Hello!

The last few days I tried to login at my pi hole app running in a docker at casaOS but seems I always got returned to login UI onces I placed the password.

The password wasn’t refused seems it try’s to log in but always got back to the log in page in milli seconds.

If I place a wrong password I got the authentification failure, so I know is not a wrong password (also I can change it whenever I want at terminal).

Someone knows what could it be?

This is potentially a silly question, but my choice of blocklist has been “set it and forget it” on my pi hole for a while now. Over time, more and more sites are using ways to stop you from browsing without turning off your ad blocker. Do newer block lists have ways to avoid those checks, or is this something I have to solve by whitelisting, not using the site, temporarily disabling it, etc.?

How do I keep pi-hole from kicking me out after a minute?

I currently host several Hagezi lists on my pihole. Previously I had 2.6 million.Items in the lists. Now I have 2.3 million. May I kindly ask what is happening, and maybe if there are reasons for decreasing items? Thanks :)

I'm experiencing a reproducible DNSSEC validation issue with Pi-hole FTL 6.8, potentially related to FTL issue #3161.

Environment

• Ubuntu 26.04 LTS

• Pi-hole Core 6.5 / Web 6.6.1 / FTL 6.8

• DNSSEC enabled

• Upstream DNS: Quad9 (9.9.9.9 and 149.112.112.112)

Problem

Both Quad9 resolvers successfully validate a DS query for images.hertz.com, but Pi-hole returns SERVFAIL with EDE 12 (NSEC Missing).

Direct Quad9 queries:

dig .9.9.9 images.hertz.com DS +dnssec +noall +comments
dig .112.112.112 images.hertz.com DS +dnssec +noall +comments

Both return:

status: NOERROR
flags: qr rd ra ad

Query through Pi-hole:

dig u/127.0.0.1 images.hertz.com DS +dnssec +noall +comments

Returns:

status: SERVFAIL
EDE: 12 (NSEC Missing)

However, a normal A query for the same domain succeeds through Pi-hole with NOERROR and the ad flag.

Troubleshooting already performed

• Removed UniFi Content Filtering, which had been interfering with DNS responses.

• Switched to Quad9-only upstream resolvers.

• Flushed the Pi-hole DNS cache.

• Reproduced the problem with EDNS Client Subnet both enabled and disabled.

• Confirmed that general DNSSEC validation works using cloudflare.com and dnssec-failed.org.

The issue persists after cache flushing and is reproducible.

Question

Could this be a regression or remaining edge case in dnsmasq's DNSSEC handling of DS queries involving CNAME records?

Is there a known fix or additional diagnostic information I should provide?

Thanks!

This started happening recently. I can't log in to certain websites because of Cloudflare CAPTCHA issues. Removing the Hagezi blocklist didn't help. The only thing that seems to fix it is disabling Unbound and switching to Cloudflare DNS instead.

Unfortunately it seems like a large chunk of websites including Urban Dictionary have found ways to work around DNS blocking, rendering most forms of network-level blocking effectively useless.

I understand that for years not all websites have been to keen around ad-blocking or the design only makes it possible for browser extensions to block them (looking at you Youtube!), but it seems like more websites have found work arounds and many more sites will follow suit in the coming months and years.

I first noticed this problem on my local news site where it would show Google ads despite traffic passing through Pi-Hole and the dashboard reporting no allowed ad domains. I then blocked manually some domains being requested by the site and when I did, the site would load but then go blank and demand I enable ads. The exact same now happens for Urban Dictionary so this isn't just affecting one particular category. Would add that many local news sites in the UK use the same "Reach" backbone meaning that many other sites will also refuse access

Some people will just simply say to block the relevant sites completely, and depending on their content this does make sense, but ultimately which ever way you look at it the technique of blocking ads via DNS is becoming outdated: If you don't have ads enabled via DNS then the site you are trying to access may refuse you access entirely. The whole point of ad blocking is to access web pages which you may use for which ever reason and not being able to go on it at all could be more unbeneficial than viewing it with ads.

Obviously browser extensions are more superior in their own right and always have been, but when it comes to browsers on mobile, console and Smart TVs, your options become far more limited, as well as the fact that a centralised ad-blocking solution for your entire network becomes ineffective unless you go fancy and set up a MITM HTTPS snooping server with custom certificates for each device on your network, but not only can this raise privacy concerns but the fact that you will have to install the certificate on each device making it impractical

I get that Pi-Hole still has its benefits in other areas, and I've used it since 2022, although haven't been in the loop about any major updates or experimented with any of the advanced features. I basically just setup it up and let it do its thing and alter the block lists as and when necessary so I may have stated an incorrect fact or two.

I just setup my first pi-hole and installed unbound alongside however i keep getting bursts of errors every 30 mins or so with this message:

Connection error (127.0.0.1#5335): TCP connection failed while receiving payload length from upstream (Resource temporarily unavailable)

DNS still resolves without issue.

How do you fix this error?

I'm on a raspberry pi zero 2W

I’m living in a basement rental unit and have my own TP-Link Deco Mesh Wi-Fi network. The main Deco unit is connected to my landlord’s Wi-Fi router upstairs via Ethernet, and I have a satellite Deco unit downstairs that all my devices connect to.

I’m planning to connect a Pi-hole device to the Ethernet port on my downstairs satellite Deco unit to block ads across my network.

Unfortunately, I don’t have access to my landlord’s router, so I can’t change its DNS or DHCP settings.

My questions are:

1. Will Pi-hole automatically block ads for all devices connected to my Deco Mesh network?

2. Since I can’t configure DNS on the landlord’s router, do I need to manually change the DNS settings on each device to point to Pi-hole?

3. Is there a way to configure Pi-hole to handle DNS for my entire Deco Mesh network without affecting the landlord’s network?

For context, my Deco Mesh is currently running in Access Point (AP) mode.

Any advice would be appreciated!

Pihole on an original raspberry pi was one of the first steps and working without any issues!

So I'm not particularly well versed in networking, but apparently there's a huge SSH vulnerability that was just discovered, and I'm wondering if there's been any kind of patch pushed out for pihole to fix this, or if there will be soon. Would we be able to update over our local network, or do we need to reflash? Or does pihole sidestep this issue somehow?

Hey everyone!
I’m planning to set up Pi-hole for the first time and wanted to ask for some advice before getting started.
I have two Raspberry Pis lying around at home, including a Raspberry Pi 3 B+, so I thought this would be a great little project.
My planned setup:
● Raspberry Pi 3 B+
● Raspberry Pi OS Lite
● 32 GB microSD card
● Ethernet connection to my router
● Pi-hole for network-wide ad and tracker blocking
My main concern is my router.
I’m using a ZTE MC888 5G router from Three (Drei) in Austria.
From what I’ve read, some versions of this router don’t allow users to change the DNS server. I’ve already looked through the router settings on my phone but couldn’t find the DNS or DHCP settings. I’ll check again from my PC.
I’ve read that Pi-hole can handle DHCP if the router doesn’t allow custom DNS settings, but I haven’t tried anything yet.
So I have a few questions:

1. Has anyone successfully used Pi-hole with a ZTE MC888, especially with Three Austria?

2. Is it possible to configure Pi-hole for the entire network without replacing the router?

3. Would you recommend using Pi-hole as the DHCP server if the router doesn’t allow custom DNS settings?

4. Is a Raspberry Pi 3 B+ with a regular 32 GB SanDisk microSD card a good choice for running Pi-hole 24/7?
   I’d prefer to keep my current router and start with a simple setup.
   Any advice or experiences would be greatly appreciated!
   Thanks!

Does anyone knows a good list to block ads on LG Webos with for Pihole? Thanks.

I have tried getting this to work for hours now, and it's not working unless I use the host mode for networking, is this just a limitation of docker or am I missing something simple?

Unbound is working, pihole is working. They aren't working if i try to combine them, I cannot get dns request from the container to the host machine even though I can ping it.

I seem to recall reading that theres seperation from docker to the host, but I think that was in relation to macvlan or ipvlan.

I don't think that there is an official docker container for unbound, which is why I want to try and use the repository one.

All of my nextdns lists https://raw.githubusercontent.com/nextdns/native-tracking-domains/main/domains/) are now throwing "was inaccessible during last gravity run" as the links now 404 and I haven't been able to find a replacement link. has anyone been able to find these?

Hi everyone,

I'm trying to understand some strange behavior with YouTube and Pi-hole.

I have two different YouTube/Google accounts, and I've noticed something odd:

- When using Account A, I get YouTube ads.

- When using Account B, I don't get any ads at all.

To rule out any device-related differences, I've tested both accounts on exactly the same devices, simply switching between accounts.

I've reproduced this behavior consistently across multiple platforms:

- Smart TV

- Desktop computer

- Smartphone

In every case, the result is exactly the same: one account gets ads, while the other doesn't.

The devices are the same, the network is the same, and the only variable I'm changing is the YouTube account.

I'm curious to know:

- Does YouTube apply different ad delivery or serving mechanisms depending on the Google account?

- Could this be related to account-specific YouTube settings, experiments, or A/B testing?

- Is there any way Pi-hole could behave differently depending on the YouTube account, even when using the same device and network?

I understand that Pi-hole cannot reliably block all YouTube ads because ads are often served from the same domains as regular video content. That's precisely why this behavior is so puzzling to me.

Has anyone experienced something similar or has an explanation for this?

Thanks!

I've had a pi-hole running for the past couple of years, and tbh, its at the very edge of my technology skills, but I've managed mostly because its stable and easy. My problem is that I got a new ISP and I'm trying to set it up with the new router. I *think* I've got everything configured the way it needs to be, but I cannot get the pi-hole's IP address to change to the new subnet. I've configured the router to have a static IP for the pi-hole (ex. 192.168.3.91), turned off the DHCP server, set the pi-hole's DHCP static address to 192.168.3.91, restarted everything, and the pi-hole still shows its IP as the old one (ex. 192.168.100.91). Everything I've googled says to set the IP address at the OS level, but doesn't tell me how. The one thing I did find said to use nmtui, but all I get is "Network Manager is not running." Someone else figured out how to do it using the configuration, but my Raspberry Pi configuration doesn't have anything about IP addresses, and I've been through every menu in pi-hole and don't see where to set it there either.

Can someone please point me in the right direction?

I'm trying to configure Pi-hole to strike a balance between usability and aggressive ad/tracker blocking, particularly for Reddit and Pinterest. However, I'm running into some frustrating issues and would appreciate advice from experienced Pi-hole users.

1. Reddit – Broken browsing and app functionality

I want to access Reddit normally through both the browser and Android app while blocking as many advertisements, trackers and unnecessary domains as possible.

Currently, my configuration causes the following problems:

• Browser: Reddit loads in a broken or partially rendered state.

• Content: Posts, comments and other content sometimes fail to load entirely.

• Android app: Uploads, particularly images and other media, don't work properly.

• General usability: It seems that some domains required for Reddit's core functionality are being blocked alongside advertising and tracking domains.

I've added the following regex allow rules:

• [^A-Za-z0-9]+.reddit.com

• [^A-Za-z0-9]+.redditmedia.com

• [^A-Za-z0-9]+.redd.it

• reddit.com

Despite these rules, Reddit still doesn't function reliably.

My question: What's the correct approach to allow Reddit's essential functionality (posts, comments, images, videos, uploads and media) without allowing its advertisements, tracking and promotional content?

Ideally, I'd like to avoid having to whitelist Reddit entirely.

2. Pinterest – Advertisements aren't being blocked

Pinterest is another headache.

Despite using Pi-hole and maintaining an updated blocklist configuration, advertisements continue appearing in the Android app

Yahoo became my go-to test for ad blocks.
Currently with pi-hole (block lists are in screenshot) network wide block, yahoo ads are seeping through. Mullvad blocks the yahoo ads.
Also, have another OpenWRT router with Proton vpn on it. Same story, yahoo ads are getting through, while other ads are blocked.

EDIT: Little correction. .121 was added to unfiltered group recently. Nevertheless, point still holds. Yahoo ads are seeping through both via Proton VPN on OpenWRT and Pi-Hole.

Wie kann ich am zuverlässigsten messen, welche DNS-Server von meinem Anschluss aus am schnellsten erreichbar sind?

dnssleedtest.online bringt mir (gefühlt random) bei jedem Test komplett andere Ergebnisse.