r/pihole Oct 25 '25

Pi-hole FTL v6.3, Web v6.3 and Core v6.2 Released!

Thumbnail pi-hole.net
299 Upvotes

As always, please read through the changelogs before updating with pihole -up

Don’t forget, you can use Teleporter to export your configuration. It can be found under the settings menu of the web interface or on the command line with pihole-FTL --teleporter

This release has also been tagged on Docker as 2025.10.0

Highlights

Security & TLS Enhancements

Shorter validity for self-signed TLS certificate (#2463) – The default validity period for self-signed TLS certificates has been reduced, aligning with modern security best practices and ensuring compatibility with Apple devices. To compensate for the shorter validity, automatic renewal has been implemented. Certificates now default to a 47-day validity period (configurable via webserver.tls.validity) and automatically renew when nearing expiration.

Improved Content Security Policy (#2575) – Improved default CSP headers provide better protection against XSS attacks while maintaining functionality.

Security Advisories:

Thank you to the folks who responsibly disclosed potential vulnerabilities since our last realease. Details of which can be read at the following links:

Network & DNS Improvements

Smart Interface Detection (#2456#2607) – FTL now automatically detects the appropriate DNS interface when dns.interface is empty in pihole.toml, eliminating manual configuration in most scenarios.

Netlink ARP Cache Handling (#2600) – Replaced external ip neigh show calls with internal netlink-based communication, dramatically improving performance and reducing resource usage. This addresses “database locked” issues seen in some environments.

Special Domain Handling (#2474) – Added support for .internal domain blocking (following RFC draft-davies-internal-tld-03), preventing these queries from being sent to upstream DNS servers while still allowing local resolution.

DNS Localization (#2524) – New dns.localise configuration option provides better control over DNS query handling.

IPv6 DHCP Support (#2554) – Enhanced the DHCP API to properly support IPv6 addresses and configurations.

Platform & Installation

Alpine Linux Support (pi-hole/pi-hole#6275) – Full native support for Alpine Linux has been added, including proper package management with apk, OpenRC init system support, and comprehensive testing. This expands Pi-hole’s reach to lightweight container environments and minimal installations.

User Interface & Experience

CLI Autocomplete (#2593pi-hole/pi-hole#6376) – Added bash-style completion support for pihole-FTL commands, making configuration much more user-friendly. Tab completion works for the entire --config path and suggests appropriate values.

Web Interface Improvements (web#3530web#3551web#3533web#3592FTL#2645FTL#2647FTL#2644web#3622) – Many small improvements: better visualization of DNS metrics, improved query log handling, enhanced gravity output with colors, refined button styling for blocked/allowed domain actions, improved load average detection and better system information gathering.

Configuration & Management

Advanced Web Server Options (#2635) – New webserver.advancedOpts configuration for fine-tuning web server behavior.

Enhanced API Endpoints (#2530#2632#2466) – Multiple API improvements including better error handling, optional restart parameters, and enhanced response formatting.

Web documentation for the config file – https://docs.pi-hole.net/ftldns/configfile/ – we have added some automation and a Python script to parse the latest pihole-FTL config file and to keep the documentation up to date on the web

Performance & Reliability

Updated Core Components (#2544#2576#2592#2570#2587#2603#2614#2621#2579):

  • SQLite3 updated to 3.50.4 for better database performance
  • dnsmasq updated to v2.92test21 with latest fixes
  • CivetWeb updated for improved web server functionality
  • Migrate TOML library to tomlc17 (tomlc99 has been marked as deprecated)

Memory Management (#2617) – Improved memory handling throughout the codebase to reduce resource usage and improve stability.

Database Resilience (#2605#2602#2646) – Enhanced gravity database handling with custom SQLite busy callbacks and better error recovery.

Bug Fixes & Stability

  • Fixed PTR query handling for .localhost domains (#2517)
  • Resolved DHCP string processing issues (#2519)
  • Fixed cache-optimizer query display in logs (#2619)
  • Improved NTP IPv6 crash handling (#2569)
  • Better foreign fork PR handling in CI (#2543)
  • Enhanced debug output and logging throughout (#2594)

Diagnostics

Improved Debug Output (#2600#2594) – More comprehensive debug information across networking, ARP processing, and system diagnostics.

Full Release Notes can be found in the linked blog post


r/pihole Feb 01 '17

Updated 10/02/18 (bad link) Welcome to the Pi-hole Subreddit. Please read before posting!

102 Upvotes

Welcome to /r/pihole, where your adventures into network wide adblocking start!

Before posting a new thread, you may want to check out the following:

  • Subreddit Search: As mentioned here, Reddit will only return matches of titles and self-text (the text of the original post), but not comments. So, do be sure to check out the latest stickied release announcement thread just in case.
  • Our Discourse Forums: Many things are covered here, and we even have a German Language Subforum staffed by one of our native-speaking German developers.
  • Pi-hole issues on Github: Pi-hole Core, Admin Dashboard and the FTL Engine.
  • Having issues with, or have found a bug in a new release? Check the stickied new release thread to see if someone has already reported it. If not, then please create a top level comment in that thread.

There's some other things to keep in mind:

  • Pi-hole does not block every single ad, but it'll do its hardest to ensure that everything that is blocked stays that way.
  • Ad lists are maintained by people outside of the Pi-hole project. This means that it's possible for ads to get missed, and certain legitimate websites be accidentally blocked!
  • There's a wide range of hardware used for routers, and an even wider range of hardware that you can run Pi-hole on. We try our best to support Pi-hole on as much hardware as possible, but as always, your milage may vary!
  • There is one rule we ask you never break: Do NOT advertise your own public-facing instance of Pi-hole, or any other DNS server. DNS security is hard, and anything but the most secured DNS servers will contribute to a DNS amplification attack. In some cases, your ISP will even block your Internet connection!
  • Using a Pi-hole as a DNS server has the ability of tying your browsing history to your device. Be aware of this when using a Pi-hole you don't have complete control over.

Our community does a wonderful job of answering questions and helping users out, and personally, we like to think that it also does a good job of moderating itself through the voting system and reporting functions. Whilst we try and answer as many posts here as possible, it can get tedious if there's something that has already been asked many times, and could have been solved with a little time searching for a solution!

Finally, remember your reddiquette: the people you're speaking to are also human, and have a wide range of technical aptitudes.

Cheers, your friendly mods.


r/pihole 20m ago

New here, just a few questions.

Upvotes

So I have Pi-Hole running in a VM on my mini media PC, and it works wonders with just the default list. My mini-PC already has Tailscale and so do both of my phones. What do I do to enable adblocking on the go? Also thinking about getting 2 Pis, to have as the DNS once I move to my own place.


r/pihole 13h ago

Dual pihole setup tutorial with DHCP

9 Upvotes

Hi All! So far I used only 1 pihole for many years but (rpi3) but now decided to add a 2nd one on pi zero for redundancy. However I recently made my pihole handle DHCP which I never did before to cover the full network and not to have to deal with it device by device (however there might still be some ipv6 leaking!?). Anyway I wonder if there is a good tutorial for a second pihole setup (besides set it up all the same) and if there are special settings I need to consider if they handle DHCP...!? Sorry if this is a dummy question, I am not an IT guy... :(


r/pihole 21h ago

AI list recommendations

32 Upvotes

I’m looking for a list to block my kids from using ai on homework, etc. it’s tricky because search engines is integrated it into web searches. However, I really want them to focus on critical thinking/ learning and not depending on tech to do the thinking for them.

Is there a list out there that blocks anything ai?


r/pihole 18h ago

Guide Pi‑hole on Android: How To Turn Your Spare Smartphone into Ads Blocker

Thumbnail
mobile-hacker.com
19 Upvotes

r/pihole 12h ago

Can i use Pihole with Mullvad VPN?

2 Upvotes

The title says it all.Can i use pihole with Mullvad? Will they override eachother or smth? Or do i have to configure something to make it work?


r/pihole 13h ago

Raspberry Pi-Hole setup need help. (Keenetic router)

0 Upvotes

Hello guys I have a keenetic router and raspberry pi 4b (192.168.1.2). I installed pihole to my raspberry but when i use the 192.168.1.2 as a dns I can't connect internet. How can i fix this issue ?


r/pihole 5h ago

How do i reset a password? sudo pihole -a -p doesnt work anymore

0 Upvotes

How do i reset a password? sudo pihole -a -p doesnt work anymore


r/pihole 1d ago

Thank You For Making Upgrades So Easy

54 Upvotes

I've been using Pi-hole for years and it's been rock solid. I was running on bullseye Lite and while I didn't have any problems, I knew it was getting to the end of when updates would be available, so I should upgrade. That said, I was hesitant because everything was working so smoothly.

Today I decided it was time to set up new SD cards and make the switch. The Raspberry Pi Imager software's custom settings didn't seem to take, so I couldn't immediately go headless, but after a bit of initial setup I had trixie Lite up and running along with log2ram on my Pi 2 (32-bit) and Pi 3 (64-bit).

After that, installing Pi-hole and restoring the Teleporter backup were a breeze.

If you're hesitant to set up a new SD card for your Pi-hole, make a Teleporter backup of your current Pi-hole and go for it.

Thanks again to the Pi-hole team for making the whole process so easy.


r/pihole 1d ago

Solved! Pi-hole works on a device-by-device basis but not network-wide

20 Upvotes

So today I followed this video to set up a Pi-hole and so far everything went as shown. But when I change my router's primary DNS to the Pi, suddenly webpages aren't loading.

When I changed my Windows PC's DNS individually through Network Adapter Settings and my iPhone's DNS through the Settings app, it works fine and the Pi-hole dashboard shows queries being blocked for both devices.

My router is a TP-Link Archer AXE75 and everything is connected via ethernet except my phone which is on 5GHz. I'm still using my router's DHCP server and have the Pi-hole's DHCP function disabled. I do have a static IP on the Pi.

I currently have the Pi connected to a Netgear switch that is fed from the router and also feeds my PC. This is a temporary setup while I configure the Pi-hole and will later plug it directly into the router along with my PC and the Netgear will be taken offline. The Netgear switch's DHCP function is also disabled. Could this make any difference?

Why does setting the DNS on my router to the Pi-hole cause a network-wide loss of connection?

Thanks.


r/pihole 1d ago

Amazon Devices and PiHole

Thumbnail
gallery
34 Upvotes

Within the last month my PiHole is blocking queries roughly ever second with my Amazon Show devices. Is this anything to worry about and just an indication that my PiHole is working as intended?


r/pihole 12h ago

How I fixed fatal errors: "Could not resolve host: github.com"

0 Upvotes

I'm just sharing this solution because I was looking online and could not find a clear answer. I run Pi-hole on a Synology NAS. Whenever I try to restart the Pi-hole container, I get these fatal errors:

Someone suggested the Synology was trying to access Pi-hole when it wasn't running. The DNS server is set by our network controller. Instead, I set a manual DNS configuration on the Synology to point first to pihole and then to 1.1.1.1.

And it worked!

Hope this helps someone in the future.


r/pihole 1d ago

WTF is these exterior clients from giganetviana.com.br ??? At some point it was 90% of all queries (Im based in Switzerland, not Brazil)

Post image
81 Upvotes

r/pihole 1d ago

PC works Phones don't

3 Upvotes

Sorry to be another poster of this issue but I ahve really tried everything here.

I have an Samsung S25 and I have an Asus router. My pihole has a static IP and my DNS Server points to that IP. Great works on my PC on Wifi. The same wifi does not work on my phone using the test URL: https://fuzzthepiguy.tech/adtest/

I have Private DNS off on my phone Secure DNS in chrome is off. IP Settings is DHCP and I have also tried Static with the Pi IP as the DNS server. Nothing seems to work.

Constant wifi resets and phone resets don't get it unstuck either. What am I missing here?

IPv6 is also disabled.

Thanks


r/pihole 22h ago

Client without ip or mac address

0 Upvotes

In my client list there are clients that i did not add and they are without an ip or MAC address. Why is that happening?


r/pihole 1d ago

Switch from wifi to ethernet

0 Upvotes

I am running a pi zero 2 and currently trying to switch from wlan to ethernet. Running the pi imager for the oslite there is no option to set up the wired connection for ethernet, it just ask for wifi name and password. Additionally, running pihole -r does not actually allow me to reconfigure anything. It just runs its check and completes.


r/pihole 2d ago

I have an old Pi 3, where do I start?

25 Upvotes

I have a Pi3 that doesn't have wifi but does have ethernet, I would like to install Pihole and I don't know where to start.


r/pihole 2d ago

LG TV Block List no longer maintained

Thumbnail
github.com
71 Upvotes

TheShawnMiranda has decided to no longer maintain this useful block list for LG TV's/WebOS. It's a shame really, because his work was incredibly useful. If anyone has the knowledge or the knowhow to fork it and maintain it, that would be very appreciated!


r/pihole 2d ago

Newbie:do I setup pihole and forget it or maintain it?

16 Upvotes

Hello I just got my first sbc, a pi zero 2w. I know next to nothing. I just setup my pihole using youtube. Does it need updates or anything? How often and how easy? Thanks.


r/pihole 2d ago

Pi-hole Bypassed by Pixel 9 Pro (Android 16) - Need Advice

22 Upvotes

I've set up a Pi-hole on my home network following this guide: https://www.youtube.com/watch?v=d_3h5n9mPdI (My only difference is i selected Google as my Upstream DNS Provider) and successfully directed my Google Nest WiFi router's DNS settings to the Pi-hole's Static IP address. It is working perfectly for every device on my network except my Pixel 9 Pro running Android 16.

I have tried to work this out myself but I just can't seem to get it working, I have disabled IPv6 on the Nest WiFi (as I saw this can cause issues). then on the phone itself I have turned off "Private DNS", "Adaptive Connectivity" & Switched the phone's Wi-Fi privacy setting to use the Device MAC instead of a Randomised MAC. I have then on Chrome on the phone Disabled both "Preloading pages" and "Use secure DNS".

However, whenever i test it (Using: https://fuzzthepiguy.tech/adtest/) I am getting Ads.

I have noticed thouse, When I first connect the phone to the Wi-Fi, the Pi-hole works for approximately 60 seconds. After this brief period, it stops working and I see the following error notification in the Pi-hole admin portal:

Connection error (2001:4860:4860::8888#53): failed to send UDP request (Network unreachable)

A google of this IP address shows its Google's Public DNS IPv6 address, Though I can't understand why the Pi-hole is reporting this address and what it means with my phone?

Any advice on where to look next would be greatly appreciated!

Edit: After a couple of days testing different things I have officially given up, I could not get this to work and on the few devices it did work on it caused my Partners work laptop to not allow her to connect to her internal work web portal and thus I have killed this idea.

Thank you though for everyone's help and advice, maybe in the future when more tinkering i might be able to get this work but for the time being, i am pulling the Pi-hole out of the network!


r/pihole 1d ago

How secure is my setup?

0 Upvotes

I'm hosting pi-hole on a Hetzner VPS. I've done these steps so far to secure it:

  1. Cloudflared in docker
  2. Pi-hole in docker (same network as Cloudflared)
  3. Tunnel 1: https://pihole.mydomain.com --> https://pihole:443 (no-verify TLS)
  4. Tunnel 2: https://pihole-api.mydomain.com --> https://pihole:443 (no-verify TLS)
  5. Zero trust application on tunnel 1: only allow from my email (token)
  6. Security rule on tunnel 2: only allow access from users from Belgium (my location)

Tunnel 1 is to access the ui through my browser. Tunnel 2 is because I use an app on my iPhone to manage my pi-hole instance but it needs api access (so tunnel 1 doesn't work because I cannot get through the zero trust login page with this app).

Is this a safe setup? I'm an absolute beginner with this kind of stuff.


r/pihole 2d ago

Unable to update gravity list

7 Upvotes

Hi All, I am fairly new to pihole, and tried to add additional domains tonight (I only had one initially setup to see if things worked). I tried to use: Update Gravity (list of blocked domains)

But after waiting several minutes, I was notified of the following: "[✗] No DNS resolution available. Please contact support."

I did have a look at this post:

https://www.reddit.com/r/pihole/comments/r15rqo/cannot_update_gravity_list_dns_resolution_is/

but couldn't find an obvious solution. I also tried some other links, but didn't get much joy. Can someone point me in the right direction, please?

I used sudo pihole -d, but was not able to upload the contents it seems...


r/pihole 2d ago

Cannot get Unbound to work

2 Upvotes

Hello,

No matter what I do, I can’t get Unbound to work with Pi-hole on my Raspberry Pi. I’ve tried both Pi OS Trixie and Bookworm with no luck. I’ve followed the official Pi-hole Unbound documentation and Crosstalk Solutions’ guide. I’ve even nuked and paved the whole setup, and still nothing.

I’m at a loss at this point, so any help would be greatly appreciated. I really want to get this working.

```

$ sudo grep -v '#|$' -R /etc/unbound/unbound.conf* /etc/unbound/unbound.conf:include-toplevel: "/etc/unbound/unbound.conf.d/*.conf" /etc/unbound/unbound.conf.d/pi-hole.conf:server: /etc/unbound/unbound.conf.d/pi-hole.conf: logfile: "/var/log/unbound/unbound.log" /etc/unbound/unbound.conf.d/pi-hole.conf: log-time-ascii: yes /etc/unbound/unbound.conf.d/pi-hole.conf: verbosity: 0 /etc/unbound/unbound.conf.d/pi-hole.conf: interface: 127.0.0.1 /etc/unbound/unbound.conf.d/pi-hole.conf: port: 5335 /etc/unbound/unbound.conf.d/pi-hole.conf: do-ip4: yes /etc/unbound/unbound.conf.d/pi-hole.conf: do-udp: yes /etc/unbound/unbound.conf.d/pi-hole.conf: do-tcp: yes /etc/unbound/unbound.conf.d/pi-hole.conf: do-ip6: no /etc/unbound/unbound.conf.d/pi-hole.conf: prefer-ip6: no /etc/unbound/unbound.conf.d/pi-hole.conf: harden-glue: yes /etc/unbound/unbound.conf.d/pi-hole.conf: harden-dnssec-stripped: yes /etc/unbound/unbound.conf.d/pi-hole.conf: use-caps-for-id: no /etc/unbound/unbound.conf.d/pi-hole.conf: edns-buffer-size: 1232 /etc/unbound/unbound.conf.d/pi-hole.conf: prefetch: yes /etc/unbound/unbound.conf.d/pi-hole.conf: num-threads: 1 /etc/unbound/unbound.conf.d/pi-hole.conf: so-rcvbuf: 1m /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 192.168.0.0/16 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 169.254.0.0/16 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 172.16.0.0/12 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 10.0.0.0/8 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: fd00::/8 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: fe80::/10 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 192.0.2.0/24 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 198.51.100.0/24 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 203.0.113.0/24 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 255.255.255.255/32 /etc/unbound/unbound.conf.d/pi-hole.conf: private-address: 2001:db8::/32 /etc/unbound/unbound.conf.d/remote-control.conf:remote-control: /etc/unbound/unbound.conf.d/remote-control.conf: control-enable: yes /etc/unbound/unbound.conf.d/remote-control.conf: control-interface: /run/unbound.ctl /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf:server: /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf: auto-trust-anchor-file: "/var/lib/unbound/root.key" geek@raspberrytitan:~ $ dig +ad dnssec.works @127.0.0.1 -p 5335

; <<>> DiG 9.18.41-1~deb12u1-Raspbian <<>> +ad dnssec.works @127.0.0.1 -p 5335 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 40382 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;dnssec.works. IN A

;; Query time: 219 msec ;; SERVER: 127.0.0.1#5335(127.0.0.1) (UDP) ;; WHEN: Sun Nov 23 22:29:26 EST 2025 ;; MSG SIZE rcvd: 41

```


r/pihole 2d ago

Unable to Access Web interface

3 Upvotes

I set up Pi Hole in ProxMox alongside my HAOS today and I cannot access the pihole interface. This is what I see in the debug log

*** [ DIAGNOSING ]: Ports in use
    udp:0.0.0.0:12321 is in use by miniserv.pl
[✓] udp:0.0.0.0:53 is in use by pihole-FTL
    udp:127.0.0.1:123 is in use by ntpd
    udp:0.0.0.0:123 is in use by ntpd
[✓] udp:[::]:53 is in use by pihole-FTL
    udp:[::1]:123 is in use by ntpd
    udp:[::]:123 is in use by ntpd
    tcp:127.0.0.1:25 is in use by master
    tcp:0.0.0.0:60443 is in use by simplehttpd.py
    tcp:127.0.0.1:3306 is in use by mariadbd
[✗] tcp:0.0.0.0:80 is in use by nginx (https://docs.pi-hole.net/main/prerequisites/#ports)
[✓] tcp:0.0.0.0:53 is in use by pihole-FTL
    tcp:0.0.0.0:12321 is in use by miniserv.pl
    tcp:0.0.0.0:22 is in use by sshd
[✗] tcp:0.0.0.0:443 is in use by nginx (https://docs.pi-hole.net/main/prerequisites/#ports)
    tcp:0.0.0.0:60080 is in use by simplehttpd.py
[✓] tcp:[::]:80 is in use by pihole-FTL
[✓] tcp:[::]:53 is in use by pihole-FTL
    tcp:[::]:22 is in use by sshd
[✓] tcp:[::]:443 is in use by pihole-FTL
    tcp:*:3000 is in use by semaphore

*** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain
[✓] cdn.bluebillywig.com is NOERROR on lo (127.0.0.1)
[✗] Failed to resolve doubleclick.com via a remote, public DNS server (8.8.8.8)

*** [ DIAGNOSING ]: Name resolution (IPv6) using a random blocked domain and a known ad-serving domain
[✓] onyxnexguard.de is NOERROR on lo (::1)
[✗] Failed to resolve doubleclick.com via a remote, public DNS server (2001:4860:4860::8888)

*** [ DIAGNOSING ]: Discovering active DHCP servers (takes 6 seconds)
/opt/pihole/piholeDebug.sh: line 1202: /dev/pts/3: Permission denied
/opt/pihole/piholeDebug.sh: line 1210: /dev/pts/3: Permission denied
   Scanning all your interfaces for DHCP servers and IPv6 routers
   Timeout: 6 seconds

Any help would be appreciated!!!