Ad guard fails with mobile devices once Encryption is enabled.

[Cythrawl]

I don't know what I am doing wrong, but this is now 100% repeatable on my setup even after a total reset of the router. I have an Asus GT-AXE16000 with the latest version of Merlin on 3004.388.8_2

When I install Ad guard, it works just fine, however I want to enable the Encrypted DNS and when I set them (doesn't matter what port) and attach a valid certificate to it (Lets Encrypt) it all seems to work just fine, until a wireless device (Android or iPhone) disconnects from the Wi-Fi and then reconnects to it later..

Once its re-connected I cannot go to any web pages on the device (Google, Bing, CNN, Etc.) and it will just sit there waiting and will finally timeout.

When I look at the logs on the router I see this:

"
Sep 28 12:22:55 AdGuardHome[16111]: 2024/09/28 12:22:55.635911 [error] dnsproxy: handling tcp; unpacking msg err="dns: overflow unpacking uint16"
Sep 28 12:22:55 AdGuardHome[16111]: 2024/09/28 12:22:55.643816 [error] dnsproxy: handling tcp; unpacking msg err="dns: overflow unpacking uint16"
Sep 28 12:22:55 AdGuardHome[16111]: 2024/09/28 12:22:55.663011 [error] dnsproxy: handling tcp; unpacking msg err="dns: overflow unpacking uint16"
Sep 28 12:22:55 AdGuardHome[16111]: 2024/09/28 12:22:55.861001 [error] dnsproxy: handling tcp; unpacking msg err="dns: overflow unpacking uint16"
Sep 28 12:22:55 AdGuardHome[16111]: 2024/09/28 12:22:55.867459 [error] dnsproxy: handling tcp; unpacking msg err="dns: overflow unpacking uint16"
Sep 28 12:22:55 AdGuardHome[16111]: 2024/09/28 12:22:55.960941 [error] dnsproxy: handling tcp; unpacking msg err="dns: overflow unpacking uint16"
Sep 28 12:22:55 AdGuardHome[16111]: 2024/09/28 12:22:55.964091 [error] dnsproxy: handling tcp; unpacking msg err="dns: overflow unpacking uint16"
Sep 28 12:22:56 AdGuardHome[16111]: 2024/09/28 12:22:56.002086 [info] tls: number of certs: 2
Sep 28 12:22:56 AdGuardHome[16111]: 2024/09/28 12:22:56.002169 [info] tls: got an intermediate cert

this is spammed constantly while the device is trying to reach out.. (The logs are quite large this is just a small snippet)
If I disable the DNS encryption the problem goes away and works as it should.

I have tried the different versions of Ad Guard, (Stable, Beta, Edge) and they all do the same.

Anyone have any ideas WTF is going on with that?

Thanks

 

[Gary_Dexter]

Why are you enabling encrypted dns?

 

[Cythrawl]

Why are you enabling encrypted dns?

Because you can (And there is an option to do so) and I wanted Encrypted DNS internally????

 

[Gary_Dexter]

You don’t need that.

The encryption is for if you plan on using DNS externally.