Videos won't play on Roku CBS All Access

[nwaves]

I whitelisted the only 3 domains that were blocked (see below) and restarted dnsmasq but still can't play any videos.
cbsinteractive.hb.omtrdc.net
dw.cbsi.com
om.cbsi.com

I'm paying for the no-commercial plan so no ads are to be delivered anyway. Any ideas what I can do to fix this cause it's annoying to have to pull out my laptop and disable pihole for 30 seconds each time I want to see something on CBS.

[technicalpyro]

restart the roku device it will have a dns cache internally that needs to be cleared

[nwaves]

Tried that but no joy. I should mention that I'm running Pi-O on a Pi Zero W, doing DNS over https with Cloudflare. Everything else works like a charm otherwise after blocking Netflix on TCP 53.

[nwaves]

Shutting down Pi hole for 1 minute doesn't help either, I have to get in the router, remove the DNS entry pointing to Pi hole, save the config and reboot the Roku. Once that's done, I can revert to the original settings with Pi hole on and videos play.

[technicalpyro]

Based on this something in your network is caching DNS

[nwaves]

It is obvious that Roku is catching the DNS but there's nothing else in my network that would do that. I'm trying to figure out what's the best approach to troubleshoot this.

[nwaves]

Here's the log:

Apr 25 01:33:25 dnsmasq[7040]: 31704 192.168.17.251/40882 query[A] www.cbs.com from 192.168.17.251
Apr 25 01:33:25 dnsmasq[7040]: 31704 192.168.17.251/40882 cached www.cbs.com is 64.30.230.20
Apr 25 01:33:27 dnsmasq[7040]: 31705 192.168.17.251/39763 query[A] link.theplatform.com from 192.168.17.251
Apr 25 01:33:27 dnsmasq[7040]: 31705 192.168.17.251/39763 forwarded link.theplatform.com to 127.0.0.1
Apr 25 01:33:27 dnsmasq[7040]: 31705 192.168.17.251/39763 reply link.theplatform.com is 199.27.170.197
Apr 25 01:33:27 dnsmasq[7040]: 31706 192.168.17.251/40384 query[A] cbsios-vh.akamaihd.net from 192.168.17.251
Apr 25 01:33:27 dnsmasq[7040]: 31706 192.168.17.251/40384 forwarded cbsios-vh.akamaihd.net to 127.0.0.1
Apr 25 01:33:27 dnsmasq[7040]: 31706 192.168.17.251/40384 reply cbsios-vh.akamaihd.net is <CNAME
Apr 25 01:33:27 dnsmasq[7040]: 31706 192.168.17.251/40384 reply a289.w16.akamai.net is 104.96.220.146
Apr 25 01:33:27 dnsmasq[7040]: 31706 192.168.17.251/40384 reply a289.w16.akamai.net is 104.96.220.154
Apr 25 01:33:28 dnsmasq[7040]: 31707 192.168.17.251/42721 query[A] www.cbs.com from 192.168.17.251
Apr 25 01:33:28 dnsmasq[7040]: 31707 192.168.17.251/42721 cached www.cbs.com is 64.30.230.20
Apr 25 01:33:28 dnsmasq[7040]: 31708 192.168.17.251/60554 query[A] cws.conviva.com from 192.168.17.251
Apr 25 01:33:28 dnsmasq[7040]: 31708 192.168.17.251/60554 cached cws.conviva.com is <CNAME
Apr 25 01:33:28 dnsmasq[7040]: 31708 192.168.17.251/60554 cached cws-us-east.conviva.com is <CNAME
Apr 25 01:33:28 dnsmasq[7040]: 31708 192.168.17.251/60554 cached cws-iad1.conviva.com is 199.127.194.93
Apr 25 01:33:37 dnsmasq[7040]: 31821 192.168.17.251/43788 query[A] cbsinteractive.hb.omtrdc.net from 192.168.17.251
Apr 25 01:33:37 dnsmasq[7040]: 31821 192.168.17.251/43788 forwarded cbsinteractive.hb.omtrdc.net to 127.0.0.1
Apr 25 01:33:38 dnsmasq[7040]: 31821 192.168.17.251/43788 reply cbsinteractive.hb.omtrdc.net is 34.199.207.52
Apr 25 01:33:38 dnsmasq[7040]: 31821 192.168.17.251/43788 reply cbsinteractive.hb.omtrdc.net is 34.200.39.76
Apr 25 01:33:38 dnsmasq[7040]: 31821 192.168.17.251/43788 reply cbsinteractive.hb.omtrdc.net is 34.200.93.185
Apr 25 01:33:38 dnsmasq[7040]: 31821 192.168.17.251/43788 reply cbsinteractive.hb.omtrdc.net is 34.230.186.180
Apr 25 01:33:38 dnsmasq[7040]: 31821 192.168.17.251/43788 reply cbsinteractive.hb.omtrdc.net is 34.233.162.93
Apr 25 01:33:38 dnsmasq[7040]: 31821 192.168.17.251/43788 reply cbsinteractive.hb.omtrdc.net is 34.234.108.125
Apr 25 01:33:38 dnsmasq[7040]: 31821 192.168.17.251/43788 reply cbsinteractive.hb.omtrdc.net is 34.234.124.79
Apr 25 01:33:38 dnsmasq[7040]: 31821 192.168.17.251/43788 reply cbsinteractive.hb.omtrdc.net is 34.236.167.192

[nwaves]

And this time video played after disabling pi-hole.

[RamSet]

what's the output of (on the pi-hole hosting device):

dig cbsinteractive.hb.omtrdc.net @127.0.0.1 -p 53
dig om.cbsi.com @127.0.0.1 -p 53
dig dw.cbsi.com @127.0.0.1 -p 53

[nwaves]

pi@raspberrypi:~ $ dig cbsinteractive.hb.omtrdc.net @127.0.0.1 -p 53

; <<>> DiG 9.10.3-P4-Raspbian <<>> cbsinteractive.hb.omtrdc.net @127.0.0.1 -p 53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62006
;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1536
;; QUESTION SECTION:
;cbsinteractive.hb.omtrdc.net. IN A

;; ANSWER SECTION:
cbsinteractive.hb.omtrdc.net. 32 IN A 34.231.45.183
cbsinteractive.hb.omtrdc.net. 32 IN A 34.231.205.63
cbsinteractive.hb.omtrdc.net. 32 IN A 34.232.175.197
cbsinteractive.hb.omtrdc.net. 32 IN A 34.233.162.93
cbsinteractive.hb.omtrdc.net. 32 IN A 34.233.220.49
cbsinteractive.hb.omtrdc.net. 32 IN A 34.234.105.18
cbsinteractive.hb.omtrdc.net. 32 IN A 34.234.108.125
cbsinteractive.hb.omtrdc.net. 32 IN A 34.234.124.79

;; Query time: 24 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Apr 26 20:40:57 UTC 2018
;; MSG SIZE rcvd: 409

pi@raspberrypi:~ $ dig om.cbsi.com @127.0.0.1 -p 53

; <<>> DiG 9.10.3-P4-Raspbian <<>> om.cbsi.com @127.0.0.1 -p 53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59070
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1536
;; QUESTION SECTION:
;om.cbsi.com. IN A

;; ANSWER SECTION:
om.cbsi.com. 251 IN CNAME cbsinteractive.d2.sc.omtrdc.net.
cbsinteractive.d2.sc.omtrdc.net. 251 IN A 172.82.206.17

;; Query time: 19 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Apr 26 20:41:08 UTC 2018
;; MSG SIZE rcvd: 143

pi@raspberrypi:~ $ dig dw.cbsi.com @127.0.0.1 -p 53

; <<>> DiG 9.10.3-P4-Raspbian <<>> dw.cbsi.com @127.0.0.1 -p 53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55323
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1536
;; QUESTION SECTION:
;dw.cbsi.com. IN A

;; ANSWER SECTION:
dw.cbsi.com. 95 IN CNAME dw-cbsi.cnet-basic-performance.akadns.net.
dw-cbsi.cnet-basic-performance.akadns.net. 95 IN A 64.30.224.172

;; Query time: 20 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Apr 26 20:41:16 UTC 2018
;; MSG SIZE rcvd: 163

[RamSet]

From the answer, all 3 domains resolve to their correct IPs and none of them are blocked at Pi-hole level.

There's something else that's being blocked but deff not those domains.

Can you tail the log when trying to play through Roku? It will tell you in real time, what's requested and the the request status.

[nwaves]

I did that and you can see it 4-5 posts above, it's starts with "Here's the log".

[RamSet]

@nwaves

Apr 25 01:33:37 dnsmasq[7040]: 31821 192.168.17.251/43788 forwarded cbsinteractive.hb.omtrdc.net to 127.0.0.1

It fails at this check.

The domain is present in list.0.raw.githubusercontent.com.domains
but if you have it whitelisted, that should override that restriction.

[nwaves]

pi@raspberrypi:~ $ pihole -w -l
Displaying gravity resistant domains:

1: dw.cbsi.com
2: cbsinteractive.hb.omtrdc.net
3: om.cbsi.com
4: cws.conviva.com

When I try to lookup the domain it fails, even though you see it's in the whitelist:

nslookup cbsinteractive.hb.omtrdc.net
Server: raspberrypi
Address: 192.168.17.2

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to raspberrypi timed-out

[RamSet]

what is your Pi-hole version?

See if anything here will help:

[PSA] Having Whitelisting issues with 3.3? Read here

Hi All, After a few days of pulling out our hair and troubleshooting this whitelisting issue that some of you have reported, we're finally getting to the bottom of it. The good news is, whitelisting is not completely broken. You can still whitelist domains from the cli with no issues by calling pihole -w [domain-to-whitelist]. The issue only affects whitelisting from the admin page (whitelist page, query log, and block page) Take a look over this pull request where I've attempted to explain w…

[nwaves]

pi@raspberrypi:~ $ pihole -v
Pi-hole version is v3.3.1 (Latest: v3.3.1)
AdminLTE version is v3.3 (Latest: v3.3)
FTL version is v3.0 (Latest: v3.0)

[RamSet]

@nwaves

nslookup cbsinteractive.hb.omtrdc.net

Server: raspberrypi
Address: 192.168.17.2
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to raspberrypi timed-out

looks like there's a hiccup there ...

is that the output of a command executed on the pi ?

You might want to create a debug token so that the devs can look into the debug log for any possible errors recorded there.

[nwaves]

I just nuked the whitelist and did it in CLI, still not working. Also, not sure how to remove the 1st empty line:

pi@raspberrypi:~ $ pihole -w -l
Displaying gravity resistant domains:

1:
2: dw.cbsi.com
3: cbsinteractive.hb.omtrdc.net
4: om.cbsi.com
5: cws.conviva.com

Tail log after redoing the whitelist:
Apr 26 21:16:32 dnsmasq[12594]: 50541 192.168.17.251/45227 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50541 192.168.17.251/45227 forwarded sugarland.sb.roku.com to 127.0.0.1
Apr 26 21:16:32 dnsmasq[12594]: 50541 192.168.17.251/45227 reply sugarland.sb.roku.com is 54.240.190.126
Apr 26 21:16:32 dnsmasq[12594]: 50542 192.168.17.251/41812 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50542 192.168.17.251/41812 cached sugarland.sb.roku.com is 54.240.190.126
Apr 26 21:16:32 dnsmasq[12594]: 50543 192.168.17.251/38605 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50543 192.168.17.251/38605 cached sugarland.sb.roku.com is 54.240.190.126
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 query[A] api.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 forwarded api.roku.com to 127.0.0.1
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 reply api.roku.com is <CNAME
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 reply api.cs.roku.com is 34.196.65.200
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 reply api.cs.roku.com is 52.72.190.22
Apr 26 21:16:32 dnsmasq[12594]: 50545 192.168.17.251/44014 query[A] api.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50545 192.168.17.251/44014 cached api.roku.com is <CNAME
Apr 26 21:16:32 dnsmasq[12594]: 50545 192.168.17.251/44014 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:16:32 dnsmasq[12594]: 50545 192.168.17.251/44014 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:16:32 dnsmasq[12594]: 50546 192.168.17.251/42691 query[A] api.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50546 192.168.17.251/42691 cached api.roku.com is <CNAME
Apr 26 21:16:32 dnsmasq[12594]: 50546 192.168.17.251/42691 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:16:32 dnsmasq[12594]: 50546 192.168.17.251/42691 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:16:32 dnsmasq[12594]: 50547 192.168.17.251/58579 query[A] api.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50547 192.168.17.251/58579 cached api.roku.com is <CNAME
Apr 26 21:16:32 dnsmasq[12594]: 50547 192.168.17.251/58579 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:16:32 dnsmasq[12594]: 50547 192.168.17.251/58579 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:16:33 dnsmasq[12594]: 50549 192.168.17.251/57597 query[A] channels.roku.com from 192.168.17.251
Apr 26 21:16:33 dnsmasq[12594]: 50549 192.168.17.251/57597 forwarded channels.roku.com to 127.0.0.1
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply channels.roku.com is <CNAME
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.59
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.62
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.78
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.98
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.112
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.120
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.158
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.236
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 query[A] image.roku.com from 192.168.17.251
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 forwarded image.roku.com to 127.0.0.1
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply image.roku.com is <CNAME
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.18
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.59
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.80
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.119
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.173
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.186
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.214
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.249
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 query[A] wwwimg.roku.com from 192.168.17.251
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 forwarded wwwimg.roku.com to 127.0.0.1
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.12
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.25
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.43
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.89
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.90
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.127
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.156
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.243
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 query[A] customer-feedbacks.web.roku.com from 192.168.17.251
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 forwarded customer-feedbacks.web.roku.com to 127.0.0.1
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply customer-feedbacks.web.roku.com is <CNAME
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.2
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.52
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.105
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.152
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.157
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.210
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.227
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.236
Apr 26 21:16:39 dnsmasq[12594]: 50553 192.168.17.251/52770 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:39 dnsmasq[12594]: 50553 192.168.17.251/52770 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:40 dnsmasq[12594]: 50554 192.168.17.251/35292 query[A] imasdk.googleapis.com from 192.168.17.251
Apr 26 21:16:40 dnsmasq[12594]: 50554 192.168.17.251/35292 /etc/pihole/gravity.list imasdk.googleapis.com is 192.168.17.2
Apr 26 21:16:40 dnsmasq[12594]: 50556 192.168.17.251/52980 query[A] b.scorecardresearch.com from 192.168.17.251
Apr 26 21:16:40 dnsmasq[12594]: 50556 192.168.17.251/52980 /etc/pihole/gravity.list b.scorecardresearch.com is 192.168.17.2
Apr 26 21:16:40 dnsmasq[12594]: 50557 192.168.17.251/37437 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:40 dnsmasq[12594]: 50557 192.168.17.251/37437 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:41 dnsmasq[12594]: 50558 192.168.17.251/53600 query[A] cbsservice.aws.syncbak.com from 192.168.17.251
Apr 26 21:16:41 dnsmasq[12594]: 50558 192.168.17.251/53600 forwarded cbsservice.aws.syncbak.com to 127.0.0.1
Apr 26 21:16:41 dnsmasq[12594]: 50558 192.168.17.251/53600 reply cbsservice.aws.syncbak.com is 34.230.242.122
Apr 26 21:16:41 dnsmasq[12594]: 50558 192.168.17.251/53600 reply cbsservice.aws.syncbak.com is 54.236.139.1
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 query[A] om.cbsi.com from 192.168.17.251
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 forwarded om.cbsi.com to 127.0.0.1
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 reply om.cbsi.com is <CNAME
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 reply cbsinteractive.d2.sc.omtrdc.net is 172.82.206.17
Apr 26 21:16:46 dnsmasq[12594]: 50562 192.168.17.251/52673 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:46 dnsmasq[12594]: 50562 192.168.17.251/52673 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 cached wwwimage.cbsstatic.com is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 cached wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 cached a917.g.akamai.net is 23.62.6.24
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 cached a917.g.akamai.net is 23.62.6.16
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 cached wwwimage.cbsstatic.com is <CNAME
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 cached wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 cached a917.g.akamai.net is 23.62.6.24
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 cached a917.g.akamai.net is 23.62.6.16
Apr 26 21:16:55 dnsmasq[12594]: 50575 192.168.17.251/57033 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:55 dnsmasq[12594]: 50575 192.168.17.251/57033 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:58 dnsmasq[12594]: 50576 192.168.17.251/43240 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:58 dnsmasq[12594]: 50576 192.168.17.251/43240 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 query[A] scribe.logs.roku.com from 192.168.17.251
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 forwarded scribe.logs.roku.com to 127.0.0.1
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 34.206.157.119
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 34.224.197.164
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 52.54.182.164
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 52.72.13.230
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 52.72.159.85
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 54.174.50.239
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 54.174.120.96
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 54.209.109.176
Apr 26 21:16:59 dnsmasq[12594]: 50578 192.168.17.251/57436 query[A] link.theplatform.com from 192.168.17.251
Apr 26 21:16:59 dnsmasq[12594]: 50578 192.168.17.251/57436 forwarded link.theplatform.com to 127.0.0.1
Apr 26 21:16:59 dnsmasq[12594]: 50578 192.168.17.251/57436 reply link.theplatform.com is 199.27.170.197
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 query[A] cbsios-vh.akamaihd.net from 192.168.17.251
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 forwarded cbsios-vh.akamaihd.net to 127.0.0.1
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 reply cbsios-vh.akamaihd.net is <CNAME
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 reply a289.w16.akamai.net is 23.215.133.11
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 reply a289.w16.akamai.net is 23.215.133.40
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 query[A] cbsinteractive.hb.omtrdc.net from 192.168.17.251
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 forwarded cbsinteractive.hb.omtrdc.net to 127.0.0.1
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.192.20.239
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.194.155.116
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.199.207.52
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.200.39.76
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.236.167.192
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 52.2.65.206
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 52.2.195.38
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 54.236.181.210
Apr 26 21:17:00 dnsmasq[12594]: 50581 192.168.17.251/37215 query[A] dw.cbsi.com from 192.168.17.251
Apr 26 21:17:00 dnsmasq[12594]: 50581 192.168.17.251/37215 cached dw.cbsi.com is <CNAME
Apr 26 21:17:00 dnsmasq[12594]: 50581 192.168.17.251/37215 cached dw-cbsi.cnet-basic-performance.akadns.net is 64.30.230.22
Apr 26 21:17:00 dnsmasq[12594]: 50582 192.168.17.251/52574 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:17:00 dnsmasq[12594]: 50582 192.168.17.251/52574 cached www.cbs.com is 64.30.230.20
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 query[A] cws.conviva.com from 192.168.17.251
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 forwarded cws.conviva.com to 127.0.0.1
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-us-east.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-eu-west-1.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 52.48.146.92
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 52.48.166.217
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.72.208.101
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.0.26
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.124.42
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.195.110
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.246.154.104
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.246.156.175
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 query[A] cws.conviva.com from 192.168.17.251
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-us-east.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-eu-west-1.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.246.156.175
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.246.154.104
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.195.110
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.124.42
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.0.26
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.72.208.101
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 52.48.166.217
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 52.48.146.92

[nwaves]

Looks like the whitelist is working now but videos still not playing:

pi@raspberrypi:~ $ nslookup cbsinteractive.hb.omtrdc.net
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
Name: cbsinteractive.hb.omtrdc.net
Address: 34.206.181.108
Name: cbsinteractive.hb.omtrdc.net
Address: 34.206.74.104
Name: cbsinteractive.hb.omtrdc.net
Address: 34.202.228.193
Name: cbsinteractive.hb.omtrdc.net
Address: 34.202.32.43
Name: cbsinteractive.hb.omtrdc.net
Address: 34.200.93.185
Name: cbsinteractive.hb.omtrdc.net
Address: 34.200.39.76
Name: cbsinteractive.hb.omtrdc.net
Address: 34.199.207.52
Name: cbsinteractive.hb.omtrdc.net
Address: 34.194.155.116

[RamSet]

@nwaves

Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 query[A] om.cbsi.com from 192.168.17.251
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 forwarded om.cbsi.com to 127.0.0.1

@nwaves

Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 query[A] cbsinteractive.hb.omtrdc.net from 192.168.17.251
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 forwarded cbsinteractive.hb.omtrdc.net to 127.0.0.1

Yep. Still fails ...