Pi-Hole blocking access via Tailscale

Troubleshooting
1

Ok, I’ve just hit my very own Achilles’s hell…

I’ve got Pi-Hole and Tailscale, and everything run smoothly, but I cannot for the life of my figure out how to properly configure the dietpi-pihole-block_public_admin.on list so that my 100.x.x.x addresses on tailscale can access the admin interface. I’m sure it’s got something to do with the /XX added at the end, I must enter the wrong one, and I’ve never quite understood IP addressing so I’m turning to the forum. What should be the line I add for the Tailscale IPs ? :wink:

2

Did you set your interface settings on the pihole web panel to Permit all origins like mentioned in the tailscale docs?

1 Like
3

There is a web server configuration to block public access if you activated it during installation. Depending on the choosen web server the location is different.

What is your web server installed?

4

Yep, but as @Joulinar said, it’s definitely within (in my case) the nginx config. There’s a lot of addresses already configured, but I do have to allow my own Tailscale IP range as per OG message.

I already know where the allow/block list is located though. I really just need to enter the right config for my IP and that’s where I fail :wink:

Currently it has the following:

allow 127.0.0.0/8;
allow 192.168.0.0/16;
allow 10.0.0.0/8;
allow 172.16.0.0/12;
allow ::1/128;
allow fe80::/10;
allow fc00::/7;
deny all;

I guess I’d have to enter 100.0.0.0, but that’s the /Xpart that I’m clueless !

5

What do you mean by /X part?

6

This is CIDR notation and the number behind the / defines the subnet.
https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#IPv4_CIDR_blocks

Edit: Since Tailscale assings a IP in the range 100.x.y.z. I would go with
allow 100.0.0.0/8;

1 Like
7

Ah yeah you are right

8

Sweet, thank you. That’s the thing. I’ll be damned if I ever get to understand those subnet :sweat_smile: Works flawlessly !

I don’t know if it is relevant at all, but maybe it is something to check if someone installed Tailscale to add to the file? Or maybe just a not in the docs really !

9

Well we can’t cover each and every use case on each and every software installation. We try to be generic as possible to give access for local network ranges.

1 Like
10

this is just cool as heck!!!

https://tailscale.com/files/images/marketing/home-network-after.svg