Running Pi-hole for local DNS (jellyfin.lan etc). Works fine… except my Mac keeps ignoring it because the router auto-broadcasts its own IPv6 DNS via Router Advertisement, and macOS asks that one first.
Proof it's the router's fault, not Pi-hole:
$ scutil --dns | grep -m6 'nameserver\[' nameserver[0] : fe80::420e:f3ff:fedc:839b%en0 <- router, IPv6 RA nameserver[1] : 192.168.1.25 <- my pihole nameserver[2] : 192.168.1.1 $ dig +short jellyfin.lan .168.1.25 192.168.1.25 <- pihole answers correctly $ dig A jellyfin.lan ::420e:f3ff:fedc:839b%en0 ;; status: NXDOMAIN <- router's RA resolver has no clue, but it's asked FIRST So the OS gets a "definitely doesn't exist" from the router's IPv6 resolver and never bothers falling back to Pi-hole. Classic.
Already dug through the whole admin UI looking for a way to turn this off:
– LAN page: IPv4 only, no IPv6 tab
– WAN page: TR-069/ISP-locked, no manual DNS field
– Wired TP-Link RE550 extender: pure AP/bridge, nothing to configure, passes RA straight through
– Ran through flashing the extender with OpenWrt: not even on their supported device list, dead end
– Considered running my own radvd to fight back: would just add a 2nd competing DNS broadcast, not fix anything
Anyone know if this exact model (F6600R, firmware ZTEGF660013RO) has a hidden IPv6/RA setting somewhere, or a superadmin/telecomadmin account that unlocks more than the normal one? At this point I'm ready to believe the ISP just doesn't want me touching it.
Source: r/router · by /u/Diligent_Anteater_58