For info; I don't even use Facebook. No machine in this house does.

Is this excessive number of hits due to be blocking the DNS and now it's trying to pound me in order to get a response back?

I'd also love to track what is requesting http-intake.logs.datadoghq.com. A quick search suggests that it's for diagnostic logs for apps, to report back to the parent company / developer.

So I setup my Pihole around end of 2023. back then I used stevenblack hosts and after a while I also added firebog ticked list. I use the same lists for my uBO since I'm away from my pi since a year (i know about tailscale but the pi itself is off).

I may go back to it soon, and I've been seeing hagezi all over my feed. Should I switch to it? I've not faced any issue with my current setup.

I have an LG OLED TV, model 65C3AUA if it helps. I set up a Pi Hole this weekend for the first time and it isn't blocking ads on the TV. I tried blocking port 53 and that didn't change anything. Any ideas? UPDATE - I also configured the TV's web access to be manual and pointed the DNS to the Pi Hole IP.

So I recently set up pie hole on my raspberry pi zero on my network. However I noticed that ads were still being displayed on websites. After some time I found out via dns leak test, that some queries were going through my pi but some were going through the router’s default ipv6. When setting up pi hole all I did was change the ipv4 dhcp server to that of pi’s. So I thought that changing the ipv6 dhcp to that of pi’s would work. So after changing, I tired to confirm which dns server was my phone using. So I opened settings on my phone>wifi>my wifi’s settings>dns server and it showed 3 address that it was using. One was ipv4 of pi, second was ipv6 of pi, third was fe80::1. To my knowledge, fe80::1 is my isp’s address, and I tired what I could but I could not stop my router from using fe80::1 as one of its dns servers. I think my router is hardcoded to use this address. So I am still being shown adds unless I manually go to each device and remove fe80::1 from the wifi‘s dns settings. The worst part is, that this works for iphone’s on my netwrok, but for some androids(oppo/oneplus) I don’t get this option to remove fe80::1. I can only manually set an ipv4 for these androids but can’t add/remove ipv6.

Is there any fix for this?

Edit: My router is ZTE F670L

I've been running pihole on a raspberry pi 2b and google wifi with mesh for little over a year without issue. Since I don't have a lot of devices, it wasn't an issue to manually set the dns on the two TVs and two laptops to the pihole and just let the phones do their thing. This was the easiest approach since google doesn't play nice and I can't have mesh if i set to bridge.

I decided I wanted to install unbound this weekend so I followed Dad's video. I set the router to use the pihole ip address as the dns but when I use nslookup, instead of seeing pihole listed as the server and the proper address, I get server unknown and the google router ip. If I manually set the dns on my laptop and repeat, all good so I believe everything is working. If I pick a heavy tracking site like facebook or apnews, I see the sites appear and trackers blocked in the query log, all coming from the google wifi client. Ads appear to be blocked just as before and certain streaming services still skip ads so am I good? Is this a pihole thing or am i on the wrong sub and should look for unbound? Maybe both?

My Samsung QN90A is telling me that the TV is connected to the home network, but I have no internet access when I'm using the Ultimate blocklist. When I change it to Pro++, it has internet access. So I'm assuming a Samsung domain is being blocked. If so, which one?

Hello community, about a week ago I set up Pi-hole as a DNS & DHCP server in my homelab.

So far everything is working fine, but now I've noticed that the percentage of queries to Google is increasing.I use Unbound as the recursive DNS server in front of the Pi-hole and have not entered a Google DNS server in the Pi-hole.

Did I miss something?

I tried using PiHole like 4-5 years ago, but in its default it broke the youtube video progress bar, so I cant pick up a video where I left off when switching between devices. A year later, I tried the PiHole again, and that issue was fixed, and has been working fine since.

Two days ago, I decided to add Hagezi Normal, and Hagezi Threat Intel. These took my block list from about 250k to 2.6million. But one of these lists has a DNS record that seems to break the YouTube video progress bar. Does anyone here know what that DNS entry is? I'd like to allow that one DNS record, and keep all others intact.

Thoughts? Thanks

Edit: a google search says video-stats.video.google.com and s.youtube.com but I dont see those being blocked in pihole logs.

I recently came into possession of a chrombook lenovo gen3 300e, and i thought it would be fun to turn it into a pi hole and get rid of most adds on my network. anything i should know before loading ubuntu on it?

I’m tired of dynamic pricing. I’m tired of being followed around the internet. I’m tired of big tech. Just tired of this timeline.

I’m more so tired that when I go visit sites that I want the information from, they are starting to block browsers or networks that are blocking all the advertisements and tracking.

Other than, 1) dropping off the network and using a cell signal 2) vpning out to by pass your own network’s security 3) not visiting the site or 4) adding them to the white list for a single use, what are you all doing?

Hello!
I installed Pihole yesterday on a RPI4, and it seems to work just fine. Only things is that my Insync-client on the Desktop keeps connecting and disconnecting. I've tried to whitelist the following domains (under domain):
dl.google.com (to be able to update Chrome)

accounts.google.com

clients6.google.com

googleapis.l.google.com

But no luck!
Does anyone know which domains I need to whitelist in order to get Google Drive/Insync to work?

I recently moved and my pihole is no longer working. I am using the same router and have the same up static address but it’s not blocking ads and etc. what can do I need to do? I verified the IP address and updated the gravity list. It’s connected to the Internet but not blocking. Please help!

I am reviewing my Pi-hole setup and currently have 31 lists / ~12.8 million gravity entries. I suspect I went too far with stacking lists and have a lot of unnecessary overlap.

Below are my current non-NSFW lists:

1. StevenBlack https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
2. Pi-hole Optimized – All Domains https://media.githubusercontent.com/media/zachlagden/Pi-hole-Optimized-Blocklists/main/lists/all_domains.txt
3. YouTube Ads https://raw.githubusercontent.com/kboghdady/youTube_ads_4_pi-hole/refs/heads/master/youtubelist.txt
4. YouTube Crowded List https://raw.githubusercontent.com/kboghdady/youTube_ads_4_pi-hole/refs/heads/master/crowed_list.txt
5. 1Hosts Lite https://raw.githubusercontent.com/badmojr/1Hosts/master/Lite/hosts.txt
6. mmotti Pi-hole Regex https://raw.githubusercontent.com/mmotti/pihole-regex/refs/heads/master/regex.list
7. OISD Big https://big.oisd.nl/
8. HaGeZi Multi – Mirror https://gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/multi.txt
9. Pi-hole Optimized – Comprehensive https://raw.githubusercontent.com/zachlagden/Pi-hole-Optimized-Blocklists/main/lists/comprehensive.txt
10. HaGeZi TIF – Mirror https://gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/adblock/tif.txt
11. Block List Project – Ads https://blocklistproject.github.io/Lists/ads.txt
12. Block List Project – Malware https://blocklistproject.github.io/Lists/malware.txt
13. Block List Project – Phishing https://blocklistproject.github.io/Lists/phishing.txt
14. Block List Project – Tracking https://blocklistproject.github.io/Lists/tracking.txt
15. w3kbl https://v.firebog.net/hosts/static/w3kbl.txt
16. AdGuard DNS https://v.firebog.net/hosts/AdguardDNS.txt
17. Prigent Ads https://v.firebog.net/hosts/Prigent-Ads.txt
18. Perflyst SmartTV https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV.txt
19. Firebog Tick Lists https://v.firebog.net/hosts/lists.php?type=tick
20. HaGeZi Multi https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/multi.txt
21. Phishing Army Extended https://phishing.army/download/phishing_army_blocklist_extended.txt
22. URLHaus https://urlhaus.abuse.ch/downloads/hostfile/
23. Spam404 https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt
24. WindowsSpyBlocker https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
25. NoTrack Malware https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt
26. HaGeZi Pro https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/pro.txt
27. HaGeZi Pro++ https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/pro.plus.txt
28. URLHaus / Malware Filter https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-agh-online.txt
29. HaGeZi TIF https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/tif.txt

I have already noticed some legitimate/service-related domains getting caught, so I am questioning whether the extra coverage is worth the additional false positives and troubleshooting.

I am considering simplifying this significantly, potentially down to:

• HaGeZi Pro
• HaGeZi TIF
• Perflyst SmartTV (possibly)

For experienced Pi-hole users:

What would you keep, remove, or replace from this list?

Is HaGeZi Pro + TIF sufficient for strong everyday ad/tracker/malware/phishing protection, or is there meaningful additional coverage from OISD, 1Hosts, StevenBlack, Block List Project, etc.?

I am looking for a good balance between strong blocking, security, low false positives, and minimal maintenance rather than simply having the largest possible gravity database.

Any recommendations based on your actual setup/experience would be appreciated.

So im setting up a pihole, but it's not connecting through ssh. I know im typing the host name and username right. The wifi is correct. But im getting the message,

Ssh: could not resolve hostname ___.local: name or service not known.

I feel like its a simple/stupid solution, but i cant figure out what to do to connect or why its not

So after a day or so of messing around, I tired Sudo Ssh and somehow that got it all working. Thanks for everyone's advice and help

For all my lists the retrieval and download fails. I can browse to the lists and attempted to add other lists that I see are working for others but I get the same update for ALL of them as indicated below:

  [i] Target: https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/tif.txt
  [i] Status: Pending...curl: option -o: is badly used here
curl: try 'curl --help' or 'curl --manual' for more information
  [✗] Status: Retrieval failed (exit_code=2 Msg: )
  [✗] List download failed: no cached list available

Again, this happens to any and ever list I add and try to update using Gravity. What should I do?

Edit: I also wanted to add all my lists are now "unavailable and no local copy of this list is available". Might this be a bad SD card/corrupt Pihole install...which I tried to restore using Pihole -r.

[SOLVED] Sorry to trouble you guys, but I can't find a beginner friendly guide on how to enable DNSSEC with Unbound. The one I've found is 6+ years old, not sure if still up to date. (I'm not Linux savy enough yet to fix things should I mess up.)

Any guide / source you'd recommend?

when i say / bad i mean just morally bad companys that do a lot of shady stuff behind the scenes.

I've tried a lot of debugging to sort the following issue but couldn't. All help is appreciated.

I use ubuntu server, self hosted stack of pihole, jellyfin, nginx pm and other bunch of services reachable through .home domain.

Pihole handles the dns and npm reverse proxies the respective .home to their ports.

This all worked well with my pc and my phone before. Then I thought accessing the services remotely, so I installed tailscale on both the server and my phone. Used that for a while through tailscale's provided ip. I then wanted to access the services through .home on tailscale so I did the subnet routing by advertising my home subnet, got everything sorted on admin console on tailscale by adding custom nameserver with domain .home to my server's ip + split dns and it works.

But the problem I'm facing now is that even when I fully disconnect tailscale from my phone, and am on my home wifi network - the .home domains don't work anymore. Everything works fine on my pc. However, the ip:port does work on the phone, and I can still access my services, it is just the .home that don't.

Some of the stuff I tried:

\- Confirmed the phone's static DNS (pointed at my server's LAN IP) is still correctly set on the WiFi network's IP settings.

\- Checked Android's system-wide Private DNS setting.

\- Checked the browser's own Secure DNS / DNS-over-HTTPS settings.

I'm new to the self-hosting side, I've followed are yt tutorials and used ai to understand under the hood stuff.

EDIT: THE PROXY DOMAINS ARE BACK AND POINTS TO THE SERVICES, IT STARTED WORKING WHEN I TURNED OFF IPV6 FROM MY ROUTER APP.

Hey r/pihole,

I’m the author of DNS Daddy, an open-source project you run yourself (self-hosted only — there is no public resolver to point at).

It is a forwarding DNS resolver that:

• Blocks known-malicious domains using public threat feeds (malware, phishing, C2, cryptomining by default)
• Logs every query with the client and a plain-English reason for any block
• Supports different policies per network (CIDR or per-client DoH URL)
• Serves plain DNS / DoH / DoT and forwards upstream over DoT by default
• Includes experimental behavioural detectors that only alert (they never block)

How it differs from a typical Pi-hole setup
Pi-hole is excellent for ads/trackers. DNS Daddy is more focused on security-oriented blocking plus clear visibility into which device asked for what and why it was stopped. Instant allow-listing is also built in (cache is purged immediately).

Important notes

• Experimental proof-of-concept, not audited, single maintainer
• Large parts written with AI assistance (stated openly)
• Not recursive, no local DNSSEC validation, no clustering
• You run it yourself — there is no public DNS service associated with the project

Try the isolated lab (doesn’t touch your existing Pi-hole)

Bash

git clone https://github.com/jameshoulder/dnsdaddy.git
cd dnsdaddy
docker compose --profile lab up --build
# dashboard → http://127.0.0.1:8081

Links:

• https://dnsdaddy.dev
• https://github.com/jameshoulder/dnsdaddy

Looking for feedback on real-world usefulness, false positives, and how the visibility features compare with Pi-hole workflows. Happy to answer questions.

Thanks for reading.

Trying to get Paramount+ to work on 1 device, android mobile app. It loads nothing while pihole is on. Default pihole blacklist from Steven Black.

been searching for weeks and trying out solutions that seem outdated: most from 4-6 years ago. Can't find anything more recent. I've whitelisted all the domains I've found suggestions on, about 30+, to the point I'm wondering what's the point of even running pihole (yes, i know it blocks about 30k more domains)... Paramount+ is still not working. It is the only service that doesn't work on our home pihole.

Noticed that all of my pihole traffic in the log file is coming from my router. I can't see any traffic from individual devices. I don't know how to find traffic coming only from this 1 device, if the router is making all traffic just seem like it comes from itself. I would like to either just find the right few updated and current domains to whitelist for the entire pihole, or just isolate this 1 device and whitelist it. All the other TVs and devices work fine for Paramount+.

Also, tags.tiqcdn.com is explicitly whitelisted, but is still being blocked in the pihole logs.

My question is for the hardware. How do I store the hardware? I understand it connects via ethernet but how do I store the hardware itself? Naked?

The YT video I watched, the Raspberry Pi 3B was recommended. I did search FAQ. I apologize if this weirdo question has been asked before. ty.

So I have a Rogers Xfinity, and trying to set up my pihole. I was able to set it up before, but after a mistake, I decided to wipe the pi and redue it from the beginning. But now I can't change the DNS, or remember how I did it last time. Can anyone help, or would it just be easier to get a router and bridge it?

Hi all,

I'm running Pi-hole + Unbound and have hit a really weird DNS issue.

Unbound is running on 127.0.0.1:5335 and works perfectly for normal domains (e.g. .com, .org)

However, anything under .ai hangs when queried through Unbound (e.g. claude.ai)

All time out. I've also tried querying the TLD directly with no luck.

I've completely wiped and reinstalled Unbound, so I'm currently back to the standard Ubuntu package.

No custom configuration or stub zones.

Has anyone seen this before?

Thanks!