusively on the interface addresses of that VPN network.
Exact steps would depend on your personal requirements and preferences, which may be restricted by your router's support to connect as a VPN client in your case.
Alternatively (or in addition, e.g. for roaming clients like smartphones that do not use your network exclusively), you can install or enable VPN client software on your clients.
