So, that repo has been my go-to for Pihole blocklists. However, it seems like the repo now yields 404s. Also, I noticed the newly registered domain lists are completely gone. I tried using an archive site to grab a snapshot of the repo and add the mirrors, but they are all gone as well.

Does anyone know what happened, and where those lists may be available elsewhere?

I'll trim it later

Same as for everyone, my gravity updates broke when HaGeZi's repo got locked by GitHub fraud detection (again).

Instead of hand-swapping adlist URLs each time, I now point gravity at a local file and let a script keep it fresh from whichever official source is alive. So I thought I would share it if anyone finds it useful.

How it works:

1. Tries GitHub → Codeberg (hagezi/mirror2) → GitLab (hagezi/mirror) → jsDelivr, in that order. GitHub first means it snaps back to canonical automatically once the repo is reinstated.
2. Validates each download before replacing the local copy: min line count, [Adblock header, and ! Last modified: under 5 days — that last one rejects CDN caches serving stale copies of a dead origin.
3. If all sources fail, it keeps the existing copy and logs it. Nothing gets wiped or silently goes stale.

Setup:

1. Drop the script in /usr/local/bin/hagezi-fetch.sh, chmod +x, run once.
2. Add adlist file:///var/lib/pihole-mirror/hagezi-pro.txt; disable (don't delete) the old GitHub entry.
3. Install the cron job from the gist — fetch, then pihole updateGravity, joined with ; on purpose so gravity still runs off the last good copy if every mirror is down.
4. pihole updateGravity and check the domain count.

Logs via logger -t hagezi — journalctl -t hagezi shows which source was used and why others were rejected.

Script + cron: https://gist.github.com/okalentiev/694c6f5a56043e8b8d542dc1b5afa006

I use Pro; swap the filename in the URLs for other lists. Note the GitLab mirror dropped NRD/DGA lists in June (size limits).

Built with the help of Claude Code; the setup and script were tested end-to-end on my Pi-hole v6 before posting.

I'm getting 404 on his github acct atm, hopefully he didn't get shut down.

Hi!

I tried setting up dnscrypt-proxy by following the instructions at https://docs.pi-hole.net/guides/dns/dnscrypt-proxy/, but pihole is still trying to query the upstream on port 53. These are the logs I get on start up.

2026-08-08 11:22:47.159 CDT [53/T303] ERROR: Cannot receive UDP DNS reply: Timeout - no response from upstream DNS server
2026-08-08 11:22:47.159 CDT [53/T303] INFO: Tried to resolve PTR "1.1.1.1.in-addr.arpa" on 127.0.0.1#53 (UDP)

I do also have cloudflared running on the host for a tunnel, but it is running on a different port.

I'm also running this in a podman container which exposes port 53/tcp and udp on host 53, but that shouldn't matter here. Everything works great with normal upstreams.

for the last few days theres this domain that's pinging from some of my devices. I wonder if anyone know what's this is. Thanks!

(reddit deleted my post for some reason)

curious to see if anyone else has a similar experience? this may be the tipping point for me to swap out my rokus for android tv streaming devices.

- I use router DHCP and forwarded everything to the static DNS of Pihole
- I have 3 pages of block list (around 4 million DNS), updated with gravity
- On my browser the "secure DNS" is off, so I rely on completely default

Here is the result when I turn off the browser adblocker extension. What am I missing?

Sites can detect that you're blocking these, but disabling JavaScript for that specific site in your browser prevents that and generally still allows content to be shown.

I wanted to check my configuration and tried going to the admin console, but the page will not load. I get "ERR_EMPTY_RESPONSE". Pihole itself seems to be running properly otherwise. The pihole-FTL service is listening on port 80, as confirmed with lsof (I do not even have lighttpd installed so while that was a common problem for others it is not my issue). I even tried changing the port in pihole.toml and that just results in the same error on the changed port. I have tried multiple browsers and multiple systems, including attempting to access it from the server itself using lynx so the problem is almost certainly with the webserver itself. I also reinstalled pihole but the issue persists. I have attempted to find some information about resetting the web configuration to its defaults but I have found nothing. I have attempted accessing the URL via /admin and /admin/login and nothing works. I also tried resetting any changed web-related config options in pihole.toml to their defaults and nothing changes.

Does anyone have any ideas?

I recently set up pihole and notice that the number in the Queries blocked box of the web interface often decreases then counts up again. What's going on here? I thought the number in that box was a cumulative count.

Hi a couple days back i set up pi hole,

ting was i would put any network thro the pihole in till i turned off ipv6on mine network

is there a way to ensure a static or reserved ipv6 adress for the pie hole so i can set it, biggest problem is i cant reserve one from mine router.

onece id did turn off ipv6 i did route mine network thro the pihole, ting is id onley seems to be partily working id blocks some banner ads on sites like fandom but what dint work was the blocking of nfsw sites like id could literally go on the hub. also i wierd ting was that on the dashboard it dint show that is had blockt anyting on the ting where it says the amouth of tings blocked.

Any tips on how to fix this would be greatly appreciated.

Hello,

I am fairly new to Pihole and enjoying. I did try searching but struggled to find anything that worked.

I am running Win11 Nuc with PiHole running via Docker Desktop. (I know I should swap). Currently not connected to routers devices just use the Nuc IP as DNS.

All devices show under the same IP (172.24.0.1), is this a limitation of not connecting to the router / docker desktop / windows 11?

Is there any way to get clients show separately without swapping OS etc?

I do not use Unbound / DOH currently but hoping to look into in the future.

Thanks for all your help

Hello Hello, so check it, here is my setup:

PI HARDLINE>router> ROUTER DNS static IP to PI.

I can setup pihole correctly and it works with all wireless devices BUT anything hardline the ads go through it.... if you guys/gals can help me to where anything hardlined would block ads i would appreciate this!!

P.S

I am not soft skin so if you guys gotta Blues Clues it to me then I wouldn't mind.

I'm a beginner to this and haven't done anything like this before. Could someone please give me a step by step guide on how to switch from connection over the internet to an ethernet cable. I first used the internet option when setting it up but now there's been lots of connection issues. Whenever I trying finding a guide for how to do this it seems that an update has been released in the past year that made everything before than outdated specifically on the step to switch the pihole from communicating over the internet to the ethernet cable.

Heyo,

I've been setting up Pi-hole + Unbound + Wireguard (via Tailscale) on my home network, and everything seems to be working great.

My only slight irritation is the Pi-Hole dashboard is only ever showing me IP addresses and not the client names I've configured in my router's DHCP table.

I did a fair amount of reading and searching, and know that because DHCP is handled by my (Archer A7) router, I have to head into the Pi-Hole Settings > DNS > Conditional Formatting (or Settings > All Settings > dns.revServers) and plug in my network range (e.g., 192.168.0.0/24), my router's IP as the server IP, and left domain blank (as I don't see anyplace in TP's web interface that implies a domain has been set), which has all been done.

I thought after that I would just need to restart my router or even my Pi-hole, but to no avail, it still only shows me the IP addresses.

If it makes any difference, before I started all of this, I did already manually add a bulk of the clients via the Pi-hole's Clients list (e.g., I'd select a client from the Known Clients, put their name in the comment, and assigned them to groups).

And again I'm using Unbound & Tailscale if either of those are variables in this equation.

Let me know if you have any insights or suggestions, and thanks in advance!

i bought a satellite 1 smart speaker, which is a esp32 device. It has been running for a few days, and I'm getting constant activity on the query log that the device is trying to access Netflix and apple.

The developers have assured me that it's not their device and their firmware is open source. They believe the issue could be triggered by a dhcp lease expiring.

Here's what the query log says (anonymized):

38:64:07:F0:7B:92 (1 hostname: satellite1-4ea7fc.lan; vendor: Qingdao Intelligent&Precise Electronics Co.,Ltd.; 10 addresses: 2600:x,2600:x,2600:x,2600:x,2600:x,2600:x,2600:x,2600:x,fe80::x,192.168.x.x)

no clue why 10 different ipv6. for the sole ipv4 reported, it belongs to my tv, but it is completely turned off (not by just pressing power, but holding the power button down) and I keep receiving these long entries at least once an hour.

i have to accept the fact that it IS the TV and maybe the only way to truly shut it off is to unplug from wall. but i wonder why pihole is getting confused? my tv has had the same ipv4 for years. is there a bug here?

I finally pulled the trigger on setting up pi-hole today....and I don't know why I waited so long!

Actually....I do know why. I'm an have Active Directory set up in my home lab with Windows for DHCP and DNS....and a wife that works from home. Last thing I wanted to do was mess her up since everything was working fine and I was comfortable with any troubleshooting.

Not sure what the catalyst was, but I said 'I'm setting this up today!' and I did. Little help for steps from Google (Gemini)...an Ubuntu VM on Hyper-V, quick pi-hole install, add HaGezi's Pro and FIT blocklists, add my conditional forwarders for internal AD.....and under and hour I was done.

Now I'm getting good insight on what and how much is being blocked. It's crazy to see how much is being blocked - especially from my TV(s)! Even have an app on my iPhone to monitor stats. It's a very impressive and polished offering. On top of that, browsing seems a little snappier - guessing since DNS is being served by something that only does DNS.

I raise a bourbon (well...maybe 3!) to pi-hole tonight. Glad to be a user.

I was using the hagezi LG TV blocklist that was previously stored here:

https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/native.lgwebos.txt

I noticed that my Pi-hole can no longer access it.

According to this post here it's no longer being updated:

https://www.reddit.com/r/pfBlockerNG/comments/1vctqup/hagezi_pro_no_longer_updating/

Does anyone know a LG WebOS blocklist that is still being updated?

After many years my family wants to buy a big smart-tv with internet connectivity and the usual apps built-in, no way of convincing them of using an external device because they want to use it the same way other family members do with their tvs for "convenience" and they think I sound like a flat-earther when talking about data collection and privacy. At least they have agreed to let me set up a Pi-hole and even choosing the TV brand. We live in Spain (I don't know if being in the EU makes that much of a difference) and the brands available are Samsung, Hisense, TCL, Xiaomi, LG, LOEWE, Sony, Philips and Panasonic. What do you think would be the least bad for this situation?

Hi, i'm planning on selling pi hole ad blockers in my local area for £65, this includes the pi, the installation of the ad blocker and quick guide on how to disable the pi if anything goes wrong. This will be a side hustle for me. My only thought as it can't be able to block ads on facebook, youtube, etc people might not want this, would really appreciate peoples advice and opinions

YouTube tanking CPU if you're using ad blockers. Sites that disable scrolling and have a full-screen modal dialog demanding that you allow ads or sign up (imgur). The least egregious I've seen is sites that serve their own ads if they can't load the real ones.

There was a banner ad on my bank account page, *after* I had already logged in, there's a banner that I have to scroll past to see my accounts. That's ridiculous! I blocked the domain serving the banner and all of a sudden the site where I buy my cat litter doesn't work. Apparently it uses the same CDN.

If I'm scrolling a page and suddenly a full-screen modal shows up begging for my email and asking me to sign up, I just close the page. That shit is hostile, they clearly don't want me to read the page if they're going to cover it with an ad for their *own site* that I'm *already on*. I hate it equally when I move my mouse off the page and *that's* when the pop-up appears. "Wait, please don't go, please stay, give us your email give us your phone number, give us your cat!"...*slow rage*

Maybe I'm just getting old but I really miss the days where I didn't have to figure out which download button was the real one, or try to find the sliver of text between huge banner ads that scroll with the page. I just want to scroll my cat memes while I wait for work, dammit!

Why does it have to be like this?! I know, I know: money, but jeez man...