Why would you want to block icloud private relay by default?

Why would you want to block icloud private relay by default?
It protect your IP address, and I would not want to block it by default

Because it will render Pi-hole useless for that device; it will bypass all Pi-hole filtering. If you want that, you can disable it in your Pi-hole configs.

The logic is that if you went through the trouble of setting up a Pi-hole on your home network, you would want all your devices to use it.

3 Likes

Since

you can also whitelist those domains on per-group setting.

If iCloud Private Relay is functioning on a client, some of the DNS traffic from that client (Safari, as of now) will not use Pi-hole. Since we assume that if you have a Pi-hole installed on your network you want all your network clients to use it for DNS, blocking this is our default configuration. Note that we similarly provide the required canary domain for Firefox so it won't default to DoH mode and bypass Pi-hole.

We block iCloud Private Relay per the Apple specifications.

https://docs.pi-hole.net/ftldns/configfile/#icloud_private_relay

This is a user configurable setting.

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.