Upgrading to 6.0 blocks DNS requests from "Foreign" networks

[Atreidae]

This is a Run Issue - Post 6.0 upgrade

Less of a bug report, and more of an FYI for anyone else that Watchtower upgraded their images today.

When my install was updated to 6.0 the PiHole instance now no longer accepts "non-local" DNS requests. This is good DNS practice and protects you from some nasty DNS attacks.

Issue

PiHole stopped responding to DNS requests post 6.0 upgrade with "ignoring query from non-local network" errors

If you are seeing Ignoring query from non-local network in your logs, or in the PiHole Diagnostics, this is likely because the container NAT is correctly masquerading the containers real IP address.

The issue with this is that DNSMASQ by default is set to ignore any requests from foreign networks. So unless you set the container to bind directly to your host's IP (not recommended) you will need to allow foreign networks in PiHole.

To Fix

1. Make sure your PiHole instance isn't accessible from the Internet (it shouldn't be, but, just in case)
2. Login to your PiHole instance with interface
   (If your password is no longer accepted, you may need to reset it using sudo pihole setpassword yourpasswordhere from the containers shell)
3. Navigate to Settings > DNS
4. Enable Expert mode by clicking on the green "Basic" toggle in the top right of the window
5. Update the Interface Settings from "Allow only local requests" to "Respond only on interface"
6. Click Save and Apply

DNS queries from your LAN will now be resolved correctly.

Hope this helps someone

Details

Related Issues

• [x ] I have searched this repository/Pi-hole forums for existing issues and pull requests that look similar

Password issue: #1706
DNSMasq binding issue: #1695

How to reproduce the issue

1. Environment data

• Operating System: Debian
• Hardware:
• Kernel Architecture: 6.1.0-15-amd64 Readme #1 SMP PREEMPT_DYNAMIC Debian 6.1.66-1 (2023-12-09)
• Docker Install Info and version:
  • Software source: Official Docker
  • Supplementary Software: Poirtainer, Watchtowwer
• Hardware architecture: x86/64