AdGuardHome How to open WAN access of web UI after install AMAGHI?

[darkj2k]

I want to access the web UI of AdGuard Home from WAN. But looks like the port (default: 14711) was block by the installer script. According to @SomeWhereOverTheRainBow, It need to be utilizing Iptables and firewall-start custom scripts. Since I'm a normally user and not familiar with things about Iptables and custom scripts. I'd appreciate it if someone can guide me step-by-step to do that. Thanks in advance.

 

[SomeWhereOverTheRainBow]

But looks like the port (default: 14711) was block by the installer script.

Correction, all ports are blocked internet side by the default firewall unless a user (or script) opens them; this is not caused by the installer script.

 

[darkj2k]

Correction, all ports are blocked internet side by the default firewall unless a user (or script) opens them; this is not caused by the installer script.

Sorry for misleading. After googling and lots of try error, finally I got it working as I need. In short here's what I done:

nano /jffs/scripts/firewall-start

#!/bin/sh

/usr/sbin/iptables -I INPUT -p tcp --dport 14711 -j ACCEPT

Now I can access the web UI from WAN even after router reboot. Thanks @SomeWhereOverTheRainBow for encouraged me searching and learning. For any reason I can improve by this way please let me know.

 

[SomeWhereOverTheRainBow]

Sorry for misleading. After googling and lots of try error, finally I got it working as I need. In short here's what I done:

nano /jffs/scripts/firewall-start

#!/bin/sh

/usr/sbin/iptables -I INPUT -p tcp --dport 14711 -j ACCEPT

Now I can access the web UI from WAN even after router reboot. Thanks @SomeWhereOverTheRainBow for encouraged me searching and learning. For any reason I can improve by this way please let me know.

Great job.

Keep in mind, this opens that port to the rest of the world too. That is why I did not place it in my installation script because of consideration of peoples security. If you setup a VPN site tunnel, you can access your network remotely over encryption with "less" security risks. You would be able to access your WEBUI for AGH this way without having to expose a port wan side other than the port for your encrypted VPN tunnel. But then you have to ask yourself, which option is better. Everyone around here would probably tell you the VPN site tunnel is the way to go.

 

[johndoe85]

The easiest way is to enable instant guard.

 

[Kingp1n]

The easiest way is to enable instant guard.

Would you be able to elaborate a little more on how to access AdGuardHome with Intant Guard enabled? Once AG installed, is there a specific way to setup this up? Thanks!

 

[johndoe85]

Would you be able to elaborate a little more on how to access AdGuardHome with Intant Guard enabled? Once AG installed, is there a specific way to setup this up? Thanks!

Just enable instant guard, install it on your phone and connect to it when you are still on the same wifi. So it can "sync up".

After that, outside of your network, you connect to the VPN via instant guard and then open up a web browser and types in your local adress to the adguardhome. Don't forget the port number to adguard.

 

[SomeWhereOverTheRainBow]

While we are in the ball park of just trying "anything", they could just toggle this option to "No":

Although, I highly discourage doing such.