Has anybody please got a working whitelist for the Amazon Prime Video app on a Samsung TV? It appears that the “Advertising” category of the DNS-Firewall prevents videos from playing.
I tried this whitelist but didn’t get it working:
minerva.devices.a2z.com
unagi-eu.amazon.com
unagi-na.amazon.com
global.telemetry.insights.video.a2z.com
Thank you.
It’s a while I used Prime on an LG. I would guess the domains should not differ much. Here are my pihole regex that worked quite good as whitelist:
((\.|^)api\.|^m.media-)amazon(video\.com$|\.com$|\.de$)
(\.|^)(aiv-cdn\.net$|cf-timedtext\.aux\.pv-cdn\.net$)
As far as I know, your domains are all tracking. Minerva is ACR (what is acr) the last one has already telemetry in it and unagi is also not necessary.
Good morning, thank you much but after working out your Pihole whitelist and adding it to my iPfire, there was no change.
I also tried to whitelist any “Advertising”-category domain listed in unbound (after opening and using Prime app), that helped neither.
Only disabling the “Advertising” category on the firewall completely helps to play videos again (this before re-entering the shut down Prime app).
It seems that my problem is to identify which domain causes this issue in the unbound logs.
My final whitelist is now as shown below and the Prime Video App on a Samsung Smart TV seems to be working fine:
unagi-eu.amazon.com
unagi-na.amazon.com
minerva.devices.a2z.com
global.telemetry.insights.video.a2z.com
prod.us-east-1.sonar.prime-video.amazon.dev
DNS Firewall list enabled is “Advertising”. “Smart TV” is currently not enabled (that’s because firmware upgrades stopped working on the TV).
Funnily enough, I can watch Prime Video without this whitelist. I have also only ‘Advertising’ enabled in DNS Firewall. I can see in unbound log that all of the servers you listed get blocked by the DNS Firewall. Also I still have URL Filter with the ‘Advertising’ category enabled. Prime Video is still working. I use PC with Chrome Browser or Prime Video App. On my Smart TV I use a Nvidia ShieldTV with the Prime Video App. I have disabled LAN and WLAN for my Smart TV. There is something different in your network.
Hi, from my perspective it was definitely so that enabling those lines in the whitelist step by step functions became inherently working. So, e.g., one of these lines enabled the video previews, and the last line (“prod.us-east…”) enabled video playing itself.
It could be that stripping this list would also lead to a working app but I didn’t try that out yet.
Regarding my network, I’ve blocked DNS requests as shown in the Wiki towards RED to force devices to use iPFire DNS. I don’t have experience with nvidia’s ShieldTV but it’s a nice hint, thank you 
I had the same issue (I use the DNS zone with BIND, though). I could solve it by adding a white list zone with precedence with this content:
$ /etc/bind/master# cat db.rpz.whitelist
$TTL 60
@ IN SOA localhost. root.localhost. (
2026071302; Serial
3600 ; Refresh
600 ; Retry
86400 ; Expire
60 ) ; Minimum
IN NS localhost.
; Passthru = durchlassen, RPZ nicht anwenden
unagi-na.amazon.com CNAME rpz-passthru.
unagi-eu.amazon.com CNAME rpz-passthru.
ipv6.unagi-na.amazon.com CNAME rpz-passthru.
ipv6.unagi-eu.amazon.com CNAME rpz-passthru.
*.unagi.amazon.com CNAME rpz-passthru.
pv-cdn.net CNAME rpz-passthru.
*.pv-cdn.net CNAME rpz-passthru.