pi-hole/advanced/01-pihole.conf

# Pi-hole: A black hole for Internet advertisements
# (c) 2017 Pi-hole, LLC (https://pi-hole.net)
# Network-wide ad blocking via your own hardware.
#
# Dnsmasq config for Pi-hole's FTLDNS
#
# This file is copyright under the latest version of the EUPL.
# Please see LICENSE file for your rights under this license.

###############################################################################
#      FILE AUTOMATICALLY POPULATED BY PI-HOLE INSTALL/UPDATE PROCEDURE.      #
# ANY CHANGES MADE TO THIS FILE AFTER INSTALL WILL BE LOST ON THE NEXT UPDATE #
#                                                                             #
#        IF YOU WISH TO CHANGE THE UPSTREAM SERVERS, CHANGE THEM IN:          #
#                      /etc/pihole/setupVars.conf                             #
#                                                                             #
#        ANY OTHER CHANGES SHOULD BE MADE IN A SEPARATE CONFIG FILE           #
#                    WITHIN /etc/dnsmasq.d/yourname.conf                      #
###############################################################################

addn-hosts=/etc/pihole/local.list
addn-hosts=/etc/pihole/custom.list

domain-needed

localise-queries

bogus-priv

no-resolv

server=@DNS1@
server=@DNS2@

dns-loop-detect

interface=@INT@

cache-size=@CACHE_SIZE@

log-queries
log-facility=/var/log/pihole.log

local-ttl=2

log-async
Updated License 2016-01-30 20:12:40 +00:00			`# Pi-hole: A black hole for Internet advertisements`
Update dnsmasq config license * Also updated "separate config" text Signed-off-by: WaLLy3K <wally3k@pi-hole.net> 2018-10-17 00:01:28 +00:00			`# (c) 2017 Pi-hole, LLC (https://pi-hole.net)`
			`# Network-wide ad blocking via your own hardware.`
Updated License 2016-01-30 20:12:40 +00:00			`#`
Update dnsmasq config license * Also updated "separate config" text Signed-off-by: WaLLy3K <wally3k@pi-hole.net> 2018-10-17 00:01:28 +00:00			`# Dnsmasq config for Pi-hole's FTLDNS`
			`#`
			`# This file is copyright under the latest version of the EUPL.`
			`# Please see LICENSE file for your rights under this license.`
Updated License 2016-01-30 20:12:40 +00:00
remove stock comments from 01-pihole.conf and add warning to the top 2016-10-18 09:05:10 +00:00			`###############################################################################`
			`# FILE AUTOMATICALLY POPULATED BY PI-HOLE INSTALL/UPDATE PROCEDURE. #`
			`# ANY CHANGES MADE TO THIS FILE AFTER INSTALL WILL BE LOST ON THE NEXT UPDATE #`
Add direction to change upstream servers in setupVars.conf 2016-10-18 09:34:05 +00:00			`# #`
			`# IF YOU WISH TO CHANGE THE UPSTREAM SERVERS, CHANGE THEM IN: #`
			`# /etc/pihole/setupVars.conf #`
			`# #`
Update dnsmasq config license * Also updated "separate config" text Signed-off-by: WaLLy3K <wally3k@pi-hole.net> 2018-10-17 00:01:28 +00:00			`# ANY OTHER CHANGES SHOULD BE MADE IN A SEPARATE CONFIG FILE #`
			`# WITHIN /etc/dnsmasq.d/yourname.conf #`
remove stock comments from 01-pihole.conf and add warning to the top 2016-10-18 09:05:10 +00:00			`###############################################################################`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Move local.list after the ad blocking lists Fixes the bug found by [Reddit](https://www.reddit.com/r/pihole/comments/6j3az9/urls_in_my_blacklist_are_showing_up_as_my_default/) 2017-06-25 16:18:09 +00:00			`addn-hosts=/etc/pihole/local.list`
Update 01-pihole.conf Signed-off-by: Mograine <ghiot.pierre@gmail.com> 2019-10-27 00:09:29 +00:00			`addn-hosts=/etc/pihole/custom.list`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
listening on IPv6, too Removed server=127.0.0.1 because it listens there by default 2015-06-07 04:29:13 +00:00			`domain-needed`
remove stock comments from 01-pihole.conf and add warning to the top 2016-10-18 09:05:10 +00:00
Add localise-queries flag to 01-pihole.conf 2017-04-30 11:47:07 +00:00			`localise-queries`

listening on IPv6, too Removed server=127.0.0.1 because it listens there by default 2015-06-07 04:29:13 +00:00			`bogus-priv`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
listening on IPv6, too Removed server=127.0.0.1 because it listens there by default 2015-06-07 04:29:13 +00:00			`no-resolv`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Get ready for user selected DNSs Prep for using sed to insert user selected DNSs into 01-pihole.conf. Selections will come from dialog during install script containing the following choices: Google, DynDNS, and eventually 2 custom DNS servers. 2016-01-25 05:05:17 +00:00			`server=@DNS1@`
			`server=@DNS2@`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Enable DNS forwarding loop detection Found below by accident: ``` pi@ph5:~ $ man dnsmasq [..] --dns-loop-detect Enable code to detect DNS forwarding loops; ie the situa‐ tion where a query sent to one of the upstream server eventually returns as a new query to the dnsmasq instance. The process works by generating TXT queries of the form <hex>.test and sending them to each upstream server. The hex is a UID which encodes the instance of dnsmasq sending the query and the upstream server to which it was sent. If the query returns to the server which sent it, then the upstream server through which it was sent is disabled and this event is logged. Each time the set of upstream servers changes, the test is re-run on all of them, in‐ cluding ones which were previously disabled. ``` Seems to work just fine if I point my router 10.0.0.1 back to Pi-hole in the WAN DNS settings: ``` pi@ph5:~ $ grep server= -R /etc/dnsmasq.* /etc/dnsmasq.d/01-pihole.conf:server=9.9.9.10 /etc/dnsmasq.d/01-pihole.conf:server=149.112.112.10 /etc/dnsmasq.d/01-pihole.conf:server=10.0.0.1 /etc/dnsmasq.d/01-pihole.conf:rev-server=10.0.0.0/24,10.0.0.2 /etc/dnsmasq.d/01-pihole.conf:server=/dehakkelaar.nl/10.0.0.2 /etc/dnsmasq.d/01-pihole.conf:server=/use-application-dns.net/ ``` ``` pi@ph5:~ $ sudo tee /etc/dnsmasq.d/99-my-settings.conf <<< $'dns-loop-detect' dns-loop-detect ``` ``` pi@ph5:~ $ pihole restartdns [✓] Restarting DNS server ``` ``` pi@ph5:~ $ tail -F /var/log/pihole.log [..] Oct 22 18:17:41 dnsmasq[17301]: using nameserver 10.0.0.2#53 for domain dehakkelaar.nl Oct 22 18:17:41 dnsmasq[17301]: using nameserver 10.0.0.2#53 for domain 0.0.10.in-addr.arpa Oct 22 18:17:41 dnsmasq[17301]: NOT using nameserver 10.0.0.1#53 - query loop detected Oct 22 18:17:41 dnsmasq[17301]: using nameserver 149.112.112.10#53 Oct 22 18:17:41 dnsmasq[17301]: using nameserver 9.9.9.10#53 ``` 2020-10-22 16:54:04 +00:00			`dns-loop-detect`

Revert #1273 2017-03-03 22:14:12 +00:00			`interface=@INT@`

Add CACHE_SIZE to setupVars (#3170) * Update 01-pihole.conf Signed-off-by: DoubleOhmSeven <57564379+DoubleOhmSeven@users.noreply.github.com> * Update basic-install.sh Signed-off-by: DoubleOhmSeven <57564379+DoubleOhmSeven@users.noreply.github.com> Co-authored-by: DoubleOhmSeven <57564379+DoubleOhmSeven@users.noreply.github.com> 2020-09-17 21:13:40 +00:00			`cache-size=@CACHE_SIZE@`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Don't use extra query logging Signed-off-by: DL6ER <dl6er@dl6er.de> 2018-08-20 21:11:23 +00:00			`log-queries`
.log extension 2015-07-29 11:20:39 +00:00			`log-facility=/var/log/pihole.log`
Document dnsmasq.conf config 2015-12-03 09:29:26 +00:00
Decrease `local-ttl` to 2 * Decreasing value should benefit clients when whitelisting blocked sites, [as per this discussion](https://github.com/pi-hole/pi-hole/pull/1698#issuecomment-331134576). 2017-09-21 13:11:44 +00:00			`local-ttl=2`
log-async For better performance. I have been using it for a few weeks with no adverse effects. 2015-12-05 20:14:34 +00:00
			`log-async`