AdGuardHome [RELEASE] Asuswrt-Merlin-AdGuardHome-Installer (AMAGHI)

[soerenderfor]

Extended list from oisd.nl is a good starting point. https://abp.oisd.nl

If you search on the forum you can find a topic, where we talk about different blocklists.

 

[gspannu]

Where to get good blocklists for AG

OISD full list: https://dbl.oisd.nl/
MMOTTI Regex Filters: https://raw.githubusercontent.com/mmotti/adguard-home-filters/master/regex.txt

The 2 combined give quite good results, but search the forum for more recommendations. The above should serve as a good starting point.

 

[SomeWhereOverTheRainBow]

**NEW Release** v1.4.1

Announcing the incorporation of a method for calling AdGuardHome service.

While AdGuardHome still fully supports the traditional Entware method of terminal commands, AdGuardHome can now be called to some of the same commands using the router rc.service. The hope being that this will help eliminate some of the nuances experienced with AdGuardHome self termination.

Traditional Commands:

/opt/etc/init.d/S99AdGuardHome {stop|start|restart|kill|check}

New Supported Commands:

service {stop|start|restart|kill}_AdGuardHome

Many thanks to @dave14305 for the idea.

 

[gspannu]

@SomeWhereOverTheRainBow
Feature Request:
Can an installation log file be created/ appended at the end of each fresh installation and/ or update - so that all changes done by the installer are recorded?
Which files changed, created, scripts added, etc…

 

[SomeWhereOverTheRainBow]

@SomeWhereOverTheRainBow
Feature Request:
Can an installation log file be created/ appended at the end of each fresh installation and/ or update - so that all changes done by the installer are recorded?
Which files changed, created, scripts added, etc…

This is something to consider in the future, but maybe in a less tedious manner. Currently, the best way to see changes is to view the release tags on github. Where you can see all changes by viewing the difference between versions.
For example.

Comparing v1.4.0...v1.4.1 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

The Official Installer of AdGuardHome for Asuswrt-Merlin - Comparing v1.4.0...v1.4.1 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

github.com

Here you can see all changes and to what files.

Plus I vaguely remember that the installer announces in the terminal session which files are updated , if you see that it doesn't redownload a file, then it didn't get updated. Also, it tells you when a /jffs/script file is modified or created. If it doesn't change anything it announces that no changes were made to those files as well.

 

[gspannu]

This is something to consider in the future, but maybe in a less tedious manner. Currently, the best way to see changes is to view the release tags on github. Where you can see all changes by viewing the difference between versions.
For example.

Comparing v1.4.0...v1.4.1 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

The Official Installer of AdGuardHome for Asuswrt-Merlin - Comparing v1.4.0...v1.4.1 · jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer

github.com

Here you can see all changes and to what files.

Plus I vaguely remember that the installer announces in the terminal session which files are updated , if you see that it doesn't redownload a file, then it didn't get updated. Also, it tells you when a /jffs/script file is modified or created. If it doesn't change anything it announces that no changes were made to those files as well.

Thanks. My main request was to be able to see what changes had been made on the router.
You are correct that the terminal session does display the changes, and even if all those messages were sent/ appended to a log file, it should serve a basic purpose.

Thanks for looking into this a future build...

 

[soerenderfor]

OISD full list: https://dbl.oisd.nl/
MMOTTI Regex Filters: https://raw.githubusercontent.com/mmotti/adguard-home-filters/master/regex.txt

The 2 combined give quite good results, but search the forum for more recommendations. The above should serve as a good starting point.

How can it be you use "https://dbl.oisd.nl" - it is the list for pihole.

And "https://abp.oisd.nl" is for adguardhome.

From https://oisd.nl/faq

"What is the difference between abp.oisd.nl, dbl.oisd.nl, hosts.oisd.nl, ...?​

Syntax. Unfortunately not all adblockers handle the same syntax, so choose the one that's right for you.

hosts?.oisd.nl is bigger and has more entries than abp.oisd.nl. Does abp.oisd.nl block less?​

No. If anything, abp.oisd.nl blocks more, since it also blocks subdomains by default.

This is also one of the main reasons I recommend using AdGuard Home (with https://abp.oisd.nl) instead of Pi-hole (or any software that only works with the "domains" or "hosts" -syntax)"

 

[SomeWhereOverTheRainBow]

How can it be you use "https://dbl.oisd.nl" - it is the list for pihole.

And "https://abp.oisd.nl" is for adguardhome.

From https://oisd.nl/faq

"What is the difference between abp.oisd.nl, dbl.oisd.nl, hosts.oisd.nl, ...?​

Syntax. Unfortunately not all adblockers handle the same syntax, so choose the one that's right for you.

hosts?.oisd.nl is bigger and has more entries than abp.oisd.nl. Does abp.oisd.nl block less?​

No. If anything, abp.oisd.nl blocks more, since it also blocks subdomains by default.

This is also one of the main reasons I recommend using AdGuard Home (with https://abp.oisd.nl) instead of Pi-hole (or any software that only works with the "domains" or "hosts" -syntax)"

Either of them will work,but you may want to consider using the pihole one since it only blocks domains specifically, the other list uses some robust filters that may put unnecessary additional strain on your router and potentially block too much or many false positives.

 

[soerenderfor]

Either of them will work,but you may want to consider using the pihole one since it only blocks domains specifically, the other list uses some robust filters that may put unnecessary additional strain on your router and potentially block too much or many false positives.

Yes, i have tested both. And the abp.oisd.nl blocks much much more, with 300.000 on the list, and the pihole list is around 1million.

I was only curious, because the site recommende the abp.oisd.nl list. Thanks for your response.

**So you will recommend to always you hosts blocklist?

 

[Gary_Dexter]

So there’s a lot of pages here and just looking for a few answers:

1. How does this work in comparison to Diversion? I know one isn’t meant to replace the other but still would like to know.
2. How does AdGuard Home work? Does it take over my current DNS settings (CloudFlare Families) and use it’s own? Does this negate the need for my custom DOT settings?
3. Is the webgui page accessible to customise settings etc?
4. Anything else worth knowing?

 

[SomeWhereOverTheRainBow]

Yes, i have tested both. And the abp.oisd.nl blocks much much more, with 300.000 on the list, and the pihole list is around 1million.

I was only curious, because the site recommende the abp.oisd.nl list. Thanks for your response.

**So you will recommend to always you hosts blocklist?

For the simple fact that filters put more strain and potentially block more false positives. Yes I recommend using host format. The only filters I recommend are the mmotti regex filters. Or the small adguardhome filter list.

 

[soerenderfor]

For the simple fact that filters put more strain and potentially block more false positives. Yes I recommend using host format. The only filters I recommend are the mmotti regex filters. Or the small adguardhome filter list.

Thanks, for your response.

 

[SomeWhereOverTheRainBow]

So there’s a lot of pages here and just looking for a few answers:

1. How does this work in comparison to Diversion? I know one isn’t meant to replace the other but still would like to know.
2. How does AdGuard Home work? Does it take over my current DNS settings (CloudFlare Families) and use it’s own? Does this negate the need for my custom DOT settings?
3. Is the webgui page accessible to customise settings etc?
4. Anything else worth knowing?

Adguardhome when it installs, the installer sets it up to become your only dns solution. The routers DoT gets turned off to prevent any DNS conflicts for port 53. DoT can be defined as upstream with adguardhome using the methods described in their wiki or on the adguardhome dns settings page. Alternatively the first post of this thread shows the supported dns input methods for upstream. For example,

tls://1.1.1.1

Tells the adguardhome to use cloudflare ipv4 upstream for dot.

 

[matssa]

Hey guys, i'm switching from having my AGH on a NUC (next to Home Assistant) on my router in order to gain in performance (and avoid that Internet goes out if my NUC dies out).

I managed to follow the guides and all and I got a working setup. However, when checking the DNS entries, a lot of lines are added and I'm not sure if they are really necessary:

[/router.asus.com/][::]:553
[/www.asusnetwork.net/][::]:553
[/www.asusrouter.com/][::]:553
[/use-application-dns.net/][::]:553
[/dns.resolver.arpa/][::]:553
[/DOMAIN/][::]:553
[//][::]:553
1.0.0.1
8.8.8.8
tcp://1.0.0.1
tcp://8.8.8.8

What do they do? Is it needed to keep them? If I want to add another DNS, should I just add for example 8.8.4.4 and tcp://8.8.4.4?
Other question, should I let it on load-balancing or change it to parallel requests or fastest IP?

Also, the private DNS resolver settings are not the same as the first post:

[::]:553
[/10.in-addr.arpa/][::]:553
[/168.192.in-addr.arpa/][::]:553

Do I need to change them to what is on the first post?


Thanks for your help all!

 

[SomeWhereOverTheRainBow]

Hey guys, i'm switching from having my AGH on a NUC (next to Home Assistant) on my router in order to gain in performance (and avoid that Internet goes out if my NUC dies out).

I managed to follow the guides and all and I got a working setup. However, when checking the DNS entries, a lot of lines are added and I'm not sure if they are really necessary:

[/router.asus.com/][::]:553
[/www.asusnetwork.net/][::]:553
[/www.asusrouter.com/][::]:553
[/use-application-dns.net/][::]:553
[/dns.resolver.arpa/][::]:553
[/DOMAIN/][::]:553
[//][::]:553
1.0.0.1
8.8.8.8
tcp://1.0.0.1
tcp://8.8.8.8

What do they do? Is it needed to keep them? If I want to add another DNS, should I just add for example 8.8.4.4 and tcp://8.8.4.4?
Other question, should I let it on load-balancing or change it to parallel requests or fastest IP?

Also, the private DNS resolver settings are not the same as the first post:

[::]:553
[/10.in-addr.arpa/][::]:553
[/168.192.in-addr.arpa/][::]:553

Do I need to change them to what is on the first post?


Thanks for your help all!

It has changed since the first post. No because it is listening back to dnsmasq for your clients names if you only want to see client ips then you can change them. Also you can change the 9.9.9.9 and 8.8.8.8 to what ever you like. Also you can play around with the fastest and parallel settings it is best to figure out what works for you

 

[matssa]

It has changed since the first post. No because it is listening back to dnsmasq for your clients names if you only want to see client ips then you can change them. Also you can change the 9.9.9.9 and 8.8.8.8 to what ever you like. Also you can play around with the fastest and parallel settings it is best to figure out what works for you

Thanks for the info, I indeed thought it had changed but didn't seem to find it in the thread :S

Does the current settings also check my custom dnsmasq where I tell DomainXXX 192.168.X.X (usefull for Home Assistant)? I added the DNS rewrite but I figure it takes a lot of time :S

Gonna try each settings for about a week and see

I also applied what you said earlier : use host file instead of the filter list + regex filter.

 

[gspannu]

For the simple fact that filters put more strain and potentially block more false positives. Yes I recommend using host format. The only filters I recommend are the mmotti regex filters. Or the small adguardhome filter list.

@SomeWhereOverTheRainBow

Just to be sure....
You are suggesting that using that it is better to use the https://dbl.oisd.nl instead of https://abp.oisd.nl

The https://dbl.oisd.nl contains circa 1,000,000 entries...

 

[SomeWhereOverTheRainBow]

@SomeWhereOverTheRainBow

Just to be sure....
You are suggesting that using that it is better to use the https://dbl.oisd.nl instead of https://abp.oisd.nl

The https://dbl.oisd.nl contains circa 1,000,000 entries...

To be clear, I recommend using dbl full domains list. Despite it having 1.1 mil domains, the 300,000 filters will require alot more processing on the long run than the blocker storing exactly 1.1 million domains in memory.

 

[SomeWhereOverTheRainBow]

Thanks for the info, I indeed thought it had changed but didn't seem to find it in the thread :S

Does the current settings also check my custom dnsmasq where I tell DomainXXX 192.168.X.X (usefull for Home Assistant)? I added the DNS rewrite but I figure it takes a lot of time :S

Gonna try each settings for about a week and see

I also applied what you said earlier : use host file instead of the filter list + regex filter.

To be clear, I recommend using dbl full domains + mmotti regex filters.

 

[gspannu]

To be clear, I recommend using dbl full domains list. Despite it having 1.1 mil domains, the 300,000 filters will require alot more processing on the long run than the blocker storing exactly 1.1 million domains in memory.

Agreed, a memory penalty is better rather than slower processing - especially, as the router is only using 60% memory as of now.