I dont know if anyone else has seen this happen. I have a Roku device that makes it first query to my pihole, gets blocked and then immediately tries and resolve against googles 8.8.8.8 (bypassing my pihole). So While I show a ton of blocks on my pihole, Roku was still getting out because it would just fail back to 8.8.8.8.
I could block external DNS outright, but that isnt as much fun so I built a NAT to 8.8.8.8 for my roku to point directly back at my pihole. My blocked queries has jumped about 30%.
Source: r/pihole · by /u/Fix_Youre_Grammer