Gargoyle Forum

First question, what version are you using? This will determine whether the advice should be based on iptables or nftables. In essence, neither of them natively supports what you’re looking for, but we can use ipsets (or nftsets) and dnsmasq to look up the FQDN and create a set. You would then creat...

I have an enhancement request on the DFS (5GHz band) I'm using the latest build 1.15.X (Built 20250330-2253 on TP-Link Archer A6 v3. I noticed that the 5Ghz radio often gets disabled (due to DFS) on any channel except channel 36. And due to the "default" setting, the available channels go...

If you tell me exactly which version you’re running and which device (it was 1.14.0 right? Which device?) I am willing to compile a version for you which has no other changes except the removal of those two domains.

I’m sorry for the inconvenience there. It is likely that the syntax was not right and dnsmasq failed to start. It did not a full reset but I can appreciate that is where you ended up to resolve it. Other options: compile your own version and remove the offending entries. Can I support you in doing t...

Ok, so this is the root cause of the problem. Whatever Pihole is doing with the blocked domain, it’s causing it to query Gargoyle itself rather than the real website. You’re effectively browsing the login screen. The login screen has a “you’re currently connected from IP: xxx” string in it. And gues...

Ok, and just humour me with
ewget https://api.aruljohn.com/ip
ewget http://www.tracemyip.org/

Are you open to blocking these domains on the router itself instead of Pihole?

If the host resolves, it requests the page. If the page is not blank, it attempts to parse out an IP address from it. If the returned IP is null, it checks the next source. If it is a valid IPv4 address (127.0.0.1 included…), that’s the answer it uses. If your host blocking is working properly this ...

I don’t have any issues with tracemyip on my end, that’s interesting. Maybe a more sophisticated option is required to prevent localhost from being updated out. If the router is set to use the pi-hole it should be respected. I would check nslookup what server it is using. More drastically you can bl...

If you can look at your logs and tell me which one is generating the wrong address I’ll update/remove it. The latest versions have a new url from aruljohn which behaves correctly. As a workaround, you can set the dns config to source from the WAN interface instead of querying a service. As long as y...

It has probably gone into coexistence mode.
viewtopic.php?p=36846&hilit=Noscan#p36846

Circumventing this is possible but not legal.
You can verify this is the problem but you should then let it be.