Unsure if Pihole+Unbound are blocking ads on iPhone

Sorry last minute canges!
I changed some :wink:

Will the entries here no longer show the hostname/device name? And are the NXDOMAIN replies normal?

EDIT: The query log is also still showing .local for many entries:

It might be that you have to renew your clients DHCP leases before you see names changing.
Usually that happens when you dis and reconnect them to network (EDIT: or have to wait a long time before they do it themselves).
Otherwise reboot them.

Also you can check what hostname your DHCP service holds/knows about for a particular IP with below:

dig +short @192.168.1.1 -x <CLIENT_IP_ADDRESS>

Eg:

pi@ph5a:~ $ dig +short @10.0.0.4 -x 10.0.0.11
hakpc.home.dehakkelaar.nl.

Thats where Pi-hole gets the names from and refreshes them every hour.
If dont get a reply no names.

EDIT: Also at the bottom you have the "Flush network table" button:

http://pi.hole/admin/settings.php

This seems to work for some devices, but not all:

root@DietPi:~# dig +short @192.168.1.1 -x 192.168.3.6
RokuStreamingStick.iot.home.arpa.
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.3.16
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.2.6
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.2.5
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.2.12
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.2.113
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.2.13
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.2.15
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.2.13
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.1.122
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.1.122
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.3.40
HAL-002-153f6710.iot.home.arpa.
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.3.41
PUR-002-a986de59.iot.home.arpa.
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.3.42
MyQ-BFF.iot.home.arpa.
root@DietPi:~# dig +short @192.168.1.1 -x 192.168.3.16

Have you renewed DHCP leases for them?

Yeah, I reconnected them all and even rebooted the access point they all are connected to.

They have to acquire IP detail automatically via DHCP or otherwise they wont advertise their hostname to the DHCP service (your router).
Not manually statically assigned!
Can flush the network table and wait for an hour.

I did flush the network table a bit ago. But, I will wait for them to renew on their own :slight_smile:

Thank you very much for your help tonight! Hopefully a mod chimes in about the Pihole not blocking things in the adlists and we can close the whole loop here, haha.

What does below show?

pihole-FTL sqlite3 --header --column /etc/pihole/gravity.db "SELECT * FROM adlist"

root@DietPi:~# pihole-FTL sqlite3 --header --column /etc/pihole/gravity.db "SELECT * FROM adlist"
id  address                                                                                    enabled  date_added  date_modified  comment                                 date_updated  number  invalid_domains  status
--  -----------------------------------------------------------------------------------------  -------  ----------  -------------  --------------------------------------  ------------  ------  ---------------  ------
1   https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts                           1        1596221052  1691110086     Migrated from /etc/pihole/adlists.list  1691108393    205107  1                1
3   http://sysctl.org/cameleon/hosts                                                           1        1596221052  1691110088     Migrated from /etc/pihole/adlists.list  1691108397    20561   0                1
4   https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt                           1        1596221052  1691110091     Migrated from /etc/pihole/adlists.list  1691108398    34      0                1
5   https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt                                 1        1596221052  1691110094     Migrated from /etc/pihole/adlists.list  1691108398    2701    0                1
6   https://reddestdream.github.io/Projects/MinimalHosts/etc/MinimalHostsBlocker/minimalhosts  1        1596221052  1691110097     Migrated from /etc/pihole/adlists.list  1691108398    710     0                1
7   https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt                       1        1596221052  1691110100     Migrated from /etc/pihole/adlists.list  1691108399    2735    1                1
8   https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt    1        1596221052  1691110102     Migrated from /etc/pihole/adlists.list  1691108400    347     0                1
9   https://www.github.developerdan.com/hosts/lists/amp-hosts-extended.txt                     1        1596221052  1691110104     Migrated from /etc/pihole/adlists.list  1691108401    16452   0                1
10  https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt                 1        1596221052  1691110106     Migrated from /etc/pihole/adlists.list  1691108403    42536   0                1
11  https://raw.githubusercontent.com/Firestorrrm/Minimal-Hosts-Blocker/master/iosadlist.txt   1        1596221052  1691110108     Migrated from /etc/pihole/adlists.list  1691108404    30648   1                1
12  https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV.txt              1        1596221052  1691110114     Migrated from /etc/pihole/adlists.list  1691108407    242     0                1
13  https://raw.githubusercontent.com/Sekhan/TheGreatWall/master/TheGreatWall.txt              1        1643441259  1691110117                                             1691108407    132     1                1
14  https://raw.githubusercontent.com/oneoffdallas/dohservers/master/iplist.txt                1        1643441296  1691110070                                             1691108407    668     55               1
16  https://gist.github.com/sidward35/cea28bedd0ec0b1bceec8c2b22c163c4                         1        1690979976  1691110055                                             1691108408    1       981              1
18  analyticsengine.s3.amazonaws.com                                                           1        1691023479  1691023479                                             1691108409    0       2                1

And below ones:

pihole -q adsfs.oppomobile.com

nslookup adsfs.oppomobile.com localhost

And what do the logs show when do that nslookup query:

pihole -t

root@DietPi:~# pihole -q adsfs.oppomobile.com
 Match found in exact blacklist
   adsfs.oppomobile.com
 Match found in https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts:
   adsfs.oppomobile.com
 Match found in https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt:
   adsfs.oppomobile.com
root@DietPi:~# nslookup adsfs.oppomobile.com localhost
Server:         localhost
Address:        127.0.0.1#53

Name:   adsfs.oppomobile.com
Address: 0.0.0.0
Name:   adsfs.oppomobile.com
Address: ::

pihole -t

**Aug 5 23:11:16: query[A] adsfs.oppomobile.com from 127.0.0.1** **Aug 5 23:11:16: exactly blacklisted adsfs.oppomobile.com is 0.0.0.0** **Aug 5 23:11:16: query[AAAA] adsfs.oppomobile.com from 127.0.0.1** **Aug 5 23:11:16: exactly blacklisted adsfs.oppomobile.com is ::**

These show this URL is being blocked by the Pi-hole for sure...but why was it not blocked last night?

They dont seem to appear being blocked via the ad/block lists but blacklisted instead.
This is blocked:

Did you enter blacklist entries/regex'es?

Looks like they're all being blocked now. The only thing we changed were the domain changes we made tonight.

Not that I'm aware of or remember doing for this specific domain. I did add some regex blocks but that was for other targeted blocking. Not for this domain.

EDIT: Ah, just looked again. I guess I did blacklist some of these from when we were testing last night. My mistake. I just deleted them from the blacklist and then did an nslookup on them and the query log returned:

So you're right. The Pi-hole isn't blocking these still.

Do the mods/devs still need to checkup?
Maybe mark a solution?

Just made an edit to my previous reply.

With all the changes, also upload a new token for the mods/devs to have a look pls?

Yeah, good call -

https://tricorder.pi-hole.net/wiW0R5cK/

1 Like

I just thought of something...I have these hostnames hardcoded into the /etc/hosts file. And every name in the file is appended with .local. This is why the Pi-hole is still showing this domain.

Hah!

I did this long ago to force the Pi-hole to show the hostnames of all the devices on the network.

Since I have all of my devices statically assigned, should I manually append the new domains to each of the devices in /etc/hosts?

EDIT: Actually, having a domain manually appended at the end of a hostname doesn't seem to be necessary.