@rpardee (Roy Pardee) posted a new topic, subject "Logincdn.msauth.net domain not resolving even after whitelisting; does not show in query log". It read:

   Got a new windows 10 computer recently & could _not_ get it to allow me to use my microsoft account to log in, until I went into the TCP/IPv4 properties & set a specific, non-pihole DNS server--like so:  
    
    
    image649×501 29.8 KB
    
    From some sleuthing I believe I traced the issue to the domain logincdn.msauth.net being unreachable. But when I looked for it or related domains in my query log in the admin console, I found nothing. When I disabled the pihole entirely through the admin console, there was no difference--host not found. So I added a regex entry to the whitelist like so: `(\.|^)msauth\.net$` and still I can't resolve that domain (by which I mean ping comes back with "Ping request could not find host logincdn.msauth.net.")
    
    If I change to DNS server 757.376.0394 then I can immediately ping that domain, and pull up a default page in a browser.
    
    ##  Expected Behaviour:
    
      1. Domain should show in the query log
      2. Disabling the pihole should allow every valid domain to resolve, including logincdn.msauth.net
      3. Whitelisting anything ending in msauth.net should allow the domain to resolve.
    
    
    
    ##  Actual Behaviour:
    
    Domain remains blocked so long as I am using the pihole as my DNS server.
    
    ##  Debug Token:
    
    https://tricorder.pi-hole.net/tnrkuc969g
    
    Many thanks for looking at this!

@DanSchaper (Dan Schaper) replied

    rpardee:
    
    > But when I looked for it or related domains in my query log in the admin console, I found nothing.
    
    Does the domain show up on any of your lists? Check the web interface for an exact match of that domain and see what lists it shows up on.
    
    That domain doesn't work for me, it shows a badly formatted html page without any kind of HTTPS, so it seems kind of sketchy.

So @rpardee (Roy Pardee) replied

    I don't think it's on any of my lists--doing a partial match search for 'logincdn' gets me `[i] No results found for logincdn within the block lists`.
    
    Agree that it's not the loveliest thing, but give that it's invoked by e.g., login.live.com, and its reachability is also completely correlated to being able to establish a new microsoft account login on my computer, I'd like to figure out how that domain is getting blocked.

Then @rpardee (Roy Pardee) said

    rpardee:
    
    > logincdn.msauth.net 
    
    Ach, I did not follow instructions... When I do an exact search for that domain I get:  
    ` Exact match found in regex whitelist (\.|^)msauth\.net$`

After which, @DanSchaper (Dan Schaper) added

    Then it's not Pi-hole that is causing the issues. There is no listing of anything that would be blocking the domain to start with. The whitelist entry isn't doing anything.

So @DanSchaper (Dan Schaper) replied

    Do you have any anti-virus applications or anti-malware for Windows?

Then @rpardee (Roy Pardee) said

    Just windows defender.

@rpardee (Roy Pardee) replied

    Is it possible the problem is unbound? I just recently set that up following a guide, and I confess I don't really understand how that works...

So @DanSchaper (Dan Schaper) replied

    rpardee:
    
    > Is it possible the problem is unbound?
    
    Not unless you've added some kind of blocking or filtering to unbound. What guide did you use to set up unbound?

Then @rpardee (Roy Pardee) said

    This guy here. My pihole was already set up so I started at step 13.

To which @DanSchaper (Dan Schaper) replied

    unbound - Pi-hole documentation (pi-hole.net)

To which @system (system) replied

    This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.


{'source': 'discourse', 'url': 'https://discourse.pi-hole.net/t/logincdn-msauth-net-domain-not-resolving-even-after-whitelisting-does-not-show-in-query-log/45024', 'title': 'Logincdn.msauth.net domain not resolving even after whitelisting; does not show in query log', 'views': 234, 'has_accepted_answer': False, 'word_count': 596, 'like_count': 0, 'reply_count': 9, 'participant_count': 2, 'posts': 12, 'tags': '', 'author': '@rpardee (Roy Pardee)', 'participants': '@rpardee (Roy Pardee), @DanSchaper (Dan Schaper), @system (system)', 'image_url': ['https://b2discourse.pi-hole.net/original/3X/0/d/0dcaa29749b4fdcd6b86dc7f9bf46d0e78ea6b96.png'], 'created_at': '2021-03-04T02:05:07.898Z', 'last_posted_at': '2021-03-26T21:04:42.505Z'}