u/ParadeJoy

I'm new to pihole. After tinkering I've got it running but it's not without questions.

For the host (pi.hole), there are these ipv4only.arpa queries that are happening dozens of times per minute. I believe it's a reverse lookup up of sorts that asks for IPV6 addresses? I don't have ipv6 enabled on my network.

I search the sub without a clear answer. I also saw this post on the forum suggesting it's an Apple device doing it.

Is there any downside to putting an exclusion of ipv4only.arpa requests to the query log (or any of the other domains seen)?

In addition to the arpa requests, it's also hitting example.org over and over again. Any reason for that? Haven't been able to find an exact reason as to why it's hitting a domain used for illustrative purposes.

I'll take any help I can get! Thanks in advance

So I switched back to my MR7500 after my previous router became too unstable to use.

In DHCP settings , I pointed DNS1, 2, and 3 to pihole (192.168.1.12). However, when I check my client devices, DNS settings are set to 192.168.1.1.

I've released/renewed DHCP lease, rebooted the router multiple times, etc. This router is just straight up ignoring the DNS setting I'm putting in.

Firmware is up to date (1.1.12.216649).

The linksys is behind an AT&T gateway that is running in passthrough mode. That doesn't seem to be the issue.

Does anyone else know about this dns setting being an issue?

Thanks in advance for any help/input you can provide!

I need a sanity check on my setup.

I have a VPS connected to my home network via WireGuard. The VPS runs various stuff as docker containers. I'll use MeTube as an example.

I have Cloudflare DNS pointing metube.mydomain.com to the private VPS WireGuard IP (10.x.x.7). Nginx Proxy Manager on the VPS has a wildcard SSL cert on mydomain.com. NPM forwards the subdomain to my home server's LAN IP (192.168.x.201).

My goal all along is to have valid HTTPS on all my services with zero public exposure. When I'm remote, I only want it to be accessible when wireguard is connected.

My questions:

1. Is there anything insecure or WTF about this setup?

2. Are there any drawbacks to routing traffic this way?

3. Are there perhaps better ways I could have accomplished this?

FWIW, this setup seems to work well. I have no complaints and I'm just wanting to ensure I haven't done anything stupid here.

Thankful for any feedback I can get!