I'm looking through the AGH Configuration Guide (https://github.com/AdguardTeam/Adguardhome/wiki/Configuration). I don't see the options you are trying to add. You added parallel_upstream_queries_enabled. The closest I can find is upstream_mode parallel. Since AGH can apparently edit its own...
What does ./AdGuardHome --check-config -c /opt/etc/AdGuardHome/AdGuardHome.yaml output? Oddly, I put some different bogus tags in there to see what it would do, and it still said the config was OK so I didn't find out what would happen if it reported it was bad. Did you install AGH via the...
I recall AGH running AdGuardHome --check-config somewhere. I've never had any problems with it so I've never explored it, but maybe that removes offending lines? I will say I don't have any of the tags you are trying to add, so are you sure those are correct and/or in the right place? If you...
When I've made changes in /opt/etc/AdGuardHome/AdGuardHome.yaml, my settings have remained after router reboots and/or AdGuardHome restarts. Only the installer makes changes to the yaml file I believe. Does the AdGuardHome executable ever change its own yaml file? I guess if you chmod a-rwx...
@ColinTaylor you motivated me to "factory" reset and start from scratch. I setup a basic setup, added AGH, and slowly tried to remember all my previous settings and put them in. I kept running nslookup google.com. 8.8.8.8 after every setting change to see what broke it. Most things didn't...
Well, I've spent a lot of time on this and not where I wanted to get it, but I'm going to put this on the back burner for a while. My temporary solution is to add a iptables rule:
iptables -t nat -A DNSFILTER -s 192.168.2.0/24 ! -d 192.168.2.0/24 -i br0 -j DNAT --to-destination 192.168.2.6
This...
@bennor Sorry, I haven't had custom or modified iptables rules in the previously posted materials. The first post was entirely AGH with the pihole server on but not involved in any DNS traffic. The last post I removed AGH from the situation for my client and used pihole. I was just trying to...
@ColinTaylor I agree with your comments, and yes the 2 second timeout is just because it's just waiting for a "valid" reply and doesn't get it. I'm not sure I agree that the AGH is reponsible, but it could be the related like iptables rules that need to be correct. At least that's my current...
Thanks Dave and Colin for the replies. Colin, if the DNS reply comes from a different address than the query was sent to, I think it needs to be rejected because otherwise it would be super easy to poison DNS. Dave, your tcpdump looks like I'd expect, so I think I'm not insane. I've added LOG...
I've recently put Merlin (3006.102.6) on my RT-BE92U router with AdGuardHome running locally via amtm. Thanks to all for the great product. I have the main network at 192.168.2.0/24 and 2 other isolated networks on 192.168.52/24 and 192.168.53.0/24 for IoT and guests. Everything is working...