Labthrift Labthrift What to buy. What to skip. Why.

Written 6 Sep 2026. This is a how-to, not a product card.

When the printer won't print

Phone or laptop can't find the house printer after Pi-hole, or a cloud print app stalls. Same Wi-Fi first, pause blocking to prove it, then allow the blocked name. You don't need a new printer.

Haven't installed the house ad block yet? Start with the first useful thing. A normal website broke instead of the print dialog? That walk is when a site won't load after Pi-hole. Cast or AirPlay picker empty? That is when casting won't find the TV. You already know the domain and just want it allowed? That is allow a site in Pi-hole on purpose. This note is the printer that vanished from the phone, stalled mid-job, or never showed up after you pointed the house at Pi-hole.

Skip until phone and printer share one network

Network printing needs the phone (or laptop) and the printer on the same house Wi-Fi. Guest Wi-Fi, a travel hotspot, cellular data, and “AP isolation” / client isolation on the router all hide the printer even when Pi-hole is perfect. Put the phone on the main house SSID. Put the printer on that same SSID (not guest). Turn off the phone VPN for a minute. USB-only printers plugged straight into a laptop are not a Pi-hole problem — use the cable and the maker driver, and skip the rest of this note.

What this is

Two different failures get blamed on Pi-hole. One is DNS: a block list catches a HP, Epson, Brother, Canon, Google, or Apple name the printer app needs, so setup, ink status, or cloud print never finishes. The other is discovery on the house network (mDNS / Bonjour / AirPrint / IPP). Pi-hole does not route that traffic. Same Wi-Fi and no client isolation fix discovery. The pause test below tells you which failure you have.

Step 1: prove whether Pi-hole is involved

On the phone or laptop, open the print dialog once so it fails the usual way. Then pause blocking for five minutes from the computer over SSH:

pihole disable 5m

Try printing again while blocking is off. Blocking turns itself back on after five minutes. Turn it on sooner when you are done:

pihole enable

Same idea in the admin page: open http://pi.hole/admin (or the computer's address plus /admin), find Disable blocking, pick five minutes. Admin page blank? When the Pi-hole admin page won't open. Forgot the admin password? Change the Pi-hole admin password.

If printing works only while blocking is off, Pi-hole is involved. Keep going. If the printer still hides with blocking off, leave the block list alone. Fix same Wi-Fi, client isolation, or the printer's own Wi-Fi settings first. Ads back house-wide is still when ads come back.

Step 2: catch the blocked name

With blocking on again, open Query Log in the admin page. On the phone, open the print dialog or the maker app once more so fresh rows appear. Look for blocked names around that moment. From SSH you can watch live:

pihole tail

Press Ctrl-C when you have a name. Copy the exact host (like a *.hp.com, *.epson.com, or maker CDN name), not a full URL. Guessing a long allow list is how you open trackers for the whole house. Prefer one name from the log. Calmer look anytime: see what Pi-hole blocked.

Step 3: allow that one domain

SSH into the computer, then:

pihole allow example.com

Swap in the real name from the log. Or open Domains in the admin page and add it on the allow / whitelist side. From Query Log you can often open a row and choose Allow. Either path is fine. Full calm allow walk: allow a site in Pi-hole on purpose.

Step 4: prove the print again

On the phone, close the print dialog, wait a few seconds, open it again. Toggle Wi-Fi off and on once if the printer still hides (sticky DNS cache on the phone). In Query Log the name should show as allowed / OK when the phone asks. If printing still fails, watch the log again and allow the next exact blocked name for that try. Stop when a test page lands. Don't allow every maker CDN “just in case.”

If discovery still fails with blocking off

That is not a Pi-hole allow list. Confirm the printer's status page shows the same house SSID as the phone. On many routers, guest Wi-Fi or “AP isolation” / “client isolation” blocks phone-to-printer talk on purpose. Turn isolation off for the main SSID, or move both devices off guest. AirPrint and many Android print services need mDNS on the same LAN. A new mesh kit will not fix a guest SSID by itself.

If you allowed the wrong thing

Open Domains in the admin page and remove that name from the allow list. Prefer removing one bad allow over leaving blocking off. A five-minute pause is for diagnosis. A permanent disable is how ads come back for everyone.

What this is not

This is not a reason to buy a new printer, a new ink subscription, or a mesh kit. It is not opening the Pi-hole admin page past the house network. It is not fixing a USB printer plugged into one laptop. It is not guest Wi-Fi by design. Discovery across two SSIDs is a router setting problem, not a Pi-hole allow list. A phone that bypasses house DNS with Private DNS, Private Relay, or a VPN is a different walk: when one phone still shows ads.

What next

Leave the allow list alone when a test page prints. For a bank or login that breaks the same way, see when a site won't load after Pi-hole. Cast picker empty? When casting won't find the TV. For a calmer allow when you already know the domain, see allow a site in Pi-hole on purpose. Once a week, keep Pi-hole updated. Before a scary reinstall, save a Pi-hole backup so your allow entries survive. A file share on this same computer can wait: a file share.

Optional: jot that printing works again in Lab plan — username + passkey, no email. Skip if you just want to keep reading.

Skip

Sources

Pi-hole docs. Pi-hole command (allow, disable, enable, query, tail). Official pages only. For install, see the first useful thing. For a broken website, see when a site won't load after Pi-hole. For casting, see when casting won't find the TV. For a calm allow, see allow a site in Pi-hole on purpose. For the query log, see see what Pi-hole blocked. For guest Wi-Fi, see when guest Wi-Fi still shows ads.

Also on this topic

The first useful thingPut a house-wide ad block on the old PC. The rest of the house keeps using the internet as usual. You don't need a Raspberry Pi. When a site won't load after Pi-holeA bank, streamer, or login page breaks after Pi-hole. Pause blocking for five minutes, then allow the domain you need. You don't need a new router. When casting won't find the TVPhone or laptop can't see Chromecast, AirPlay, or the smart TV after Pi-hole. Same Wi-Fi first, pause blocking to prove it, then allow the blocked name. You don't need a new TV. Allow a site in Pi-hole on purposeOne domain the house needs that a block list keeps catching. Add it to the allow list. You don't wipe every list or buy a new router. See what Pi-hole blockedOpen the query log (or watch it over SSH) so you can tell ads are dying, which device asked, and which name to allow later. You don't need a new router. When ads come backAds are back, sites won't load, or a phone still shows banners. Check the computer, Pi-hole, router DNS, then the phone. When one phone still shows adsEveryone else's ads dropped. One phone still shows banners. Check Private DNS, Private Relay, a VPN, then the Wi-Fi lease. You don't need a new router. When guest Wi-Fi still shows adsGuest Wi-Fi is a separate network on purpose. Leave guests on ISP DNS, put a visitor on the main house Wi-Fi, or point guest DNS at Pi-hole only if they can reach the computer. You don't need a new router. Block a site in Pi-hole on purposeOne domain you don't want in the house. Add it to the deny list. You don't wipe every block list or buy a new router. When the Pi-hole admin page won't openhttp://pi.hole/admin or the computer's address plus /admin won't load. Check house Wi-Fi, the address, then Pi-hole and the web service. You don't need a new router. Point common home routers at Pi-holeWhere to set DNS on TP-Link, ASUS, eero, Netgear, Nest, and ISP gateways so the house asks Pi-hole. Prefer LAN DHCP DNS. You don't need a new router. Keep Pi-hole updatedWeekly apt does not refresh Pi-hole. Update the software and the block lists on the old PC so ads stay gone. You don't need a new Raspberry Pi. Save a Pi-hole backup before you change thingsExport settings with Teleporter so a reinstall or a bad list does not wipe your allow list and local DNS. You don't need a new Raspberry Pi. Change the Pi-hole admin passwordAfter the house ad block is up, change the admin password the installer printed. That password is not the login.