Problem Pi-Hole installation - no name resolution

Troubleshooting
1

Hello,

i have a problem with the installation of Pi-Hole.

I install the DietPi Image on my RPi3 Model B.

I setup DietPi to static IP address and set the DNS-Server to DNS-Watch in dietpi-config.

Everything is wotking fine, i can ping router, google.com, 8.8.8.8 and so on…

Than i want to install Pi-Hole. The installation begins with no problems, but at some point
i loose connetion (name resolution) to the internet. The last step that works in the Pi-Hole installation script is

Download latest version of FTL...
   Detected ARM-hf architecture (armv7+)
   Installing FTL... transferred... done.

Then the services dnsmasq and lighthttpd restart and gravity.sh is running to download the hosts lists.

This is the point where no name resolution is working anymore.

Getting raw.githubusercontent.com list ... done
    Status: Status 000
    Download failed and no cached list available (list will not be considered)

Some more details…

I can ping localhost

dietpi@DietPi ~ > ping -c 3 127.0.0.1
PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.107 ms
64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.052 ms
64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.042 ms

I can ping the local IP-address from DietPi/Pi-Hole device

dietpi@DietPi ~ > ping -c 3 192.168.168.150
PING 192.168.168.150 (192.168.168.150) 56(84) bytes of data.
64 bytes from 192.168.168.150: icmp_seq=1 ttl=64 time=0.085 ms
64 bytes from 192.168.168.150: icmp_seq=2 ttl=64 time=0.054 ms
64 bytes from 192.168.168.150: icmp_seq=3 ttl=64 time=0.044 ms

I can ping the Router/Gateway (Fritzbox)

dietpi@DietPi ~ > ping -c 3 192.168.168.1
PING 192.168.168.1 (192.168.168.1) 56(84) bytes of data.
64 bytes from 192.168.168.1: icmp_seq=1 ttl=64 time=0.453 ms
64 bytes from 192.168.168.1: icmp_seq=2 ttl=64 time=0.392 ms
64 bytes from 192.168.168.1: icmp_seq=3 ttl=64 time=0.415 ms

I can ping external IP-address

dietpi@DietPi ~ > ping -c 3 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=44 time=29.5 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=44 time=36.2 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=44 time=29.1 ms

But i can not ping domain names

dietpi@DietPi ~ > ping -c 3 google.com
ping: unknown host google.com

Some more information:

/etc/resolv.conf

dietpi@DietPi ~ > cat /etc/resolv.conf
nameserver 127.0.0.1

/etc/hosts

dietpi@DietPi ~ > cat /etc/hosts
127.0.0.1 localhost
127.0.1.1 DietPi

/etc/dnsmasq.d/01-pihole.conf

dietpi@DietPi ~ >  cat /etc/dnsmasq.d/01-pihole.conf
addn-hosts=/etc/pihole/gravity.list
addn-hosts=/etc/pihole/local.list
addn-hosts=/etc/pihole/black.list
domain-needed
localise-queries
bogus-priv
no-resolv
server=176.56.237.171
server=77.66.84.233
interface=eth0
cache-size=10000
log-queries
log-facility=/var/log/pihole.log
local-ttl=300
log-async

/etc/pihole/setupVars.conf

dietpi@DietPi ~ > cat /etc/pihole/setupVars.conf
PIHOLE_INTERFACE=eth0
IPV4_ADDRESS=192.168.168.150/24
IPV6_ADDRESS=
PIHOLE_DNS_1=176.56.237.171
PIHOLE_DNS_2=77.66.84.233
QUERY_LOGGING=true
INSTALL_WEB=true
WEBPASSWORD=xxx

/var/log/pihole.log

dietpi@DietPi ~ > cat /var/log/pihole.log
Jun 28 18:33:53 dnsmasq[2466]: started, version 2.76 cachesize 10000
Jun 28 18:33:53 dnsmasq[2466]: compile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify
Jun 28 18:33:53 dnsmasq[2466]: warning: ignoring resolv-file flag because no-resolv is set
Jun 28 18:33:53 dnsmasq[2466]: using nameserver 77.66.84.233#53
Jun 28 18:33:53 dnsmasq[2466]: using nameserver 176.56.237.171#53
Jun 28 18:33:53 dnsmasq[2466]: read /etc/hosts - 2 addresses
Jun 28 18:33:53 dnsmasq[2466]: failed to load names from /etc/pihole/black.list: No such file or directory
Jun 28 18:33:53 dnsmasq[2466]: read /etc/pihole/local.list - 2 addresses
Jun 28 18:33:53 dnsmasq[2466]: read /etc/pihole/gravity.list - 0 addresses
Jun 28 18:36:07 dnsmasq[2466]: query[A] google.com from 127.0.0.1
Jun 28 18:36:07 dnsmasq[2466]: forwarded google.com to 77.66.84.233
Jun 28 18:36:07 dnsmasq[2466]: forwarded google.com to 176.56.237.171
...

I don’t know what i did wrong or where the configuration is broken.
Can somebody help?

Thank you very much

2



IP: 176.56.237.171 and IP: 77.66.84.233 is DNSCrypt.eu !

DNSCrypt.eu is a “A free DNSSEC enabled, non-logged and uncensored DNSCrypt service”
and it will use port: 443 - not standard DNS port: 53 !!!


Denmark
Resolver name
dnscrypt.eu-dk, dnscrypt.eu-dk-ipv6 or dnscrypt.eu-dk-port5353
Address:
77.66.84.233> :> 443 > or [2001:1448:243::dc2]:443
Provider name
2.dnscrypt-cert.resolver2.dnscrypt.eu
Public key
3748:5585:E3B9:D088:FD25:AD36:B037:01F5:520C:D648:9E9A:DD52:1457:4955:9F0A:9955
Powered by

Netherlands
Resolver name
dnscrypt.eu-nl, dnscrypt.eu-nl-ipv6 or dnscrypt.eu-nl-port5353
Address:
176.56.237.171> :> 443 > or [2a00:d880:3:1::a6c1:2e89]:443
Provider name
2.dnscrypt-cert.resolver1.dnscrypt.eu
Public key
67C0:0F2C:21C5:5481:45DD:7CB4:6A27:1AF2:EB96:9931:40A3:09B6:2B8D:1653:1185:9C66

Choose a other DNS server …

3

Thank you very much.

In had dnscrypt installed in my previous installation of pihole and so i used these dns-servers.

Didn’t know they only work together with dnscrypt, thought that was optional.

Now everything works fine…