New domain to whitelist for PiHole

I know it is an older post, but I finally figured out the problem I was having with achievements and tracking. Here is the solution that worked for me (in case anybody else needs the information).

In a nutshell, it was my ad blocker. I run pihole (https://pi-hole.net/)
on a raspberry pi as a network appliance to block advertising. By default, it has a pretty aggressive blacklist, and I needed to add a few domains to the whitelist. (I had done this in the past, but things must have changed on the Xbox One recently.)

What led me to finally look at this was a message I received on the Xbox One when signing in the other day. I don’t remember the exact wording, but was similar to “Local cache is almost full. This
can affect achievements stats and leaderboards”. When I held the guide button down, it took me to the Network part of the settings application. Then a quick search on Google brought me here:

https://www.reddit.com/r/xboxone/comments/94qb7t/local_cache_is_full/

One post mentioned pihole, and another provided this link:

https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212

When I compared my whitelisted domains with the ones recommended in the “Xbox Live” section, I was missing a few. Once those were updated, everything on the console started to work as expected.

Hopefully this is able to help somebody else who may run into the same problem.

And for the record, I am not getting rid of pihole ... that is a great piece of software, and worth the effort to keep it up to date.

Okay.

Figured out what the problem is. Something must have changed in the Log In process as it is now being blocked by my firewall.

In the past whitelisting xbox.com & xboxlive.com has been enough. Anyone know what changed or what domain I need to also whitelist to allow Log In to work correctly?

Connecting to Facebook is not working. Produces the following error on Facebook:

URL Blocked
This redirect failed because the redirect URI is not whitelisted in the app’s Client OAuth Settings. Make sure Client and Web OAuth Login are on and add all your app domains as Valid OAuth Redirect URIs.

What a coincidence, as I've recently purchased a Raspberry Pi to use it as an adblocker!

I'm playing it safe for now by only letting a few devices on my network use it as a DNS server, just so I have the chance to whitelist frequent sites before I set my router to use it across the whole network. One thing about Pi-Hole and the various block
lists out there (I'm using Wally's), it works a little too well.

If you are logged on to your pi, you can whitelist with this command (taken from your URL, combined into one):

pihole -w clientconfig.passport.net v10.events.data.microsoft.com xbox.ipv6.microsoft.com device.auth.xboxlive.com www.msftncsi.com title.mgt.xboxlive.com xsts.auth.xboxlive.com title.auth.xboxlive.com ctldl.windowsupdate.com attestation.xboxlive.com xboxexperiencesprod.experimentation.xboxlive.com xflight.xboxlive.com cert.mgt.xboxlive.com xkms.xbolive.com def-vef.xboxlive.com notify.xboxlive.com help.ui.xboxlive.com licensing.xboxlive.com eds.xboxlive.com www.xboxlive.com v10.vortex-win.data.microsoft.com settings-win.data.microsoft.com

Are you running something like a PiHole or other DNS/ad-blocker by any chance?