Videos won't play on Roku CBS All Access

pi@raspberrypi:~ $ dig cbsinteractive.hb.omtrdc.net @127.0.0.1 -p 53

; <<>> DiG 9.10.3-P4-Raspbian <<>> cbsinteractive.hb.omtrdc.net @127.0.0.1 -p 53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62006
;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1536
;; QUESTION SECTION:
;cbsinteractive.hb.omtrdc.net. IN A

;; ANSWER SECTION:
cbsinteractive.hb.omtrdc.net. 32 IN A 34.231.45.183
cbsinteractive.hb.omtrdc.net. 32 IN A 34.231.205.63
cbsinteractive.hb.omtrdc.net. 32 IN A 34.232.175.197
cbsinteractive.hb.omtrdc.net. 32 IN A 34.233.162.93
cbsinteractive.hb.omtrdc.net. 32 IN A 34.233.220.49
cbsinteractive.hb.omtrdc.net. 32 IN A 34.234.105.18
cbsinteractive.hb.omtrdc.net. 32 IN A 34.234.108.125
cbsinteractive.hb.omtrdc.net. 32 IN A 34.234.124.79

;; Query time: 24 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Apr 26 20:40:57 UTC 2018
;; MSG SIZE rcvd: 409

pi@raspberrypi:~ $ dig om.cbsi.com @127.0.0.1 -p 53

; <<>> DiG 9.10.3-P4-Raspbian <<>> om.cbsi.com @127.0.0.1 -p 53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59070
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1536
;; QUESTION SECTION:
;om.cbsi.com. IN A

;; ANSWER SECTION:
om.cbsi.com. 251 IN CNAME cbsinteractive.d2.sc.omtrdc.net.
cbsinteractive.d2.sc.omtrdc.net. 251 IN A 172.82.206.17

;; Query time: 19 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Apr 26 20:41:08 UTC 2018
;; MSG SIZE rcvd: 143

pi@raspberrypi:~ $ dig dw.cbsi.com @127.0.0.1 -p 53

; <<>> DiG 9.10.3-P4-Raspbian <<>> dw.cbsi.com @127.0.0.1 -p 53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55323
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1536
;; QUESTION SECTION:
;dw.cbsi.com. IN A

;; ANSWER SECTION:
dw.cbsi.com. 95 IN CNAME dw-cbsi.cnet-basic-performance.akadns.net.
dw-cbsi.cnet-basic-performance.akadns.net. 95 IN A 64.30.224.172

;; Query time: 20 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Apr 26 20:41:16 UTC 2018
;; MSG SIZE rcvd: 163

From the answer, all 3 domains resolve to their correct IPs and none of them are blocked at Pi-hole level.

There's something else that's being blocked but deff not those domains.

Can you tail the log when trying to play through Roku? It will tell you in real time, what's requested and the the request status.

I did that and you can see it 4-5 posts above, it's starts with "Here's the log".

It fails at this check.

The domain is present in list.0.raw.githubusercontent.com.domains
but if you have it whitelisted, that should override that restriction.

pi@raspberrypi:~ $ pihole -w -l
Displaying gravity resistant domains:

1: dw.cbsi.com
2: cbsinteractive.hb.omtrdc.net
3: om.cbsi.com
4: cws.conviva.com

When I try to lookup the domain it fails, even though you see it's in the whitelist:

nslookup cbsinteractive.hb.omtrdc.net
Server: raspberrypi
Address: 192.168.17.2

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to raspberrypi timed-out

what is your Pi-hole version?

See if anything here will help:

pi@raspberrypi:~ $ pihole -v
Pi-hole version is v3.3.1 (Latest: v3.3.1)
AdminLTE version is v3.3 (Latest: v3.3)
FTL version is v3.0 (Latest: v3.0)

looks like there's a hiccup there ...

is that the output of a command executed on the pi ?

You might want to create a debug token so that the devs can look into the debug log for any possible errors recorded there.

I just nuked the whitelist and did it in CLI, still not working. Also, not sure how to remove the 1st empty line:

pi@raspberrypi:~ $ pihole -w -l
Displaying gravity resistant domains:

1:
2: dw.cbsi.com
3: cbsinteractive.hb.omtrdc.net
4: om.cbsi.com
5: cws.conviva.com

Tail log after redoing the whitelist:
Apr 26 21:16:32 dnsmasq[12594]: 50541 192.168.17.251/45227 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50541 192.168.17.251/45227 forwarded sugarland.sb.roku.com to 127.0.0.1
Apr 26 21:16:32 dnsmasq[12594]: 50541 192.168.17.251/45227 reply sugarland.sb.roku.com is 54.240.190.126
Apr 26 21:16:32 dnsmasq[12594]: 50542 192.168.17.251/41812 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50542 192.168.17.251/41812 cached sugarland.sb.roku.com is 54.240.190.126
Apr 26 21:16:32 dnsmasq[12594]: 50543 192.168.17.251/38605 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50543 192.168.17.251/38605 cached sugarland.sb.roku.com is 54.240.190.126
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 query[A] api.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 forwarded api.roku.com to 127.0.0.1
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 reply api.roku.com is <CNAME
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 reply api.cs.roku.com is 34.196.65.200
Apr 26 21:16:32 dnsmasq[12594]: 50544 192.168.17.251/55045 reply api.cs.roku.com is 52.72.190.22
Apr 26 21:16:32 dnsmasq[12594]: 50545 192.168.17.251/44014 query[A] api.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50545 192.168.17.251/44014 cached api.roku.com is <CNAME
Apr 26 21:16:32 dnsmasq[12594]: 50545 192.168.17.251/44014 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:16:32 dnsmasq[12594]: 50545 192.168.17.251/44014 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:16:32 dnsmasq[12594]: 50546 192.168.17.251/42691 query[A] api.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50546 192.168.17.251/42691 cached api.roku.com is <CNAME
Apr 26 21:16:32 dnsmasq[12594]: 50546 192.168.17.251/42691 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:16:32 dnsmasq[12594]: 50546 192.168.17.251/42691 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:16:32 dnsmasq[12594]: 50547 192.168.17.251/58579 query[A] api.roku.com from 192.168.17.251
Apr 26 21:16:32 dnsmasq[12594]: 50547 192.168.17.251/58579 cached api.roku.com is <CNAME
Apr 26 21:16:32 dnsmasq[12594]: 50547 192.168.17.251/58579 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:16:32 dnsmasq[12594]: 50547 192.168.17.251/58579 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:16:33 dnsmasq[12594]: 50549 192.168.17.251/57597 query[A] channels.roku.com from 192.168.17.251
Apr 26 21:16:33 dnsmasq[12594]: 50549 192.168.17.251/57597 forwarded channels.roku.com to 127.0.0.1
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply channels.roku.com is <CNAME
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.59
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.62
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.78
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.98
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.112
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.120
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.158
Apr 26 21:16:34 dnsmasq[12594]: 50549 192.168.17.251/57597 reply dgnnkc10f8cms.cloudfront.net is 52.84.128.236
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 query[A] image.roku.com from 192.168.17.251
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 forwarded image.roku.com to 127.0.0.1
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply image.roku.com is <CNAME
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.18
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.59
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.80
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.119
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.173
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.186
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.214
Apr 26 21:16:37 dnsmasq[12594]: 50550 192.168.17.251/60754 reply d1ohvx6nln6ht.cloudfront.net is 52.85.93.249
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 query[A] wwwimg.roku.com from 192.168.17.251
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 forwarded wwwimg.roku.com to 127.0.0.1
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.12
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.25
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.43
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.89
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.90
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.127
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.156
Apr 26 21:16:38 dnsmasq[12594]: 50551 192.168.17.251/33361 reply wwwimg.roku.com is 52.85.93.243
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 query[A] customer-feedbacks.web.roku.com from 192.168.17.251
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 forwarded customer-feedbacks.web.roku.com to 127.0.0.1
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply customer-feedbacks.web.roku.com is <CNAME
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.2
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.52
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.105
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.152
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.157
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.210
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.227
Apr 26 21:16:38 dnsmasq[12594]: 50552 192.168.17.251/52255 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.236
Apr 26 21:16:39 dnsmasq[12594]: 50553 192.168.17.251/52770 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:39 dnsmasq[12594]: 50553 192.168.17.251/52770 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:40 dnsmasq[12594]: 50554 192.168.17.251/35292 query[A] imasdk.googleapis.com from 192.168.17.251
Apr 26 21:16:40 dnsmasq[12594]: 50554 192.168.17.251/35292 /etc/pihole/gravity.list imasdk.googleapis.com is 192.168.17.2
Apr 26 21:16:40 dnsmasq[12594]: 50556 192.168.17.251/52980 query[A] b.scorecardresearch.com from 192.168.17.251
Apr 26 21:16:40 dnsmasq[12594]: 50556 192.168.17.251/52980 /etc/pihole/gravity.list b.scorecardresearch.com is 192.168.17.2
Apr 26 21:16:40 dnsmasq[12594]: 50557 192.168.17.251/37437 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:40 dnsmasq[12594]: 50557 192.168.17.251/37437 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:41 dnsmasq[12594]: 50558 192.168.17.251/53600 query[A] cbsservice.aws.syncbak.com from 192.168.17.251
Apr 26 21:16:41 dnsmasq[12594]: 50558 192.168.17.251/53600 forwarded cbsservice.aws.syncbak.com to 127.0.0.1
Apr 26 21:16:41 dnsmasq[12594]: 50558 192.168.17.251/53600 reply cbsservice.aws.syncbak.com is 34.230.242.122
Apr 26 21:16:41 dnsmasq[12594]: 50558 192.168.17.251/53600 reply cbsservice.aws.syncbak.com is 54.236.139.1
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 query[A] om.cbsi.com from 192.168.17.251
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 forwarded om.cbsi.com to 127.0.0.1
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 reply om.cbsi.com is <CNAME
Apr 26 21:16:45 dnsmasq[12594]: 50561 192.168.17.251/48332 reply cbsinteractive.d2.sc.omtrdc.net is 172.82.206.17
Apr 26 21:16:46 dnsmasq[12594]: 50562 192.168.17.251/52673 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:46 dnsmasq[12594]: 50562 192.168.17.251/52673 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:16:49 dnsmasq[12594]: 50564 192.168.17.251/42739 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 cached wwwimage.cbsstatic.com is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 cached wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 cached a917.g.akamai.net is 23.62.6.24
Apr 26 21:16:49 dnsmasq[12594]: 50566 192.168.17.251/47103 cached a917.g.akamai.net is 23.62.6.16
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:16:49 dnsmasq[12594]: 50565 192.168.17.251/35613 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 cached wwwimage.cbsstatic.com is <CNAME
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 cached wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 cached a917.g.akamai.net is 23.62.6.24
Apr 26 21:16:50 dnsmasq[12594]: 50567 192.168.17.251/37255 cached a917.g.akamai.net is 23.62.6.16
Apr 26 21:16:55 dnsmasq[12594]: 50575 192.168.17.251/57033 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:55 dnsmasq[12594]: 50575 192.168.17.251/57033 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:58 dnsmasq[12594]: 50576 192.168.17.251/43240 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:16:58 dnsmasq[12594]: 50576 192.168.17.251/43240 cached www.cbs.com is 64.30.230.20
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 query[A] scribe.logs.roku.com from 192.168.17.251
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 forwarded scribe.logs.roku.com to 127.0.0.1
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 34.206.157.119
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 34.224.197.164
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 52.54.182.164
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 52.72.13.230
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 52.72.159.85
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 54.174.50.239
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 54.174.120.96
Apr 26 21:16:59 dnsmasq[12594]: 50577 192.168.17.251/35377 reply scribe.logs.roku.com is 54.209.109.176
Apr 26 21:16:59 dnsmasq[12594]: 50578 192.168.17.251/57436 query[A] link.theplatform.com from 192.168.17.251
Apr 26 21:16:59 dnsmasq[12594]: 50578 192.168.17.251/57436 forwarded link.theplatform.com to 127.0.0.1
Apr 26 21:16:59 dnsmasq[12594]: 50578 192.168.17.251/57436 reply link.theplatform.com is 199.27.170.197
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 query[A] cbsios-vh.akamaihd.net from 192.168.17.251
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 forwarded cbsios-vh.akamaihd.net to 127.0.0.1
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 reply cbsios-vh.akamaihd.net is <CNAME
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 reply a289.w16.akamai.net is 23.215.133.11
Apr 26 21:16:59 dnsmasq[12594]: 50579 192.168.17.251/47605 reply a289.w16.akamai.net is 23.215.133.40
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 query[A] cbsinteractive.hb.omtrdc.net from 192.168.17.251
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 forwarded cbsinteractive.hb.omtrdc.net to 127.0.0.1
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.192.20.239
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.194.155.116
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.199.207.52
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.200.39.76
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 34.236.167.192
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 52.2.65.206
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 52.2.195.38
Apr 26 21:17:00 dnsmasq[12594]: 50580 192.168.17.251/58340 reply cbsinteractive.hb.omtrdc.net is 54.236.181.210
Apr 26 21:17:00 dnsmasq[12594]: 50581 192.168.17.251/37215 query[A] dw.cbsi.com from 192.168.17.251
Apr 26 21:17:00 dnsmasq[12594]: 50581 192.168.17.251/37215 cached dw.cbsi.com is <CNAME
Apr 26 21:17:00 dnsmasq[12594]: 50581 192.168.17.251/37215 cached dw-cbsi.cnet-basic-performance.akadns.net is 64.30.230.22
Apr 26 21:17:00 dnsmasq[12594]: 50582 192.168.17.251/52574 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:17:00 dnsmasq[12594]: 50582 192.168.17.251/52574 cached www.cbs.com is 64.30.230.20
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 query[A] cws.conviva.com from 192.168.17.251
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 forwarded cws.conviva.com to 127.0.0.1
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-us-east.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-eu-west-1.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 52.48.146.92
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 52.48.166.217
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.72.208.101
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.0.26
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.124.42
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.195.110
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.246.154.104
Apr 26 21:17:01 dnsmasq[12594]: 50583 192.168.17.251/52011 reply cws-1100677457.eu-west-1.elb.amazonaws.com is 54.246.156.175
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 query[A] cws.conviva.com from 192.168.17.251
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-us-east.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-eu-west-1.conviva.com is <CNAME
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.246.156.175
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.246.154.104
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.195.110
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.124.42
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.154.0.26
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 54.72.208.101
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 52.48.166.217
Apr 26 21:17:01 dnsmasq[7118]: 50584 192.168.17.251/39630 cached cws-1100677457.eu-west-1.elb.amazonaws.com is 52.48.146.92

Looks like the whitelist is working now but videos still not playing:

pi@raspberrypi:~ $ nslookup cbsinteractive.hb.omtrdc.net
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
Name: cbsinteractive.hb.omtrdc.net
Address: 34.206.181.108
Name: cbsinteractive.hb.omtrdc.net
Address: 34.206.74.104
Name: cbsinteractive.hb.omtrdc.net
Address: 34.202.228.193
Name: cbsinteractive.hb.omtrdc.net
Address: 34.202.32.43
Name: cbsinteractive.hb.omtrdc.net
Address: 34.200.93.185
Name: cbsinteractive.hb.omtrdc.net
Address: 34.200.39.76
Name: cbsinteractive.hb.omtrdc.net
Address: 34.199.207.52
Name: cbsinteractive.hb.omtrdc.net
Address: 34.194.155.116

Yep. Still fails ...

try the other 2 also.

pi@raspberrypi:~ $ nslookup om.cbsi.com
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
om.cbsi.com canonical name = cbsinteractive.d2.sc.omtrdc.net.
Name: cbsinteractive.d2.sc.omtrdc.net
Address: 172.82.206.17

pi@raspberrypi:~ $ nslookup dw.cbsi.com
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
dw.cbsi.com canonical name = dw-cbsi.cnet-basic-performance.akadns.net.
Name: dw-cbsi.cnet-basic-performance.akadns.net
Address: 64.30.224.172

pi@raspberrypi:~ $ nslookup cws.conviva.com
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
cws.conviva.com canonical name = cws-us-east.conviva.com.
cws-us-east.conviva.com canonical name = cws-eu-west-1.conviva.com.
cws-eu-west-1.conviva.com canonical name = cws-1100677457.eu-west-1.elb.amazonaws.com.
Name: cws-1100677457.eu-west-1.elb.amazonaws.com
Address: 34.249.24.207
Name: cws-1100677457.eu-west-1.elb.amazonaws.com
Address: 34.249.33.101
Name: cws-1100677457.eu-west-1.elb.amazonaws.com
Address: 34.249.68.162
Name: cws-1100677457.eu-west-1.elb.amazonaws.com
Address: 34.250.58.55
Name: cws-1100677457.eu-west-1.elb.amazonaws.com
Address: 52.17.22.82
Name: cws-1100677457.eu-west-1.elb.amazonaws.com
Address: 54.72.208.101
Name: cws-1100677457.eu-west-1.elb.amazonaws.com
Address: 54.72.252.10
Name: cws-1100677457.eu-west-1.elb.amazonaws.com
Address: 54.76.64.163

sudo service pihole-FTL restart
sudo service dnsmasq restart

Done that and restarted Roku. Here's the taillog

Apr 26 21:32:12 dnsmasq[7341]: 301 192.168.17.251/37176 query[A] imasdk.googleapis.com from 192.168.17.251
Apr 26 21:32:12 dnsmasq[7341]: 301 192.168.17.251/37176 /etc/pihole/gravity.list imasdk.googleapis.com is 192.168.17.2
Apr 26 21:32:13 dnsmasq[7341]: 302 192.168.17.251/36809 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:32:13 dnsmasq[7341]: 302 192.168.17.251/36809 cached www.cbs.com is 64.30.230.20
Apr 26 21:32:13 dnsmasq[7341]: 303 192.168.17.251/41661 query[A] b.scorecardresearch.com from 192.168.17.251
Apr 26 21:32:13 dnsmasq[7341]: 303 192.168.17.251/41661 /etc/pihole/gravity.list b.scorecardresearch.com is 192.168.17.2
Apr 26 21:32:13 dnsmasq[7341]: 304 192.168.17.251/37207 query[A] cbsservice.aws.syncbak.com from 192.168.17.251
Apr 26 21:32:13 dnsmasq[7341]: 304 192.168.17.251/37207 forwarded cbsservice.aws.syncbak.com to 127.0.0.1
Apr 26 21:32:13 dnsmasq[7341]: 304 192.168.17.251/37207 reply cbsservice.aws.syncbak.com is 34.230.242.122
Apr 26 21:32:13 dnsmasq[7341]: 304 192.168.17.251/37207 reply cbsservice.aws.syncbak.com is 54.236.139.1
Apr 26 21:32:18 dnsmasq[7341]: 307 192.168.17.251/59560 query[A] om.cbsi.com from 192.168.17.251
Apr 26 21:32:18 dnsmasq[7341]: 307 192.168.17.251/59560 cached om.cbsi.com is <CNAME
Apr 26 21:32:18 dnsmasq[7341]: 307 192.168.17.251/59560 cached cbsinteractive.d2.sc.omtrdc.net is 172.82.206.17
Apr 26 21:32:18 dnsmasq[7341]: 308 192.168.17.251/38454 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:32:18 dnsmasq[7341]: 308 192.168.17.251/38454 cached www.cbs.com is 64.30.230.20
Apr 26 21:32:21 dnsmasq[7341]: 309 192.168.17.251/60492 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:32:21 dnsmasq[7341]: 309 192.168.17.251/60492 forwarded sugarland.sb.roku.com to 127.0.0.1
Apr 26 21:32:21 dnsmasq[7341]: 309 192.168.17.251/60492 reply sugarland.sb.roku.com is 52.84.122.223
Apr 26 21:32:21 dnsmasq[7341]: 310 192.168.17.251/55048 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:32:21 dnsmasq[7341]: 310 192.168.17.251/55048 cached sugarland.sb.roku.com is 52.84.122.223
Apr 26 21:32:21 dnsmasq[7341]: 311 192.168.17.251/46560 query[A] sugarland.sb.roku.com from 192.168.17.251
Apr 26 21:32:21 dnsmasq[7341]: 311 192.168.17.251/46560 cached sugarland.sb.roku.com is 52.84.122.223
Apr 26 21:32:21 dnsmasq[7341]: 312 192.168.17.251/52805 query[A] api.roku.com from 192.168.17.251
Apr 26 21:32:21 dnsmasq[7341]: 312 192.168.17.251/52805 cached api.roku.com is <CNAME
Apr 26 21:32:21 dnsmasq[7341]: 312 192.168.17.251/52805 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:32:21 dnsmasq[7341]: 312 192.168.17.251/52805 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:32:22 dnsmasq[7341]: 313 192.168.17.251/47528 query[A] api.roku.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 313 192.168.17.251/47528 cached api.roku.com is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 313 192.168.17.251/47528 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:32:22 dnsmasq[7341]: 313 192.168.17.251/47528 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:32:22 dnsmasq[7341]: 314 192.168.17.251/48127 query[A] api.roku.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 314 192.168.17.251/48127 cached api.roku.com is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 314 192.168.17.251/48127 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:32:22 dnsmasq[7341]: 314 192.168.17.251/48127 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:32:22 dnsmasq[7341]: 315 192.168.17.251/60252 query[A] api.roku.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 315 192.168.17.251/60252 cached api.roku.com is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 315 192.168.17.251/60252 cached api.cs.roku.com is 52.72.190.22
Apr 26 21:32:22 dnsmasq[7341]: 315 192.168.17.251/60252 cached api.cs.roku.com is 34.196.65.200
Apr 26 21:32:22 dnsmasq[7341]: 316 192.168.17.251/52639 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 316 192.168.17.251/52639 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:32:22 dnsmasq[7341]: 317 192.168.17.251/47728 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 317 192.168.17.251/47728 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:32:22 dnsmasq[7341]: 317 192.168.17.251/47728 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 317 192.168.17.251/47728 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 317 192.168.17.251/47728 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:32:22 dnsmasq[7341]: 317 192.168.17.251/47728 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:32:22 dnsmasq[7341]: 318 192.168.17.251/51654 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 318 192.168.17.251/51654 cached wwwimage.cbsstatic.com is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 318 192.168.17.251/51654 cached wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 318 192.168.17.251/51654 cached a917.g.akamai.net is 23.62.6.24
Apr 26 21:32:22 dnsmasq[7341]: 318 192.168.17.251/51654 cached a917.g.akamai.net is 23.62.6.16
Apr 26 21:32:22 dnsmasq[7341]: 316 192.168.17.251/52639 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 316 192.168.17.251/52639 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 316 192.168.17.251/52639 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:32:22 dnsmasq[7341]: 316 192.168.17.251/52639 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:32:22 dnsmasq[7341]: 319 192.168.17.251/41863 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 319 192.168.17.251/41863 cached wwwimage.cbsstatic.com is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 319 192.168.17.251/41863 cached wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 319 192.168.17.251/41863 cached a917.g.akamai.net is 23.62.6.24
Apr 26 21:32:22 dnsmasq[7341]: 319 192.168.17.251/41863 cached a917.g.akamai.net is 23.62.6.16
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 query[A] wwwimg.roku.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 forwarded wwwimg.roku.com to 127.0.0.1
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 reply wwwimg.roku.com is 54.230.19.24
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 reply wwwimg.roku.com is 54.230.19.46
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 reply wwwimg.roku.com is 54.230.19.57
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 reply wwwimg.roku.com is 54.230.19.66
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 reply wwwimg.roku.com is 54.230.19.87
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 reply wwwimg.roku.com is 54.230.19.232
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 reply wwwimg.roku.com is 54.230.19.233
Apr 26 21:32:22 dnsmasq[7341]: 320 192.168.17.251/42164 reply wwwimg.roku.com is 54.230.19.250
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 query[A] customer-feedbacks.web.roku.com from 192.168.17.251
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 forwarded customer-feedbacks.web.roku.com to 127.0.0.1
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply customer-feedbacks.web.roku.com is <CNAME
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.2
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.52
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.105
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.152
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.157
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.210
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.227
Apr 26 21:32:22 dnsmasq[7341]: 321 192.168.17.251/34434 reply dc7eeru7ckgwe.cloudfront.net is 52.84.128.236
Apr 26 21:32:28 dnsmasq[7341]: 322 192.168.17.251/41234 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:32:28 dnsmasq[7341]: 322 192.168.17.251/41234 cached www.cbs.com is 64.30.230.20
Apr 26 21:32:31 dnsmasq[7341]: 324 192.168.17.251/50325 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:32:31 dnsmasq[7341]: 324 192.168.17.251/50325 cached www.cbs.com is 64.30.230.20
Apr 26 21:32:31 dnsmasq[7341]: 324 192.168.17.251/50325 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:32:31 dnsmasq[7341]: 324 192.168.17.251/50325 cached www.cbs.com is 64.30.230.20
Apr 26 21:32:32 dnsmasq[7341]: 325 192.168.17.251/60846 query[A] link.theplatform.com from 192.168.17.251
Apr 26 21:32:32 dnsmasq[7341]: 325 192.168.17.251/60846 forwarded link.theplatform.com to 127.0.0.1
Apr 26 21:32:32 dnsmasq[7341]: 325 192.168.17.251/60846 reply link.theplatform.com is 199.27.170.197
Apr 26 21:32:32 dnsmasq[7341]: 326 192.168.17.251/56706 query[A] cbsios-vh.akamaihd.net from 192.168.17.251
Apr 26 21:32:32 dnsmasq[7341]: 326 192.168.17.251/56706 forwarded cbsios-vh.akamaihd.net to 127.0.0.1
Apr 26 21:32:32 dnsmasq[7341]: 326 192.168.17.251/56706 reply cbsios-vh.akamaihd.net is <CNAME
Apr 26 21:32:32 dnsmasq[7341]: 326 192.168.17.251/56706 reply a289.w16.akamai.net is 23.215.133.11
Apr 26 21:32:32 dnsmasq[7341]: 326 192.168.17.251/56706 reply a289.w16.akamai.net is 23.215.133.40
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 query[A] cbsinteractive.hb.omtrdc.net from 192.168.17.251
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 forwarded cbsinteractive.hb.omtrdc.net to 127.0.0.1
Apr 26 21:32:33 dnsmasq[7341]: 328 192.168.17.251/51777 query[A] dw.cbsi.com from 192.168.17.251
Apr 26 21:32:33 dnsmasq[7341]: 328 192.168.17.251/51777 cached dw.cbsi.com is <CNAME
Apr 26 21:32:33 dnsmasq[7341]: 328 192.168.17.251/51777 cached dw-cbsi.cnet-basic-performance.akadns.net is 64.30.224.172
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 reply cbsinteractive.hb.omtrdc.net is 34.230.186.180
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 reply cbsinteractive.hb.omtrdc.net is 34.231.45.183
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 reply cbsinteractive.hb.omtrdc.net is 34.231.205.63
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 reply cbsinteractive.hb.omtrdc.net is 34.232.175.197
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 reply cbsinteractive.hb.omtrdc.net is 34.233.162.93
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 reply cbsinteractive.hb.omtrdc.net is 34.233.220.49
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 reply cbsinteractive.hb.omtrdc.net is 34.234.105.18
Apr 26 21:32:33 dnsmasq[7341]: 327 192.168.17.251/53039 reply cbsinteractive.hb.omtrdc.net is 34.234.108.125
Apr 26 21:32:33 dnsmasq[7341]: 329 192.168.17.251/39260 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:32:33 dnsmasq[7341]: 329 192.168.17.251/39260 cached www.cbs.com is 64.30.230.20
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 query[A] cws.conviva.com from 192.168.17.251
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 forwarded cws.conviva.com to 127.0.0.1
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws.conviva.com is <CNAME
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-us-east.conviva.com is <CNAME
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-us-west-2.conviva.com is <CNAME
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-1897690647.us-west-2.elb.amazonaws.com is 52.24.231.214
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-1897690647.us-west-2.elb.amazonaws.com is 52.27.91.52
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-1897690647.us-west-2.elb.amazonaws.com is 52.27.99.194
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-1897690647.us-west-2.elb.amazonaws.com is 52.40.130.116
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-1897690647.us-west-2.elb.amazonaws.com is 52.41.96.196
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-1897690647.us-west-2.elb.amazonaws.com is 52.42.87.125
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-1897690647.us-west-2.elb.amazonaws.com is 52.89.42.123
Apr 26 21:32:34 dnsmasq[7341]: 330 192.168.17.251/57306 reply cws-1897690647.us-west-2.elb.amazonaws.com is 54.71.109.87
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 query[A] cws.conviva.com from 192.168.17.251
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws.conviva.com is <CNAME
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-us-east.conviva.com is <CNAME
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-us-west-2.conviva.com is <CNAME
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-1897690647.us-west-2.elb.amazonaws.com is 54.71.109.87
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-1897690647.us-west-2.elb.amazonaws.com is 52.89.42.123
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-1897690647.us-west-2.elb.amazonaws.com is 52.42.87.125
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-1897690647.us-west-2.elb.amazonaws.com is 52.41.96.196
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-1897690647.us-west-2.elb.amazonaws.com is 52.40.130.116
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-1897690647.us-west-2.elb.amazonaws.com is 52.27.99.194
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-1897690647.us-west-2.elb.amazonaws.com is 52.27.91.52
Apr 26 21:32:34 dnsmasq[7434]: 331 192.168.17.251/33853 cached cws-1897690647.us-west-2.elb.amazonaws.com is 52.24.231.214

did you restart the FTL service?

restart the pi also ...

restarted both FTL and dnsmasq and then restarted pihole. Still no joy. Tail log below.

Apr 26 21:49:32 dnsmasq[487]: 345 192.168.17.251/42379 query[A] pubads.g.doubleclick.net from 192.168.17.251
Apr 26 21:49:32 dnsmasq[487]: 345 192.168.17.251/42379 /etc/pihole/gravity.list pubads.g.doubleclick.net is 192.168.17.2
Apr 26 21:49:32 dnsmasq[487]: 346 192.168.17.251/40676 query[A] pubads.g.doubleclick.net from 192.168.17.251
Apr 26 21:49:32 dnsmasq[487]: 346 192.168.17.251/40676 /etc/pihole/gravity.list pubads.g.doubleclick.net is 192.168.17.2
Apr 26 21:49:45 dnsmasq[487]: 350 192.168.17.251/60039 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:49:45 dnsmasq[487]: 350 192.168.17.251/60039 forwarded www.cbs.com to 127.0.0.1
Apr 26 21:49:45 dnsmasq[487]: 350 192.168.17.251/60039 reply www.cbs.com is 64.30.230.20
Apr 26 21:49:46 dnsmasq[487]: 351 192.168.17.251/44834 query[A] imasdk.googleapis.com from 192.168.17.251
Apr 26 21:49:46 dnsmasq[487]: 351 192.168.17.251/44834 /etc/pihole/gravity.list imasdk.googleapis.com is 192.168.17.2
Apr 26 21:49:46 dnsmasq[487]: 352 192.168.17.251/35181 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:49:46 dnsmasq[487]: 352 192.168.17.251/35181 cached www.cbs.com is 64.30.230.20
Apr 26 21:49:46 dnsmasq[487]: 353 192.168.17.251/42320 query[A] b.scorecardresearch.com from 192.168.17.251
Apr 26 21:49:46 dnsmasq[487]: 353 192.168.17.251/42320 /etc/pihole/gravity.list b.scorecardresearch.com is 192.168.17.2
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 query[A] scribe.logs.roku.com from 192.168.17.251
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 forwarded scribe.logs.roku.com to 127.0.0.1
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 reply scribe.logs.roku.com is 52.3.89.104
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 reply scribe.logs.roku.com is 52.4.131.179
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 reply scribe.logs.roku.com is 52.54.182.164
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 reply scribe.logs.roku.com is 52.72.13.230
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 reply scribe.logs.roku.com is 52.72.159.85
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 reply scribe.logs.roku.com is 52.203.118.22
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 reply scribe.logs.roku.com is 54.174.50.239
Apr 26 21:49:46 dnsmasq[487]: 354 192.168.17.251/59829 reply scribe.logs.roku.com is 54.174.120.96
Apr 26 21:49:47 dnsmasq[487]: 355 192.168.17.251/49829 query[A] cbsservice.aws.syncbak.com from 192.168.17.251
Apr 26 21:49:47 dnsmasq[487]: 355 192.168.17.251/49829 forwarded cbsservice.aws.syncbak.com to 127.0.0.1
Apr 26 21:49:47 dnsmasq[487]: 355 192.168.17.251/49829 reply cbsservice.aws.syncbak.com is 34.230.242.122
Apr 26 21:49:47 dnsmasq[487]: 355 192.168.17.251/49829 reply cbsservice.aws.syncbak.com is 54.236.139.1
Apr 26 21:49:52 dnsmasq[487]: 357 192.168.17.251/35753 query[A] om.cbsi.com from 192.168.17.251
Apr 26 21:49:52 dnsmasq[487]: 357 192.168.17.251/35753 forwarded om.cbsi.com to 127.0.0.1
Apr 26 21:49:52 dnsmasq[487]: 357 192.168.17.251/35753 reply om.cbsi.com is <CNAME
Apr 26 21:49:52 dnsmasq[487]: 357 192.168.17.251/35753 reply cbsinteractive.d2.sc.omtrdc.net is 172.82.206.17
Apr 26 21:49:52 dnsmasq[487]: 358 192.168.17.251/43757 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:49:52 dnsmasq[487]: 358 192.168.17.251/43757 cached www.cbs.com is 64.30.230.20
Apr 26 21:49:56 dnsmasq[487]: 362 192.168.17.251/54288 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:49:56 dnsmasq[487]: 362 192.168.17.251/54288 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:49:56 dnsmasq[487]: 363 192.168.17.251/39923 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:49:56 dnsmasq[487]: 363 192.168.17.251/39923 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:49:56 dnsmasq[487]: 364 192.168.17.251/59114 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:49:56 dnsmasq[487]: 364 192.168.17.251/59114 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:49:56 dnsmasq[487]: 365 192.168.17.251/41347 query[A] wwwimage.cbsstatic.com from 192.168.17.251
Apr 26 21:49:56 dnsmasq[487]: 365 192.168.17.251/41347 forwarded wwwimage.cbsstatic.com to 127.0.0.1
Apr 26 21:49:56 dnsmasq[487]: 362 192.168.17.251/54288 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:49:56 dnsmasq[487]: 362 192.168.17.251/54288 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:49:56 dnsmasq[487]: 362 192.168.17.251/54288 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:49:56 dnsmasq[487]: 362 192.168.17.251/54288 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:49:56 dnsmasq[487]: 365 192.168.17.251/41347 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:49:56 dnsmasq[487]: 365 192.168.17.251/41347 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:49:56 dnsmasq[487]: 365 192.168.17.251/41347 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:49:56 dnsmasq[487]: 365 192.168.17.251/41347 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:49:56 dnsmasq[487]: 363 192.168.17.251/39923 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:49:56 dnsmasq[487]: 363 192.168.17.251/39923 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:49:56 dnsmasq[487]: 363 192.168.17.251/39923 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:49:56 dnsmasq[487]: 363 192.168.17.251/39923 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:49:56 dnsmasq[487]: 364 192.168.17.251/59114 reply wwwimage.cbsstatic.com is <CNAME
Apr 26 21:49:56 dnsmasq[487]: 364 192.168.17.251/59114 reply wwwimage.cbs.com.edgesuite.net is <CNAME
Apr 26 21:49:56 dnsmasq[487]: 364 192.168.17.251/59114 reply a917.g.akamai.net is 23.62.6.16
Apr 26 21:49:56 dnsmasq[487]: 364 192.168.17.251/59114 reply a917.g.akamai.net is 23.62.6.24
Apr 26 21:49:59 dnsmasq[487]: 366 192.168.17.251/52906 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:49:59 dnsmasq[487]: 366 192.168.17.251/52906 cached www.cbs.com is 64.30.230.20
Apr 26 21:50:02 dnsmasq[487]: 370 192.168.17.251/48068 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:50:02 dnsmasq[487]: 370 192.168.17.251/48068 cached www.cbs.com is 64.30.230.20
Apr 26 21:50:04 dnsmasq[487]: 371 192.168.17.251/35156 query[A] link.theplatform.com from 192.168.17.251
Apr 26 21:50:04 dnsmasq[487]: 371 192.168.17.251/35156 forwarded link.theplatform.com to 127.0.0.1
Apr 26 21:50:04 dnsmasq[487]: 371 192.168.17.251/35156 reply link.theplatform.com is 199.27.170.197
Apr 26 21:50:04 dnsmasq[487]: 372 192.168.17.251/38456 query[A] cbsios-vh.akamaihd.net from 192.168.17.251
Apr 26 21:50:04 dnsmasq[487]: 372 192.168.17.251/38456 forwarded cbsios-vh.akamaihd.net to 127.0.0.1
Apr 26 21:50:04 dnsmasq[487]: 372 192.168.17.251/38456 reply cbsios-vh.akamaihd.net is <CNAME
Apr 26 21:50:04 dnsmasq[487]: 372 192.168.17.251/38456 reply a289.w16.akamai.net is 23.215.133.11
Apr 26 21:50:04 dnsmasq[487]: 372 192.168.17.251/38456 reply a289.w16.akamai.net is 23.215.133.40
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 query[A] cbsinteractive.hb.omtrdc.net from 192.168.17.251
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 forwarded cbsinteractive.hb.omtrdc.net to 127.0.0.1
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 reply cbsinteractive.hb.omtrdc.net is 34.192.20.239
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 reply cbsinteractive.hb.omtrdc.net is 34.234.105.18
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 reply cbsinteractive.hb.omtrdc.net is 34.234.108.125
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 reply cbsinteractive.hb.omtrdc.net is 34.234.124.79
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 reply cbsinteractive.hb.omtrdc.net is 34.236.167.192
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 reply cbsinteractive.hb.omtrdc.net is 52.2.65.206
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 reply cbsinteractive.hb.omtrdc.net is 52.2.195.38
Apr 26 21:50:04 dnsmasq[487]: 373 192.168.17.251/39134 reply cbsinteractive.hb.omtrdc.net is 54.236.181.210
Apr 26 21:50:04 dnsmasq[487]: 374 192.168.17.251/34983 query[A] dw.cbsi.com from 192.168.17.251
Apr 26 21:50:04 dnsmasq[487]: 374 192.168.17.251/34983 forwarded dw.cbsi.com to 127.0.0.1
Apr 26 21:50:04 dnsmasq[487]: 374 192.168.17.251/34983 reply dw.cbsi.com is <CNAME
Apr 26 21:50:04 dnsmasq[487]: 374 192.168.17.251/34983 reply dw-cbsi.cnet-basic-performance.akadns.net is 64.30.224.172
Apr 26 21:50:04 dnsmasq[487]: 375 192.168.17.251/46997 query[A] www.cbs.com from 192.168.17.251
Apr 26 21:50:04 dnsmasq[487]: 375 192.168.17.251/46997 cached www.cbs.com is 64.30.230.20
Apr 26 21:50:05 dnsmasq[487]: 376 192.168.17.251/56068 query[A] cws.conviva.com from 192.168.17.251
Apr 26 21:50:05 dnsmasq[487]: 376 192.168.17.251/56068 forwarded cws.conviva.com to 127.0.0.1
Apr 26 21:50:05 dnsmasq[487]: 376 192.168.17.251/56068 reply cws.conviva.com is <CNAME
Apr 26 21:50:05 dnsmasq[487]: 376 192.168.17.251/56068 reply cws-us-east.conviva.com is <CNAME
Apr 26 21:50:05 dnsmasq[487]: 376 192.168.17.251/56068 reply cws-iad1.conviva.com is 199.127.194.93

Can't think of anything else. Something is stuck there. I do see several other cbs related domains being Pi-holed though.

Run a pihole -up first then a pihole -g

As a last resort, try removing pi-hole and reinstall it (and whitelist again).
Unless someone else has a better idea...

pi@raspberrypi:~ $ sudo pihole -up
[i] Checking for updates...
[i] Pi-hole Core: up to date
[i] FTL: up to date
[i] Web Interface: up to date

[✓] Everything is up to date!
pi@raspberrypi:~ $ sudo pihole -g
[i] Neutrino emissions detected...
[✓] Pulling blocklist source list into range

[i] Target: raw.githubusercontent.com (hosts)
[✓] Status: Retrieval successful

[i] Target: mirror1.malwaredomains.com (justdomains)
[✓] Status: Retrieval successful

[i] Target: sysctl.org (hosts)
[✓] Status: No changes detected

[i] Target: zeustracker.abuse.ch (blocklist.php?download=domainblocklist)
[✓] Status: Retrieval successful

[i] Target: s3.amazonaws.com (simple_tracking.txt)
[✓] Status: No changes detected

[i] Target: s3.amazonaws.com (simple_ad.txt)
[✓] Status: No changes detected

[i] Target: hosts-file.net (ad_servers.txt)
[✓] Status: No changes detected

[i] Target: www.zoso.ro (rolist.txt)
[✓] Status: No changes detected

[✓] Consolidating blocklists
[✓] Extracting domains from blocklists
[i] Number of domains being pulled in by gravity: 145219
[✓] Removing duplicate domains
[i] Number of unique domains trapped in the Event Horizon: 122202
[i] Number of whitelisted domains: 5
[i] Number of blacklisted domains: 5
[i] Number of wildcard blocked domains: 3
[✓] Parsing domains into hosts format
[✓] Cleaning up stray matter

[✓] Force-reloading DNS service
[✓] DNS service is running
[✓] Pi-hole blocking is Enabled

How do I delete the 1st empty whitelist line?