[Solved] Enable iCloud Private Replay in Pi-hole

Pi-hole is a network-wide ad-blocking DNS server. iCloud Private Replay is a secure internet relay service. While Pi-hole can protect you from unwanted tracking and advertisements, iCloud Private Relay provides you with privacy when you browse the web in Safari.

When you join the Pi-hole network with a device with iCloud Private Relay enabled, Pi-hole returns NXDOMAIN response for mask.icloud.com and mask-h2.icloud.com as per Apple recommendation.

To disable this feature in Pi-hole and allow the functioning of iCloud Private Relay go to /etc/pihole/pihole-FTL.conf and set BLOCK_ICLOUD_PR=false.

References:

• https://pi-hole.net/
• https://support.apple.com/en-us/HT212614
• https://developer.apple.com/support/prepare-your-network-for-icloud-private-relay/
• https://docs.pi-hole.net/ftldns/configfile/#icloud_private_relay