Diversion Skynet or Diversion issue

[smallnet]

I think this is a Diversion issue, but not sure if it's an issue at all.

On the uiDivStats screen, in the section "Query Log" I can see the following (I'm filtering by IP to one device on the network).

I see the same site as both Blocked and Allowed, and don't know what that means.

As best as I can tell, this is happening just with this one device, and the device is a Samsung Smart TV, which I am assigning a local IP address (which you can see below).

2020-11-16 20:07	tvx.adgrx.com	192.168.1.42	AAAA	Allowed
2020-11-16 20:07	tvx.adgrx.com	192.168.1.42	A	Blocked (blocking list)
2020-11-16 20:07	log-ingestion.samsungacr.com	192.168.1.42	AAAA	Allowed
2020-11-16 20:07	log-ingestion.samsungacr.com	192.168.1.42	A	Blocked (blocking list)
2020-11-16 20:07	cpu.samsungelectronics.com	192.168.1.42	AAAA	Allowed
2020-11-16 20:07	cpu.samsungelectronics.com	192.168.1.42	A	Blocked (blocking list)
2020-11-16 20:07	apu.samsungelectronics.com	192.168.1.42	AAAA	Allowed
2020-11-16 20:07	apu.samsungelectronics.com	192.168.1.42	A	Blocked (blocking list)
2020-11-16 20:06	bpu.samsungelectronics.com	192.168.1.42	AAAA	Allowed
2020-11-16 20:06	bpu.samsungelectronics.com	192.168.1.42	A	Blocked (blocking list)
2020-11-16 20:06	zpu.samsungelectronics.com	192.168.1.42	AAAA	Allowed
2020-11-16 20:06	zpu.samsungelectronics.com	192.168.1.42	A	Blocked (blocking list)

Is this normal? I do not understand the A vs AAAA column, and it seems to me the same request can't both be allowed and blocked for the same device.

The device is getting its internet by being connected via WiFi to the main router on a Asus AI Mesh system (all mesh nodes use ethernet backhaul, in case it matters).

 

[dave14305]

AAAA would be a query for an IPv6 address for the domain. Diversion won't block AAAA requests unless IPv6 is enabled on the router. But then, if IPv6 is disabled, I don't suppose you can reach an IPv6 IP anyway.

 

[smallnet]

Yes interesting. I d not have IPv6 enabled and I do not have an IPv6 external address. I only have IPv4.

So does this just mean the device is trying to see if it can call out using IPv6 and it's getting blocked? But IPv4 gets through, which I assume is OK?