AdGuardHome Adguard setup

[Shadowflake]

I'm trying to switch from diversion to addguard. I have disabled diversion and installed adguard. I can login local on the adguard settings Page.

Adguard has the following adressen:

• 127.0.0.1
• 127.0.1.1
• 192.168.50.1
• 109.132.175.160

So the configuration is running.
In the lan section of the router the following has been set.
Dchp server:
DNS server 1: 192.168.50.1
DNS server 2: 127.0.1.1

Why are there still a lot off adds on webpages? Do it need to setup something else?

Thanks for the feedback.

 

[Shadowflake]

I have added some extra information:
* ipconfig all
* adguard dashboard
* adguard installation info
* Asus Lan setup
* Asus wan setup

Hopefully this helps to put me in the right direction to make it work.

Thanks in advance.

 

[grogi]

Few tips, which should not affect effectiveness of blocking - but will imporove seciruty and performance.

• Remove the DNS server 2: 127.0.1.1. Any address that starts with 127 is local loopback - hosts will try to ask themselves for the addresses.
• Disable the AdGuard on the WAN interface as well.

Otherwise it seems hosts are using your AdGuard to exectue DNS queries. But nothing gets filtered out. In Adguard UI, go to Settings/Filters and see if you have any rules defined.

 

[SomeWhereOverTheRainBow]

Lan DHCP DNS on DHCP pages should be blank if AdGuardHome is being used on the router himself. It appears the problem is caused by improperly self configured router settings. You should have left these as default, since the adguardhome installer sets the router up as if it was left "default" settings wise. Wan DNS should be set to automatic, Lan DNS should be blank. Viola it should all work from there. This is why it is critical to read the first couple of forum threads here:

AdGuardHome - [RELEASE] Asuswrt-Merlin-AdGuardHome-Installer (AMAGHI)

Asuswrt-Merlin-AdGuardHome-Installer The Official Installer of AdGuardHome for Asuswrt-Merlin Requirements: ARM based ASUS routers (not bridges or access points) that use Asuswrt-Merlin Firmware JFFS support and enabled REQUIRES ENTWARE(!) for package management, and a separate USB drive for...

www.snbforums.com

 

[SomeWhereOverTheRainBow]

Few tips, which should not affect effectiveness of blocking - but will imporove seciruty and performance.

• Remove the DNS server 2: 127.0.1.1. Any address that starts with 127 is local loopback - hosts will try to ask themselves for the addresses.
• Disable the AdGuard on the WAN interface as well.

Otherwise it seems hosts are using your AdGuard to exectue DNS queries. But nothing gets filtered out. In Adguard UI, go to Settings/Filters and see if you have any rules defined.

He really doesnt have to change the loopback address, especially if he is using local resolver on his router. this would break the routers local DNS since dnsmasq is moved to a different port other than 53. The wan interface can be ignored, since this should be blocked by the default firewall. ( and default security options of adguardhome itself).

Essentially adguardhome is configured to listen on

0.0.0.0:53

The same as dnsmasq would have been if it had been left on port 53.

Those addresses don't actually get used unless a request is made on them. For the instance of the WAN IP, that would be blocked by the firewall unless the request is made from within the lan itself. As for the loopback address, that would only be used if a DNS request was made on the router himself.

 

[SomeWhereOverTheRainBow]

I have added some extra information:
* ipconfig all
* adguard dashboard
* adguard installation info
* Asus Lan setup
* Asus wan setup

Hopefully this helps to put me in the right direction to make it work.

Thanks in advance.

Here is my corrections to your setup.

 

[Shadowflake]

Few tips, which should not affect effectiveness of blocking - but will imporove seciruty and performance.

• Remove the DNS server 2: 127.0.1.1. Any address that starts with 127 is local loopback - hosts will try to ask themselves for the addresses.
• Disable the AdGuard on the WAN interface as well.

Otherwise it seems hosts are using your AdGuard to exectue DNS queries. But nothing gets filtered out. In Adguard UI, go to Settings/Filters and see if you have any rules defined.

The following is set in the filter. (see attachement)
I don't know how to disable adquard in the WAN interface .

Here is my corrections to your setup.

View attachment 44442
View attachment 44444

View attachment 44445

All these corrections are made.
Adguard is still not blocking any adds.

 

[Shadowflake]

The setup looks like this in asus main screen.

 

[SomeWhereOverTheRainBow]

The following is set in the filter. (see attachement)
I don't know how to disable adquard in the WAN interface .View attachment 44441

All these corrections are made.
Adguard is still not blocking any adds.

What browser are you using? and Also you may have to disconnect and reconnect the clients you are using to see if the corrections worked properly.

 

[Shadowflake]

What browser are you using? and Also you may have to disconnect and reconnect the clients you are using to see if the corrections worked properly.

I m using chrome.
I did reconnect the cliënt, this didn t solve the issue.

 

[SomeWhereOverTheRainBow]

I m using chrome.
I did reconnect the cliënt, this didn t solve the issue.

Also, if you are using a DUAL WAN configuration, Make sure you have the correct WAN interface turned on. Sometimes DUAL WAN configurations creates an UNKNOWN environment in regards to which DNS is actually being used.

 

[SomeWhereOverTheRainBow]

I m using chrome.
I did reconnect the cliënt, this didn t solve the issue.

My suggestion is to go to your DNS filter page.

Make sure you have dns filter custom 1 set to your routers LAN IP. Then set the global setting to use Custom slot 1.

 

[Shadowflake]

Also, if you are using a DUAL WAN configuration, Make sure you have the correct WAN interface turned on. Sometimes DUAL WAN configurations creates an UNKNOWN environment in regards to which DNS is actually being used.

View attachment 44448

Dual Wan is disabled.

My suggestion is to go to your DNS filter page.

Make sure you have dns filter custom 1 set to your routers LAN IP. Then set the global setting to use Custom slot 1.

Take a look at the screenshot do you mean like this?
I don't understand the following: then set global setting to use custom slot 1. Where can i configure this?

 

[Shadowflake]

I think that the IP 109.132.175.160 is the router / modem (PPPoe) of the provider.

 

[SomeWhereOverTheRainBow]

Dual Wan is disabled.View attachment 44449

Take a look at the screenshot do you mean like this?
I don't understand the following: then set global setting to use custom slot 1. Where can i configure this?View attachment 44450

Yes that is the right ip address in custom 1. Next you need to change the the "global filter mode" to "custom 1" and delete that client list rule and click apply.

If you do my last requests listed here, then your clients will be using ADGuardhome for dns instead of being directed to use a different dns server.

Adguard Adblock is not the same as Adguardhome and you are currently forcing your clients to bypass Adguardhome by using the Adguard Adblock in global mode.

Change this entry to "custom 1":

You can also delete whatever you have in "custom 2" and "custom 3" those would not be necessary.

Delete these entries(including the rule on the client list):

Then apply the changes.

 

[Shadowflake]

Yes that is the right ip address in custom 1. Next you need to change the the "global filter mode" to "custom 1" and delete that client list rule and click apply.

If you do my last requests listed here, then your clients will be using ADGuardhome for dns instead of being directed to use a different dns server.

Adguard Adblock is not the same as Adguardhome and you are currently forcing your clients to bypass Adguardhome by using the Adguard Adblock in global mode.

Change this entry to "custom 1":
View attachment 44454

You can also delete whatever you have in "custom 2" and "custom 3" those would not be necessary.

Delete these entries(including the rule on the client list):

View attachment 44455

Then apply the changes.

I did the following see screenshot.
Still getting adds .

 

[SomeWhereOverTheRainBow]

I did the following see screenshot.
Still getting adds .
View attachment 44456View attachment 44457View attachment 44458

Try using Firefox for example. Also reboot everything. And disconnect and reconnect clients. Make sure you have the built in DoH DNS server for chrome browser turned off.


Here is how to disable DoH on chrome:

https://techdocs.akamai.com/etp/docs/disable-doh-browsers

 

[SomeWhereOverTheRainBow]

If the browsers such as Chrome, Firefox, and edge are using their default built in secure dns, then you will never be able to successful block ads because it will bypass the Adguardhome dns.

 

[Shadowflake]

Below a summary of all the settings and still adds comming through .

 

[SomeWhereOverTheRainBow]

Also make sure you are not using a VPN on your router or cellphone. Specifically a vpn that does not use the router for DNS services.