YazFi YazFi Guest Network unable to access Pi-Hole DNS server

[buzzy]

I remembered that I had manually assigned IP address to the devices, so I undid that. On Pi-hole, I changed it to the DNS settings to "Respond Only to WLAN0" and also "Permit all Origins' but no luck with either of them. I have tried using Unbound (installed on Pi-Hole) vs. using Cloudflare, but it has made no difference.

For some reason, when I use my Chromebook on the YazFi network, it gives me the "Sign in to Network" but I don't have a Captive Portal installed as far as I know.

I can get rid of the "Sign in to Network" by disabling the "Force DNS"

 

[bennor]

You appear to be having issues that others, using YazFi, haven't experienced or reported (AFAIK). As prior posts indicate YazFi clients can access internet without having to enable or disable Two Way to Guest and or disable Allow Internet Access in YazFi. Further the Pi Zero W does work wirelessly with YazFi as previously shown. Maybe its time for a hard factory reset and reconfiguration (without importing a saved router.cfg file) if you continue to have these strange issues.

Pi-hole has log entries for my Chromebook when it is connected to my main WIFI AP.

Is your router configured for Wireless Router mode or Access Point (AP) mode? YazFi generally only works when the router is configured for wireless router mode. YazFi does not work with AP or AiMesh nodes or clients connected through those nodes or AP's.
You may want to list your settings outside of YazFi (i.e. post screen shots) as you may have some other setting outside of YazFi causing one or more of your problems.
What firmware version are you running on your router?
How do you have Pi-Hole configured on the router? Did you put the Pi-Hole IP address in the LAN DHCP DNS fields or the WAN DNS fields?
Are you using LAN > DNS Director and or LAN > Route? If so, how is it configured?
How is your Guest Network page configured? Did you inadvertently disable Access Intranet on the Guest Network page? DO NOT change the Guest Network Access Intranet option from Enable. YazFi needs that option set to Enable.
How is your router connected to broadband? Are you using it behind another router?

 

[buzzy]

You appear to be having issues that others, using YazFi, haven't experienced or reported (AFAIK).

Sorry for the late reply. I had a busy last couple days. I got so frustrated, I factory reset my router and manually entered every setting ... and ... I got the exact same error. I eventually figured out the issue. I had set up a firewall on the pi-hole a while back that only allowed the main LAN. The solution was to add the subnets to the pi-hole's firewall.

@bennor Thanks for your patience and willingness to help. Hopefully, someone else can benefit from my mistake.

 

[chutiloco]

Sorry for the late reply. I had a busy last couple days. I got so frustrated, I factory reset my router and manually entered every setting ... and ... I got the exact same error. I eventually figured out the issue. I had set up a firewall on the pi-hole a while back that only allowed the main LAN. The solution was to add the subnets to the pi-hole's firewall.

@bennor Thanks for your patience and willingness to help. Hopefully, someone else can benefit from my mistake.

Thanks God, unknow internet user that come back to write the solution, thanks, thanks. I have been struggling with DNS one week with YazFi and VPN server.

First I set DNSSEC in router with signature check. If date/time isn't correct, signature isn't validated and you haven't DNS resolver. NPT time server syncronization doesn't work because you can resolve DNS, infinite loop. --> Solution is to insert IP number address directly in Administration --> System NTP server and NTP secondary.

Then when a subnet in YazFi in Asus Router 2 was redirect to VPN server in Asus Router 1, if connected by ethernet cable, DNS doesn't work, even blocking all clients with their owns DNS setup. If asus router 2 connected outside my home it worked fine. If traffic was redirected from YasFi to another VPN server different than Asus Router 1, it also work perfectly.

Thanks you comment I realize that Asus Router 1 had firewall enable. No rules were setup by me, but I believe when it's enabled, some default blocking traffic is happening like DNS request that was leaking in first attempt before redirect all to VPN through due loopback and blocked...

Also "Forward local domain queries to upstream DNS" enabled option helped somehow.

I write this comment in case it can help someone in the future. Cheers