AdGuardHome AGH not working on new firmware 3006

[Kingp1n]

@Kingp1n Are You ready to test AGH on your Asus GT-AX11000 Pro with the latest firmware? .... This is the way.

I should be able to try this weekend. Would disabling Diversion be enough to test or do I need to uninstall it to minimize any issues?

 

[SomeWhereOverTheRainBow]

I should be able to try this weekend. Would disabling Diversion be enough to test or do I need to uninstall it to minimize any issues?

you should be able to disable it. My script does not do anything to prevent users from having a disable diversion (or diversion in general). I wouldn't do @thelonelycoder such disservice.

 

[Syl]

Hello, new to this forum but i've been using AMTM Adguard Home for multiple years now. It's only recently that i've been getting issues so i've been following this thread. I was getting a peculiar situation where Adguard Home would run and I could access the webui, but I couldn't access AGH through the AMTM menu - It would error out with the rate limit message mentioned before. As such I've been stuck using 1.7.7 and v0.107.62

I was finally able to access the terminal menu for AGH via

 curl -L -s -O https://raw.githubusercontent.com/jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer/master/installer && sh installer; rm installer

However, once I accessed that menu and (successfully) updated to 1.9.0 it gave me this message:

*** Error:  Couldn't start AdGuardHome!
 *** Error:  Please send WebUI System Log to dev.
 Info:  Operation aborted, returning to Main Menu. You can quit or continue.
=====================================================
One or more critical variables could not be set in a timely manner.
It is possible we have hit the github api ratelimit (60req./hr), and our token work around did not work (5000req./hr).
For more information, please read /tmp/1482845_headers.out.
Please be sure to check your internet connection, and please try again later.
The installer script will now exit.

Oh, huh, nvm, despite that error it appears that I can access AG via terminal now through AMTM. So, I guess. uhhh.. Thanks! Problem solved! Guess I'm just another data point about the fix working now!

Oh yeah, i'm running a GT-AXE16000 if that helps.

 

[Viktor Jaep]

there is more to come. I could definitely use more testers on the newer "3006" firmware though, but I do appreciate all of those who have been helping! Thank you @dave14305, and @Viktor Jaep

Wish I could say I was, but I'm not in this test pool unfortunately, @SomeWhereOverTheRainBow... Hope you all knock those bugs out!

 

[saison2023]

you are welcome to try v1.9.0

I upgraded AGH using command line, update process went very until the final service validation step which failed. Maybe the timeout was too short to let my router restart everything.
When installer exited, I also receive error message like others regarding api rate limitation and critical prerequisite(s) not meet.
But despite all these errors, after some time I was ableto validate that AGH has been updated to latest version (1.9..0) and was running.
Checking in AMTM with "u" command also displayed correct version.

 

[SomeWhereOverTheRainBow]

Wish I could say I was, but I'm not in this test pool unfortunately, @SomeWhereOverTheRainBow... Hope you all knock those bugs out!

Nonsense, you are welcome in all the test pools! Thanks buddy.

 

[SomeWhereOverTheRainBow]

I upgraded AGH using command line, update process went very until the final service validation step which failed. Maybe the timeout was too short to let my router restart everything.
When installer exited, I also receive error message like others regarding api rate limitation and critical prerequisite(s) not meet.
But despite all these errors, after some time I was ableto validate that AGH has been updated to latest version (1.9..0) and was running.
Checking in AMTM with "u" command also displayed correct version.

Yea, ignore the errors. It is so many changes, it is literally making the installers and @Viktor Jaep head spin. As long as everything works, and you didnt become the next kamikazi crash dummy, you can safely ignore the errors.

 

[bluzfanmr1]

you are welcome to try v1.9.0

After upgrading via amtm to 1.9.0 it works! Sorry I had family stuff and was just able to try it. Thanks for this tool, your patience, and thanks for all your help, it's greatly appreciated!

 

[SomeWhereOverTheRainBow]

Oh yeah, i'm running a GT-AXE16000 if that helps.

Are You on the latest "3006" firmware? Also, can you run some tests for me? check the functionality with a Guestnetwork Pro network, and also let me know some file outputs from cat /etc/dnsmasq-*.conf

 

[SomeWhereOverTheRainBow]

After upgrading via amtm to 1.9.0 it works! Sorry I had family stuff and was just able to try it. Thanks for this tool, your patience, and thanks for all your help, it's greatly appreciated!

Well now that i have refined it to a point where it works there may be some additional features on the horizons for users and their guest networks. When that time comes, i will be knowing who to get good feedback from. Count your self as apart of that group of lucky individuals .

 

[bluzfanmr1]

Well now that i have refined it to a point where it works there may be some additional features on the horizons for users and their guest networks. When that time comes, i will be knowing who to get good feedback from. Count your self as apart of that group of lucky individuals .

I'm honored to interact with such a great group!

 

[bluzfanmr1]

I just noticed another issue that isn't a big deal for me but may pop up for someone else. And maybe this isn't an AGH issue but if I assign a specific DNS server to a Guest Network, it isn't respecting that choice and still sends everything to AGH. Thought I'd point it out in case it pops up in the future.

These settings are when I have the Guest Network assigned to ControlD DNS:

admin@GT-AX6000:/tmp/home/root# netstat -nlp | grep "dnsmasq"
tcp        0      0 192.168.52.1:553        0.0.0.0:*               LISTEN      31712/dnsmasq
tcp        0      0 127.0.0.1:553           0.0.0.0:*               LISTEN      31559/dnsmasq
tcp        0      0 10.1.1.1:553            0.0.0.0:*               LISTEN      31559/dnsmasq
tcp        0      0 10.6.0.1:553            0.0.0.0:*               LISTEN      31559/dnsmasq
tcp        0      0 10.8.0.1:553            0.0.0.0:*               LISTEN      31559/dnsmasq
udp        0      0 192.168.52.1:553        0.0.0.0:*                           31712/dnsmasq
udp        0      0 127.0.0.1:553           0.0.0.0:*                           31559/dnsmasq
udp        0      0 10.1.1.1:553            0.0.0.0:*                           31559/dnsmasq
udp        0      0 10.6.0.1:553            0.0.0.0:*                           31559/dnsmasq
udp        0      0 10.8.0.1:553            0.0.0.0:*                           31559/dnsmasq
udp        0      0 0.0.0.0:67              0.0.0.0:*                           31712/dnsmasq
udp        0      0 0.0.0.0:67              0.0.0.0:*                           31559/dnsmasq

admin@GT-AX6000:/tmp/home/root# cat /etc/dnsmasq.conf
pid-file=/var/run/dnsmasq.pid
user=nobody
bind-dynamic
interface=br0
interface=pptp*
no-dhcp-interface=pptp*
no-resolv
no-poll
no-negcache
cache-size=0
min-port=4096
dns-forward-max=1500
domain=lan
expand-hosts
bogus-priv
domain-needed
local=/lan/
dhcp-range=lan,10.1.1.10,10.1.1.190,255.255.255.0,43200s
dhcp-option=lan,3,10.1.1.1
dhcp-option=lan,15,lan
dhcp-option=lan,252,"\n"
dhcp-option=lan,42,0.0.0.0
dhcp-authoritative
interface=tun21
no-dhcp-interface=tun22
no-dhcp-interface=tun23
interface=wgs1
no-dhcp-interface=wgs1
dhcp-host=multiple entries here
quiet-dhcp
quiet-dhcp6
address=/use-application-dns.net/
address=/_dns.resolver.arpa/
address=/mask.icloud.com/mask-h2.icloud.com/
dhcp-name-match=set:wpad-ignore,wpad
dhcp-ignore-names=tag:wpad-ignore
dhcp-script=/sbin/dhcpc_lease
script-arp
edns-packet-max=1232
port=553
local=/1.10.in-addr.arpa/
local=/10.in-addr.arpa/
local=//
dhcp-option=lan,6,0.0.0.0
add-mac
add-subnet=32
server=127.0.0.1#53535

admin@GT-AX6000:/tmp/home/root# cat /etc/dnsmasq-1.conf
pid-file=/var/run/dnsmasq-1.pid
user=nobody
bind-interfaces
listen-address=192.168.52.1
no-resolv
servers-file=/tmp/resolv.dnsmasq
no-poll
no-negcache
cache-size=1500
min-port=4096
dhcp-authoritative
dhcp-range=br52,192.168.52.1,192.168.52.254,255.255.255.0,86400s
dhcp-option=br52,3,192.168.52.1
dns-forward-max=1500
bogus-priv
domain-needed
address=/use-application-dns.net/
address=/_dns.resolver.arpa/
address=/mask.icloud.com/mask-h2.icloud.com/
dhcp-name-match=set:wpad-ignore,wpad
dhcp-ignore-names=tag:wpad-ignore
dhcp-script=/sbin/dhcpc_lease
dhcp-leasefile=/var/lib/misc/dnsmasq-1.leases
script-arp
quiet-dhcp
quiet-dhcp6
add-subnet=32
port=553
add-mac
dhcp-option=br52,6,192.168.52.1

 

[SomeWhereOverTheRainBow]

I just noticed another issue that isn't a big deal for me but may pop up for someone else. And maybe this isn't an AGH issue but if I assign a specific DNS server to a Guest Network, it isn't respecting that choice and still sends everything to AGH. Thought I'd point it out in case it pops up in the future.

These settings are when I have the Guest Network assigned to ControlD DNS:

admin@GT-AX6000:/tmp/home/root# netstat -nlp | grep "dnsmasq"
tcp        0      0 192.168.52.1:553        0.0.0.0:*               LISTEN      31712/dnsmasq
tcp        0      0 127.0.0.1:553           0.0.0.0:*               LISTEN      31559/dnsmasq
tcp        0      0 10.1.1.1:553            0.0.0.0:*               LISTEN      31559/dnsmasq
tcp        0      0 10.6.0.1:553            0.0.0.0:*               LISTEN      31559/dnsmasq
tcp        0      0 10.8.0.1:553            0.0.0.0:*               LISTEN      31559/dnsmasq
udp        0      0 192.168.52.1:553        0.0.0.0:*                           31712/dnsmasq
udp        0      0 127.0.0.1:553           0.0.0.0:*                           31559/dnsmasq
udp        0      0 10.1.1.1:553            0.0.0.0:*                           31559/dnsmasq
udp        0      0 10.6.0.1:553            0.0.0.0:*                           31559/dnsmasq
udp        0      0 10.8.0.1:553            0.0.0.0:*                           31559/dnsmasq
udp        0      0 0.0.0.0:67              0.0.0.0:*                           31712/dnsmasq
udp        0      0 0.0.0.0:67              0.0.0.0:*                           31559/dnsmasq

admin@GT-AX6000:/tmp/home/root# cat /etc/dnsmasq.conf
pid-file=/var/run/dnsmasq.pid
user=nobody
bind-dynamic
interface=br0
interface=pptp*
no-dhcp-interface=pptp*
no-resolv
no-poll
no-negcache
cache-size=0
min-port=4096
dns-forward-max=1500
domain=lan
expand-hosts
bogus-priv
domain-needed
local=/lan/
dhcp-range=lan,10.1.1.10,10.1.1.190,255.255.255.0,43200s
dhcp-option=lan,3,10.1.1.1
dhcp-option=lan,15,lan
dhcp-option=lan,252,"\n"
dhcp-option=lan,42,0.0.0.0
dhcp-authoritative
interface=tun21
no-dhcp-interface=tun22
no-dhcp-interface=tun23
interface=wgs1
no-dhcp-interface=wgs1
dhcp-host=multiple entries here
quiet-dhcp
quiet-dhcp6
address=/use-application-dns.net/
address=/_dns.resolver.arpa/
address=/mask.icloud.com/mask-h2.icloud.com/
dhcp-name-match=set:wpad-ignore,wpad
dhcp-ignore-names=tag:wpad-ignore
dhcp-script=/sbin/dhcpc_lease
script-arp
edns-packet-max=1232
port=553
local=/1.10.in-addr.arpa/
local=/10.in-addr.arpa/
local=//
dhcp-option=lan,6,0.0.0.0
add-mac
add-subnet=32
server=127.0.0.1#53535

admin@GT-AX6000:/tmp/home/root# cat /etc/dnsmasq-1.conf
pid-file=/var/run/dnsmasq-1.pid
user=nobody
bind-interfaces
listen-address=192.168.52.1
no-resolv
servers-file=/tmp/resolv.dnsmasq
no-poll
no-negcache
cache-size=1500
min-port=4096
dhcp-authoritative
dhcp-range=br52,192.168.52.1,192.168.52.254,255.255.255.0,86400s
dhcp-option=br52,3,192.168.52.1
dns-forward-max=1500
bogus-priv
domain-needed
address=/use-application-dns.net/
address=/_dns.resolver.arpa/
address=/mask.icloud.com/mask-h2.icloud.com/
dhcp-name-match=set:wpad-ignore,wpad
dhcp-ignore-names=tag:wpad-ignore
dhcp-script=/sbin/dhcpc_lease
dhcp-leasefile=/var/lib/misc/dnsmasq-1.leases
script-arp
quiet-dhcp
quiet-dhcp6
add-subnet=32
port=553
add-mac
dhcp-option=br52,6,192.168.52.1

Yep thats a default behavior for now because i had a tester earlier saying they were using their AGH and the whole time they actually had a different adblock dns address plugged into their guest network which they assumed was using AGH since ads were being blocked. I will later create a question inside the installer which will create away for users to overide this behavior using a .config file.

 

[Syl]

Are You on the latest "3006" firmware? Also, can you run some tests for me? check the functionality with a Guestnetwork Pro network, and also let me know some file outputs from cat /etc/dnsmasq-*.conf

I actually have never used the Guest Network Pro, so I don't know if i'd be too much help there. Because my main router and my two nodes all have different WiFi capabilities I've just been letting the router handle it on default with roaming, which is stable for my network of 60+ IOT devices across both 2.4 and 5ghz and I'm afraid to mess with it after all the trouble I've had in the past. I might be able to look into it at some crazy weird hour of the night when my network isn't being relied upon for WFH.

I will gladly provide the second one, but I'd need a stronger direction on how to access it. I'm really not that good with terminal stuff.

 

[SomeWhereOverTheRainBow]

@bluzfanmr1 can you tell me the output you get for nvram show | grep 'lan1'

 

[Kingp1n]

Would the best way to install AGH for testing be directly thru AMTM or would you recommend using the curl command that I previously saw here? It will be for an initial install of AGH and I do have Guest Network enabled. This is only option I use under Guest Network Pro.

 

[SomeWhereOverTheRainBow]

Would the best way to install AGH for testing be directly thru AMTM or would you recommend using the curl command that I previously saw here? It will be for an initial install of AGH and I do have Guest Network enabled. This is only option I use under Guest

If you dont have a really old version of AGH installed, then you should be okay to use "ag" from amtm. Other wise, you should use the curl command instead. As for your enabled guest network, if it is one that uses dhcp, it should get work with AGH.

 

[bluzfanmr1]

@bluzfanmr1 can you tell me the output you get for nvram show | grep 'lan1'

admin@GT-AX6000:/tmp/home/root# nvram show | grep 'lan1'
lan1_domain=
lan1_gateway=192.168.2.1
lan1_hwaddr=
lan1_hwnames=
lan1_ifname=br52
lan1_ifnames=wl0.1 eth1.52 eth2.52 eth3.52 eth4.52 eth5.52 eth6.52 eth7.52
lan1_ipaddr=192.168.2.1
lan1_lease=86400
lan1_netmask=255.255.255.0
lan1_proto=0
lan1_route=
lan1_stp=1
lan1_wins=
lan1_wps_oob=enabled
lan1_wps_reg=enabled
led_lan1_gpio=255
size: 100407 bytes (96201 left)

 

[SomeWhereOverTheRainBow]

admin@GT-AX6000:/tmp/home/root# nvram show | grep 'lan1'
lan1_domain=
lan1_gateway=192.168.2.1
lan1_hwaddr=
lan1_hwnames=
lan1_ifname=br52
lan1_ifnames=wl0.1 eth1.52 eth2.52 eth3.52 eth4.52 eth5.52 eth6.52 eth7.52
lan1_ipaddr=192.168.2.1
lan1_lease=86400
lan1_netmask=255.255.255.0
lan1_proto=0
lan1_route=
lan1_stp=1
lan1_wins=
lan1_wps_oob=enabled
lan1_wps_reg=enabled
led_lan1_gpio=255
size: 100407 bytes (96201 left)

Yep, there are a few variables that populate when you create a Guestnetwork on the Guest Networks Pro.
These are an example of some of the ones that populate:

apg_br51_fh_ethifnames=eth0.51 eth1.51 eth2.51 eth3.51 eth4.51 eth5.51
apg_br51_fh_wlifnames=eth6.51 eth7.51
apg_br_info=<51>br51>
apg_ifnames=br51
br1_ifname=br51
br1_ifnames=wl0.1 wl1.1 eth0.51 eth1.51 eth2.51 eth3.51 eth4.51 eth5.51 eth6.51 eth7.51
lan1_domain=
lan1_gateway=192.168.2.1
lan1_hwaddr=
lan1_hwnames=
lan1_ifname=br51
lan1_ifnames=wl0.1 wl1.1 eth0.51 eth1.51 eth2.51 eth3.51 eth4.51 eth5.51 eth6.51 eth7.51
lan1_ipaddr=192.168.2.1
lan1_lease=86400
lan1_netmask=255.255.255.0
lan1_proto=0
lan1_route=
lan1_stp=1
lan1_wins=
lan1_wps_oob=enabled
lan1_wps_reg=enabled
led_lan1_gpio=255

the "1" after the lan and br tells you what instance it is -a.k.a the networks position on the Guest Network position list. The 51 is the VLAN ID which is also adapted to be apart of the interface names. I am still working on figuring out the rest of the nvram variables. Maybe I can put @Viktor Jaep (who is beyond your average detective) on the case.

 

[Kingp1n]

Yep, there are a few variables that populate when you create a Guestnetwork on the Guest Networks Pro.
These are an example of some of the ones that populate:

apg_br51_fh_ethifnames=eth0.51 eth1.51 eth2.51 eth3.51 eth4.51 eth5.51
apg_br51_fh_wlifnames=eth6.51 eth7.51
apg_br_info=<51>br51>
apg_ifnames=br51
br1_ifname=br51
br1_ifnames=wl0.1 wl1.1 eth0.51 eth1.51 eth2.51 eth3.51 eth4.51 eth5.51 eth6.51 eth7.51
lan1_domain=
lan1_gateway=192.168.2.1
lan1_hwaddr=
lan1_hwnames=
lan1_ifname=br51
lan1_ifnames=wl0.1 wl1.1 eth0.51 eth1.51 eth2.51 eth3.51 eth4.51 eth5.51 eth6.51 eth7.51
lan1_ipaddr=192.168.2.1
lan1_lease=86400
lan1_netmask=255.255.255.0
lan1_proto=0
lan1_route=
lan1_stp=1
lan1_wins=
lan1_wps_oob=enabled
lan1_wps_reg=enabled
led_lan1_gpio=255

the "1" after the lan and br tells you what instance it is -a.k.a the networks position on the Guest Network position list. The 51 is the VLAN ID which is also adapted to be apart of the interface names. I am still working on figuring out the rest of the nvram variables. Maybe I can put @Viktor Jaep (who is beyond your average detective) on the case.

This is what get now even before installing AGH:

ASUSWRT-Merlin GT-AX11000_PRO 3006.102.4_0 Sat May 10 15:59:43 UTC 2025
Xxxx@GT-AX11000_Pro-xxxx:/tmp/home/root# nvram show | grep 'lan1'
lan1_domain=
lan1_gateway=192.168.2.1
lan1_hwaddr=
lan1_hwnames=
lan1_ifname=br52
lan1_ifnames=wl0.1 wl1.1 eth1.52 eth2.52 eth3.52 eth4.52 eth5.52 eth6.52 eth7.52 eth8.52
lan1_ipaddr=192.168.2.1
lan1_lease=86400
lan1_netmask=255.255.255.0
lan1_proto=0
lan1_route=
lan1_stp=1
lan1_wins=
lan1_wps_oob=enabled
lan1_wps_reg=enabled
led_lan1_gpio=255
size: 129972 bytes (66636 left)
Xxxxxxx@GT-AX11000_Pro-xxxx:/tmp/home/root#