The LAN on the WiFi works but no internet. Some things to take note of in the future: If you make any changes to DHCP settings, your clients won't accept those settings until they renew their DHCP Lease, so to have those devices apply the new changes before they renew either disconnect/reconnect them, go to command line and release/renew their DHCP/IP settings, or reboot the device. I have a Ubiquiti network setup consisting of a UDM Pro, a 16 port POE switch, and a Unifi AP nano-HD. The Raspberry Pi is hardwired into the UDM Pro, the UDM Pro is wired into the switch, and everything else is wired into the switch as well.

Make sure you assign the pihole to use a fixed address within the Unifi controller. Now, the problem I seem to be having is: I cannot seem to get anything on the network to use the Pi-Hole as its DNS server. Fortunately I also have word document with my site map of everything for the network.

Keep in mind the DNAT rule is to catch rogue applications that directly query an outside DNS server. Now, the UDM Pro has a different WAN port which is eth8, I believe. When I look at the web interface dashboard, i can see it has SOME queries coming through, but no where near what should be coming through...I'm...at a loss as to what to do.
I have a static IP from my cable provider so I setup my USG with my WAN static IP address with 1.1.1.1 1.0.0.1 for DNS. Run NextDNS on your UDM with podman. moved to a new house, installed the UDM-Pro up and running. So the Network not the WAN DNS setting to point to the PiHole? You can also try the alternative nslookup.

Press J to jump to the feed. Save your commands as a shell script so that you can re-run them easily. Just to confirm, i change the DHCP Name Server under each LAN (I have 3, Corporate,IoT, and Guest) to the ip of my pihole? As a side note, on the UDM Pro, if you want to port forward on the SFP+ WAN port, you need to use the old settings interface, otherwise it will only affect the RJ45 WAN port. Then, follow the guides below to setup either Pi-Hole, NextDNS, or AdGuard Home. Run pihole on your UDM with podman. Why do you need these rules? actions Caddy cloudflare Comcast deluge Diun docker dream machine pro edgeos edgerouter github github actions grafana Grafana Plex Hyper-V influxdb IPMI-Adv-Telegraf jenkins mDNS Microsoft nvidia-smi Packet loss pi-hole PiHole-InfluxDB Plex PowerShell prometheus-exporter Prometheus-Transmission review Script Signal Issues Speedtest-Influxdb telegraf telegraf nvidia ubiquiti ubnt udm … dns-common.

I then setup Pi-Hole. However, if any app has hard-coded DNS server then their query would bypass Pi-hole. Wouldn’t this allow some ads to get through? I've set PiHole as a forwarder so only outbound requests are handled by PiHole. I have tried just about every combination of those two that I can think of, and my network is still not blocking the ads. To verify DNS redirect, block a domain in Pi-hole, then query it from the client using different DNS server.
This would mean that there's a chance that devices on your network won't always use the PiHole for DNS Translation and will go through 1.1.1.1 as well. If it does check and run into this problem, it warrants a close look into what applications it is and why is it querying an external DNS server directly.

From a client that you believe should be using Pi-hole (and not via ssh or Putty to the Pi terminal), what is the output of the following: I do not use a UDM nor a UDM Pro so I cannot speak directly to that aspect of it. Here is a link to how I set mine up with the UDMP including FW rules to block other DNS queries in place of filtering. I have my UDM Pro, 24 port 250w POE switch, 3 UAC-AP-PROs all setup and configured. AdguardHome I have 2 pi-holes, primary and secondary. Topology is: Client -> Pi-hole -> UDMP -> Google DNS.

Press question mark to learn the rest of the keyboard shortcuts, UDM/UDMPro - How to run commands on device startup. In my case, I was finding that the iptables command alone wasn't working for me. Lost all customisations.

Also, thanks for the tip about the WAN DNS. (I have a USG Pro that does that.). Then create a DNAT rule to catch all DNS queries not pointed to Pi-hole and redirect them to Pi-hole.

I am really lost on what the config is trying to achieve. Make sure to put a secondary DNS like cloudflare in your UDM Pro or if your PiHole goes down you don't have connection anywhere else. Now IoT/WiFi devices are randomly disconnecting from internet. I'm late to this party, but wanted to drop in to maybe help others that find this post through search results like I did. Now regarding the port forwarding in pfSense, I'm not exactly sure what goal you're pursuing. I just tried this on my UDMP and utilities like dig didn't seem to like it. I setup each network to handout the static IP of my Pi-Hole as the sole DNS server, I'm not sure what I did differently, but after approximately 5 reboots and no changes to settings, I seem to have everything working! I wanted to introduce my pi-hole that i have running on a docker on my Synology NAS. Thanks everyone. Not a great 2 hours of of your life to go through again.

Got my phone connected, great! run-pihole. Make sure pi-hole is on a fixed IP address.

Make sure pi-hole is on a fixed IP address. I have my Pi-hile plugged into my US-16-POE Gen2 and a static assigned to it. Cookies help us deliver our Services. After that, you first need to make sure all devices are set to obtain the DNS from the router (not manual), then either refresh their network adapter or reboot them.

I have installed Pi Hole onto a Raspberry Pi 3 running the full Raspberry Pi OS image that was flashed Last night. Configuration-wise, I have the WAN DNS Server IP's set to nothing, the LAN DNS Server IP's set to the IP of my PI Hole. Just what I’ve been looking for! My UDM Pro is PPPoE, so that I can use IT instead of Century Link's garbage routers. That's where I put the IP address of my PiHole (Primary) and 1.1.1.1 (Secondary). No. Why can't you tell the UDM to serve your pi-hole IP as the DNS 1 and DNS 2 make it the internal gw IP of the UDM. In UDMP, edit each LAN or VLAN network to set DHCP name server to manual, and populate DNS server 1 with Pi-hole IP address. When I researched the "reply from unexpected source" error by dig, it seems to happen on Linux but not on Mac (which I confirmed). In UDMP, edit each LAN or VLAN network to set DHCP name server to manual, and populate DNS server 1 with Pi-hole IP address. This way Pi-hole query log and statistics can see which local IP address is making which DNS request. I was hoping to migrate from my USG to my UDM Pro without any issues. Basically we need to allow DNS queries to all UDMP gateways on each of the LAN and VLANs.

Make it point to the pihole and that solves the first part of your problem. If anyone has ANY insight at all...I would love it. Works perfect, https://www.reddit.com/r/Ubiquiti/comments/fw6whf/udm_pro_redirect_all_dns_queries_through_pihole/. Should be fine as long as you dont setup the pihole on the network your Unifi equipment resides. That about sums up the hardware setup. Now i have to change pihole to listen to all interface. I read somewhere else that you're supposed to make that change only on the WAN network setting? The downside to this is that I only see our two DC internal DNS servers as clients in PiHole, so no way to track down which client PC makes which request.

That’s it. My UDM Pro is PPPoE, so that I can use IT instead of Century Link's garbage routers. I eventually got everything to work, thanks! Not setting that up again. Pi-hole should return 0.0.0.0, whereas UDMP should return valid IP.

Have you gotten this to work across vlans? I think this has been answered here but if i have multiple VLAN's is it sufficient just to put the Pi-hole in the dns1 entry in the UDMP or do i have open firewall to port 53 etc..?

I think I got this working.

To catch and redirect these, login to UDMP as root user and edit iptables. I have installed Pi Hole onto a Raspberry Pi 3 running the full Raspberry Pi OS image that was flashed Last night. Does anyone have a guide to configure my UDM Pro to use pi-hole as my DNS? Note: iptables changes will be lost upon each reboot. Unless there’s only one DNS Server entry, clients will choose which one they want to use. Press question mark to learn the rest of the keyboard shortcuts. Any other internally resolvable address is handled by the DCs. Base configuration for DNS server containers, both IPv4 and IPv6. AFAIK there is no way automate any boot script so you will have to do run it manually each time.