Menu
What's new
By:
Filters Better Search

AdGuardHome Asuswrt-Merlin-AdGuardHome-Installer (AMAGHI) cont.

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Status
Not open for further replies.
jorgsmash said:
None of the queries appeared in the Adguard log.

DNS filter, if I'm in the right place, is set to "On - Router"

View attachment 50544
Click to expand...
On the windows computer.

Follow these instructions and provide the screenshot:

  • Open the Start menu, type Command Prompt and choose Run as administrator from the right pane.
  • In the Command Prompt window, type ipconfig /all and press Enter.
  • Provide a screenshot of what Command Prompt shows.
Some additional questions,
what web browser do you use for this device?
Can you provide a screenshot of your LAN DHCP settings page from your router webui (e.g. Advanced_DHCP_Content.asp)?
 
dave14305 said:
And is there anything on the LAN DHCP Server / DNS fields?

Let’s check with:
Code: 
iptables -t nat -S
Click to expand...
I think you just helped me solve it!

Code: 
# iptables -t nat -S
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-N DNSFILTER
-N DNSVPN8
-N GAME_VSERVER
-N LOCALSRV
-N PCREDIRECT
-N PUPNP
-N VSERVER
-N VUPNP
-A PREROUTING -p tcp -m tcp --dport 53 -j DNSVPN8
-A PREROUTING -p udp -m udp --dport 53 -j DNSVPN8
-A PREROUTING -d redacted -j GAME_VSERVER
-A PREROUTING -d redacted -j VSERVER
-A PREROUTING -i br+ -p udp -m udp --dport 53 -j DNSFILTER
-A PREROUTING -i br+ -p tcp -m tcp --dport 53 -j DNSFILTER
-A PREROUTING -i br0 -m mac --mac-source redacted -j PCREDIRECT
-A POSTROUTING -s 10.10.0.0/24 -o tun11 -j MASQUERADE
-A POSTROUTING ! -s 10.2.0.2/32 -o wgc3 -j MASQUERADE
-A POSTROUTING -o eth0 -j PUPNP
-A POSTROUTING ! -s redacted -o eth0 -j MASQUERADE
-A POSTROUTING -s 192.168.50.0/24 -d 192.168.50.0/24 -o br0 -j MASQUERADE
-A DNSFILTER -j DNAT --to-destination 192.168.50.1
-A DNSVPN8 -s 192.168.50.10/32 -j DNAT --to-destination 10.2.0.1
-A GAME_VSERVER -p tcp -m tcp --dport 3074 -j DNAT --to-destination 192.168.50.10
-A GAME_VSERVER -p udp -m udp --dport 3074 -j DNAT --to-destination 192.168.50.10
-A GAME_VSERVER -p tcp -m tcp --dport 3478 -j DNAT --to-destination 192.168.50.10
-A GAME_VSERVER -p udp -m udp --dport 3478 -j DNAT --to-destination 192.168.50.10
-A GAME_VSERVER -p tcp -m tcp --dport 4379:4380 -j DNAT --to-destination 192.168.50.10
-A GAME_VSERVER -p udp -m udp --dport 4379:4380 -j DNAT --to-destination 192.168.50.10
-A GAME_VSERVER -p tcp -m tcp --dport 27000:27050 -j DNAT --to-destination 192.168.50.10
-A GAME_VSERVER -p udp -m udp --dport 27000:27050 -j DNAT --to-destination 192.168.50.10
-A PCREDIRECT ! -d 192.168.50.0/24 -i br0 -p tcp -m tcp --dport 80 -m mac --mac-source redacted -j DNAT --to-desti                                                      nation 192.168.50.1:18099
-A VSERVER -p tcp -m tcp --dport 3074 -j DNAT --to-destination 192.168.50.10:3074
-A VSERVER -p tcp -m tcp --dport 27014:27050 -j DNAT --to-destination 192.168.50.10
-A VSERVER -p udp -m udp --dport 3074 -j DNAT --to-destination 192.168.50.10
-A VSERVER -p udp -m udp --dport 3478 -j DNAT --to-destination 192.168.50.10
-A VSERVER -p udp -m udp --dport 4379:4380 -j DNAT --to-destination 192.168.50.10
-A VSERVER -p udp -m udp --dport 27000:27031 -j DNAT --to-destination 192.168.50.10
-A VSERVER -p udp -m udp --dport 27036 -j DNAT --to-destination 192.168.50.10
-A VSERVER -p udp -m udp --dport 6969 -j DNAT --to-destination 192.168.50.3:1194
-A VSERVER -p udp -m udp --dport 9 -j DNAT --to-destination 192.168.50.10:9
-A VSERVER -j VUPNP

I am so sorry, I thought I had disabled the VPN I had set up in VPN director. I just bought a new vpn service and could have sworn that I turned it off. Brain fart on my part for not even thinking to check there.
 
Last edited:
SomeWhereOverTheRainBow said:
On the windows computer.

Follow these instructions and provide the screenshot:

  • Open the Start menu, type Command Prompt and choose Run as administrator from the right pane.
  • In the Command Prompt window, type ipconfig /all and press Enter.
  • Provide a screenshot of what Command Prompt shows.
Some additional questions,
what web browser do you use for this device?
Can you provide a screenshot of your LAN DHCP settings page from your router webui (e.g. Advanced_DHCP_Content.asp)?
Click to expand...
I just realized I had stupid vpn director turned on and I'm gonna disable it and re-test. Sorry for wasting everyone's time!
 
dave14305 said:
Great! Please redact your WAN IP in the iptables output.
Click to expand...
Arrgghhh. I'm usually really good at doing that before posting. 🤬

All the rules are so confusing. I have a few port forward rules set up for games I play.

-A VSERVER -p tcp -m tcp --dport 27014:27050 -j DNAT --to-destination 192.168.50.10

This one here, is this even taking effect? Since I did a port range? I don't see the ports listed after the LAN IP, like it is listed for the tcp rule above it for port 3074.

Also, what does this rule do and where is it configured?

-A PCREDIRECT ! -d 192.168.50.0/24 -i br0 -p tcp -m tcp --dport 80 -m mac --mac-source 34:9F:7B:41:ED:A0 -j DNAT --to-destination 192.168.50.1:18099


Thanks!
 
Last edited:
jorgsmash said:
This one here, is this even taking effect? Since I did a port range? I don't see the ports listed after the LAN IP, like it is listed for the tcp rule above it for port 3074.
Click to expand...
Yes, it will use the same destination port and just rewrite the IP. No need to specify the internal port if it is the same as the external forwarded port.
jorgsmash said:
Also, what does this rule do and where is it configured?
Click to expand...
Looks like a rule to block Internet access, but allow local access. Could be in the Client List or else Parental Controls.

Getting off-topic from AGH…
 
dave14305 said:
Yes, it will use the same destination port and just rewrite the IP. No need to specify the internal port if it is the same as the external forwarded port.

Looks like a rule to block Internet access, but allow local access. Could be in the Client List or else Parental Controls.

Getting off-topic from AGH…
Click to expand...
My apologies. AGH is working as expected now, and all is right with the world. Sorry I didn't catch that the VPN director was enabled before posting. And thank you guys for the help!
 
I recently disabled native dhcp and enabled AGH DHCP server, everything seems working fine (I don't use aimesh) I'd even argue there is slight latency improvement, but maybe that's placebo effect anyways I have a question do i need to change anything on dns settings page? like changing port 553 to 53, disabling reverse dns etc?
 
exoxon said:
I recently disabled native dhcp and enabled AGH DHCP server, everything seems working fine (I don't use aimesh) I'd even argue there is slight latency improvement, but maybe that's placebo effect anyways I have a question do i need to change anything on dns settings page? like changing port 553 to 53, disabling reverse dns etc?
Click to expand...
Sorry, there is currently no guide available for this approach. The AdGuardHome installer and its auxillary files are not designed or intended to incorporate this feature into their logic. Please feel free to write a forum tutorial or guide sharing your process with other users.
 
Everything is working fine for WAN communication, I like very much this product, thanks a lot for the hard work.

I need some help to understand how to correctly configure communication on my LAN to resolve local machines FQDN.

Here is the situation:
  • When I have AdGuard enabled:
    • I can't ping by hostname (either "server1" or "server1.domain.local")
      • Ping request could not find host server1
      • Ping request could not find host server1.domain.local
    • I can ping by using IP and using "-a" to resolve the hostname, which is giving me the right name FQDN I tried before!!!!
      • Pinging 1.2.3.4 with 32 bytes of data: Reply from 1.2.3.4: bytes=32 time<1ms TTL=128
      • Pinging server1.domain.local [1.2.3.4] with 32 bytes of data: Reply from 1.2.3.4: bytes=32 time<1ms TTL=128
  • When I have AdGuard disabled, everything is working fine
I know I have to configure DNS in "Settings" => "DNS settings" but I am struggling to find the right way to do it correctly to have my local domain ("domain.local") be resolved by my router.
I found the documentation (here) but maybe I am too stupid to understand it.

Anyone could help?

Thanks
 
saison2023 said:
Everything is working fine for WAN communication, I like very much this product, thanks a lot for the hard work.

I need some help to understand how to correctly configure communication on my LAN to resolve local machines FQDN.

Here is the situation:
  • When I have AdGuard enabled:
    • I can't ping by hostname (either "server1" or "server1.domain.local")
      • Ping request could not find host server1
      • Ping request could not find host server1.domain.local
    • I can ping by using IP and using "-a" to resolve the hostname, which is giving me the right name FQDN I tried before!!!!
      • Pinging 1.2.3.4 with 32 bytes of data: Reply from 1.2.3.4: bytes=32 time<1ms TTL=128
      • Pinging server1.domain.local [1.2.3.4] with 32 bytes of data: Reply from 1.2.3.4: bytes=32 time<1ms TTL=128
  • When I have AdGuard disabled, everything is working fine
I know I have to configure DNS in "Settings" => "DNS settings" but I am struggling to find the right way to do it correctly to have my local domain ("domain.local") be resolved by my router.
I found the documentation (here) but maybe I am too stupid to understand it.

Anyone could help?

Thanks
Click to expand...
This is what I have in DNS Setting & it works for me, might help.

Code: 
[/router.asus.com/][::]:553
[/www.asusnetwork.net/][::]:553
[/www.asusrouter.com/][::]:553
[/use-application-dns.net/][::]:553
[/dns.resolver.arpa/][::]:553
[/routerdomainname/][::]:553
[//][::]:553
 
Khadanja said:
This is what I have in DNS Setting & it works for me, might help.

Code: 
[/router.asus.com/][::]:553
[/www.asusnetwork.net/][::]:553
[/www.asusrouter.com/][::]:553
[/use-application-dns.net/][::]:553
[/dns.resolver.arpa/][::]:553
[/routerdomainname/][::]:553
[//][::]:553
Click to expand...
Thanks, I will give it a try.
Unfortunately, this does not fix the trouble because I already have same lines at the beginning of "Upstream DNS servers" in "DNS Settings" page
I re-entered values, validated there is no "ghost" character.......... no luck :mad:
I don't understand what I am doing wrong.
 
Last edited:
saison2023 said:
Thanks, I will give it a try.
Unfortunately, this does not fix the trouble because I already have same lines at the beginning of "Upstream DNS servers" in "DNS Settings" page
I re-entered values, validate there is no "ghost" character.......... no luck :mad:
I don't understand what I am doing wrong.
Click to expand...
what output value do you get from typing nvram get lan_domain into the ssh terminal
 
SomeWhereOverTheRainBow said:
what output value do you get from typing nvram get lan_domain into the ssh terminal
Click to expand...
I got the fqdn of my local domain, the same I have entered in the router webGui.
As I said before, when I disable AdGuard, my local DNS resolution is working fine.
I know there is something in my config, but I can't catch it!
Luckly, Internet communication is working fine (otherwise family would tell me some bad words...)
 
saison2023 said:
I got the fqdn of my local domain, the same I have entered in the router webGui.
As I said before, when I disable AdGuard, my local DNS resolution is working fine.
I know there is something in my config, but I can't catch it!
Luckly, Internet communication is working fine (otherwise family would tell me some bad words...)
Click to expand...
Code: 
[/router.asus.com/][::]:553
[/www.asusnetwork.net/][::]:553
[/www.asusrouter.com/][::]:553
[/use-application-dns.net/][::]:553
[/dns.resolver.arpa/][::]:553
[/routerdomainname/][::]:553 #### YOUR value listed for $(nvram get lan_domain) needs to be listed here
[//][::]:553

Another thing worth mentioning is that your "fqdn" must follow the traditional rules of fqdn naming

Each label must consist of 1 to 63 characters and the total FQDN may not exceed 255 characters in total. Only letters, numbers, or dashes can be used. Each label has to have either a letter or a number at the beginning.
Click to expand...
 
SomeWhereOverTheRainBow said:
Code: 
[/router.asus.com/][::]:553
[/www.asusnetwork.net/][::]:553
[/www.asusrouter.com/][::]:553
[/use-application-dns.net/][::]:553
[/dns.resolver.arpa/][::]:553
[/routerdomainname/][::]:553 #### YOUR value listed for $(nvram get lan_domain) needs to be listed here
[//][::]:553

Another thing worth mentioning is that your "fqdn" must follow the traditional rules of fqdn naming
Click to expand...
You're right, but my FQDN is "ad.localdomain" (I wasn't very inspired, I put the first thing I thought of that would make people think "local")
I think it's respecting the rules ;)
 
Status
Not open for further replies.

Similar threads

J
AdGuardHome AdGuardHome stops working after every router reboot - have to un-/reinstall it every time
Replies
0
Views
125
jtbx
J
C
Ad guard fails with mobile devices once Encryption is enabled.
Replies
3
Views
340
Gary_Dexter
Gary_Dexter
G
AdGuardHome AdguardHome install issue
2
Replies
26
Views
1K
thelonelycoder
thelonelycoder
Viktor Jaep
TAILMON TAILMON v1.0.20 -July 27, 2024- WireGuard-based Tailscale Installer, Configurator and Monitor (Now available in AMTM!)
Replies
2
Views
289
Viktor Jaep
Viktor Jaep
SomeWhereOverTheRainBow
  • Locked
AdGuardHome AdGuardHome New Release's 2023
13 14 15
Replies
288
Views
31K
visortgw
visortgw
Similar threads
Thread starter Title Forum Replies Date
thelonelycoder amtm amtm 5.0 - the Asuswrt-Merlin Terminal Menu, November 17, 2024 Asuswrt-Merlin AddOns 61
J Entware Possible to install jdownloader on asuswrt-merlin router with entware?? Asuswrt-Merlin AddOns 9
W Skynet SOLVED: Scrollbar Disappears on Skynet Tab on Asuswrt-Merlin 386.14 Asuswrt-Merlin AddOns 10
thelonelycoder scMerlin scMerlin 2.5.8 - Service and script control menu for Asuswrt-Merlin, October 20, 2024 Asuswrt-Merlin AddOns 85
JGrana uKasa uKasa - A utility script that manages Kasa smart outlets and switches with Asuswrt-Merlin routers Asuswrt-Merlin AddOns 29
JGrana Updated Hue Utility - huetil Control and manage your Hue system from Asuswrt-Merlin or Raspbian Asuswrt-Merlin AddOns 1
8 ASUS RT-AX58U (F/W Ver.:V3.0.0.4.384.8601) with Asuswrt-Merlin 3004.388.5 - Transmission: "Could not connect to the server. You may need to reload" Asuswrt-Merlin AddOns 2
C Entware Channel change with Entware on Merlin Asuswrt-Merlin AddOns 0
R Entware Asus-Merlin 388.8 GT-AX11000 Entware v2RayA package error Asuswrt-Merlin AddOns 2
Tarek Yag vnStat vnStat on Merlin 386.14 missing scrollbar bug Asuswrt-Merlin AddOns 13

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Staff online

Members online

Total: 859 (members: 27, guests: 832)
Top