Connection checklist
- Confirm the Blockinator host and port are reachable from the resolver container or process.
- Check
docker compose psanddocker compose logs --tail=100 blockinator caddy. - Use the authenticated
/api/v1/pingendpoint with the same key and network path as the plugin. - For 401 responses, verify that the key is enabled. For HTTPS failures, check trust, hostname, and port.
- Review the plugin startup probe and Blockinator Runtime diagnostics.
Unexpected decision?
- Try the client IP and domain in Policy Tester.
- Check ignored record types, global pause, and active whitelist targets.
- Verify the highest-priority scheduled target and its scoped lists.
- Check applicable global lists, domain whitelist matches, and the unmatched-client fallback.
- Compare the result with Query Log and Technitium’s own blocking behavior.
Frequently asked questions
Is Blockinator a DNS server?
It is an HTTP policy service. Your resolver handles DNS. The Technitium companion plugin asks Blockinator for decisions and enforces the response.
Do I need MySQL?
No. SQLite is the default. MySQL 8.x is available when a separate database suits your deployment.
Why does an allowed query still get blocked?
Check Technitium’s own blocking settings and the plugin’s bypassBuiltInBlockingOnAllow option. An explicit Blockinator ALLOW can bypass built-in blocking when enabled; a fail-open fallback does not.
Why is a hostname target not matching?
PTR identities are learned in the background. The first query does not wait for a lookup. Check Runtime diagnostics and the configured reverse-DNS servers, then test again once the name is learned.
Why is a query missing from Query Log?
Ignored-only record-type requests deliberately bypass logging. Also inspect retention and the Runtime logger queue, drops, failures, and uncertain-write metrics.
Can I change the administrator password in .env?
Bootstrap variables initialize a new database. Manage existing administrator credentials and API keys in Access & Security.
Does the schedule use my browser timezone?
Each schedule stores its own IANA timezone. Query Log boundaries use the system timezone shown beside the controls.
Where do I report a bug?
Open an issue in the relevant application or Technitium plugin repository. Include versions, steps to reproduce, expected and actual results, and redacted logs. Never include credentials or private query history.