v6 Disable pi.hole DNS Record

Hi there,

Crossposting this from Reddit as I think there is a lower liklihood of it getting buried here.

Original link: https://www.reddit.com/r/pihole/comments/1iso0qu/v6_disable_pihole_dns_record/

The issue I am facing:

I updated to v6 a few days ago, and while everything is working swimmingly I'd like to disable the pi.hole DNS record. I have my network configured so that my pihole console uses a private FQDN (ex: https://dns.[domain].[tld]), so the default record is superfluous at this point. Additionally, it seems some clever front-end admins are resolving pi.hole to detect if the system is deployed locally.

I have updated pihole.toml as follows (superfluous lines ommitted):

[dns]
piholePTR = "NONE" #Per suggestion in Reddit thread above
[webserver]
domain = [dns.[domain].[tld]] #actual domain and TLD omitted for privacy

Currently the custom domain is resolving happily, but pi.hole is still resolving successfully. Also, while I did update my piholePTR value above per the suggestion on reddit, I would like the pihole to return the value of my custom record noted above.

I found the following forum posts related to this, though they are multiple years old, and don't seem to provide a good solution in general, nevertheless for v6.

https://discourse.pi-hole.net/t/remove-pi-hole-hostname-completely/62533
https://discourse.pi-hole.net/t/how-to-disable-pi-hole-dns-record/49606/36

Does anybody have any suggestions?

Details about my system:

I am running my pi.hole on a Raspberry Pi 4 Model B r1.5, with the most recent Raspberry Pi OS backed on Bookwork (see below). I do have a custom internal A record reverse-proxied to my Pi-Hole using a Caddy instance running on another machine, and it resolves the pihole dashboard correctly at the moment.

I'm not sure if I understand you correctly, as you haven't supplied any custom DNS records (yet)?

To help my understanding, please provide how Pi-hole currently resolves your aspired name, preferably by means of a dig command output, and how you would like that to be answered instead.

I apologize for the lack of clarity here. My custom DNS records are fully configured and functional, as show below selectively blurred for privacy.

Please note that the dns & dns-adm records are duplicative for a test.

Having my pihole return my custom domain is not critical, and I apologize for mentioning it. My main goal is disabling the https://pi.hole DNS record for the web interface. I'd like it to return NXDOMAIN as though pi.hole has no records.

Relevant dig results as-requested, run from another machine on my network.


tl;dr My custom records work as-expected, I would like pi.hole to return NXDOMAIN

In an attempt to force the desired behavior I have added pi.hole as an explicit record pointing at a false IPv4 address.

image

Unfortunately it still resolves the web console

dig output

That's much clearer, thank you (and all in one sentence). :wink:

Currently, disabling pi.hole completely to have it return NXDOMAIN isn't possible.

One user has brought up that idea some years ago for Pi-hole v5, but that discussion wasn't followed up by a feature request.

For v5, changing that name would also have meant to change its HTML code in places.

Pi-hole v6 now offers configuration of a webserver.domain which potentially could be leveraged to accomplish such a change, but currently it affects only Pi-hole's web server portion.

If you want to disable pi.hole, you'd have to change Pi-hole's source code and compile your own pihole-FTL, which was what aforementioned user has ultimately opted to do.

If you want Pi-hole to offer this, you should consider to open a Feature Request.

Awesome, appreciate the confirmation.

Apologies if the ask wasn’t concise enough, my job is collaborating with other engineers, and our company’s culture prefers detail & context over brevity. Learned habits, etc.

I’ll open a feature request shortly, and depending on your contribution model, am happy to do the engineering as well. See you on GitHub!

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.