DomainVPNRouting Domain VPN Routing v3.2.2 ***Release***

[Ranger802004]

@Ranger802004, Do you have particular recommendations for this option in

Spoiler: Tools -> Other Settings

View attachment 65906

?Does this setting make any difference in your script given the frequency of lookups?

No I don't believe so

 

[amplatfus]

Hi,
Could you please confirm that Domain VPN Routing works well with Unbound installed?

Thank you,
amplatfus

 

[Ranger802004]

***v3.2.2-beta1 has been released to the beta update channel***

Release Notes:
v3.2.2-beta1 - 06/18/2025
Fixes:
- Fixed state_desc error in generateinterfacelist function.
- Fixed Major Version reported
- Added retry loop for query ASN with delay on additional attempts.
- Reverse Path Filtering configuration has been updated to properly set for all WAN interfaces regardless if policy for interface exists.
- Added logic to save over blank IPSet files

 

[Ranger802004]

Hi,
Could you please confirm that Domain VPN Routing works well with Unbound installed?

Thank you,
amplatfus

I am not sure if it's been testing by any user but if you want to test and provide feedback I'll surely take a look.

 

[Aiadi]

@Ranger802004 , I am struggling to get the script to work with the latest AsusMerlin firmware 3006_102.5_0 on my RT-BE88U despite fresh installs of both firmware and script and also trying the latest beta of the script to no avail. Below is the error I am getting as soon as I try and create a policy. Any idea on where I am going wrong here? Thanks again for your help.

 

[Ranger802004]

***v3.2.2 has been released to the production channel***

Release Notes:
v3.2.2 - 08/06/2025
Fixes:
- Fixed state_desc error in generateinterfacelist function.
- Fixed Major Version reported
- Added retry loop for query ASN with delay on additional attempts.
- Reverse Path Filtering configuration has been updated to properly set for all WAN interfaces regardless if policy for interface exists.
- Added logic to save over blank IPSet files

 

[Aiadi]

***v3.2.2 has been released to the production channel***

Release Notes:
v3.2.2 - 08/06/2025
Fixes:
- Fixed state_desc error in generateinterfacelist function.
- Fixed Major Version reported
- Added retry loop for query ASN with delay on additional attempts.
- Reverse Path Filtering configuration has been updated to properly set for all WAN interfaces regardless if policy for interface exists.
- Added logic to save over blank IPSet files

Thank you for the timely update. I cannot seem to update from the latest beta version to this one nor can I uninstall the previous version of the script to be able to install the new one. Any help would be greatly appreciated.

 

[Ranger802004]

Thank you for the timely update. I cannot seem to update from the latest beta version to this one nor can I uninstall the previous version of the script to be able to install the new one. Any help would be greatly appreciated.

Open an issue on GitHub.

 

[Aiadi]

Thank you again @Ranger802004 . Managed to install latest update after a full reset of AMTM and deleting all scripts. Able to create policies with no problems but the previously perfectly working policy of directing my wireguard clients via WAN (IP: 10.6.0.0/24) is broken on the latest Merlin firmware 3006.102.5 and I am fairly certain that this is a firmware issue as the script used to work perfectly well on prior versions and something must have changed in the newest version of the firmware to break this functionality.

 

[Ranger802004]

***v3.2.3-beta1 has been released to the beta channel***

Release Notes:
v3.2.3-beta1 - 08/20/2025
Enhancements:
- Added a prompt to ask if running instances of Domain VPN Routing should be killed before an update takes place.
- Added alternative detection of Entware being installed.

Fixes:
- Fixed issue where some update processes would not clean up the lock file.

 

[Ranger802004]

***v3.2.3-beta2 has been released to the beta channel***

Release Notes:
v3.2.3-beta2 - 08/28/2025
Enhancements:
- Added a prompt to ask if running instances of Domain VPN Routing should be killed before an update takes place.
- Added alternative detection of Entware being installed.

Fixes:
- Fixed issue where some update processes would not clean up the lock file.
- Fixed issue with properly setting reverse path filter for WAN interface in Single WAN mode.

 

[postoronnim-v]

Tell me, what can be done to make Domain VPN Routing work when AiProtection is enabled? When AiProtection is enabled, everything works until the router is rebooted (RT-BE88U 3006.102.5)

 

[HKEPC]

@Ranger802004

After installing the Domain VPN Routing plugin, it’s truly amazing and very useful. Thank you for your effort.


I have a question I’d like to ask. Since TikTok has regional restrictions and uses DNS Geo, I encounter a DNS leak issue when using this plugin. Although my IP is already routed to Taiwan through the VPN, the DNS still shows as Hong Kong. Is there any configuration to resolve the DNS leak issue?

 

[Tarek Yag]

Is there any configuration to resolve the DNS leak issue?

What's the value of your VPN Client configuration option "Accept DNS Configuration"?
Make sure you provide this value from the same VPN client you're using in the script for that domain.

I believe this issue is caused by your VPN Client configuration not the DomainVPNRouting script.
The option should be "Exclusive" to always use the DNS of your selected VPN location exclusively, which prevents using your WAN's DNS servers.

 

[HKEPC]

What's the value of your VPN Client configuration option "Accept DNS Configuration"?
Make sure you provide this value from the same VPN client you're using in the script for that domain.

I believe this issue is caused by your VPN Client configuration not the DomainVPNRouting script.
The option should be "Exclusive" to always use the DNS of your selected VPN location exclusively, which prevents using your WAN's DNS servers.

I can't see "Accept DNS Configuration" in WireGuard Client

 

[Tarek Yag]

I can't see "Accept DNS Configuration" in WireGuard Client

This option is available for OpenVPN clients and I use it in my setup (see attachment). Now I guess it's a bit different for WireGuard clients.

I can't help anymore as I don't have WireGuard feature in my own router. We need this to be answered by other members or the script owner. I'm interested in getting to know the solution for future usage.

 

[HKEPC]

even in OpenVPN , I set itg to Exclusive but

This option is available for OpenVPN clients and I use it in my setup (see attachment). Now I guess it's a bit different for WireGuard clients.

I can't help anymore as I don't have WireGuard feature in my own router. We need this to be answered by other members or the script owner. I'm interested in getting to know the solution for future usage.

Thanks for your reply , even I set "Exclusive" in OpenVPN client , it still leak my DNS Geo info , you can try in ip-api.com

 

[Tarek Yag]

even I set "Exclusive" in OpenVPN client , it still leak my DNS Geo info

If you have just setup your VPN using an OpenVPN client instead of a WireGuard client, you need to update the interface used into the Policy which has your desired domains inside DomainVPNRouting script.
So, now make sure you're using the OpenVPN interface you just setup, into the DomainVPNRouting's policy you're using for TikTok domain(s).

 

[HKEPC]

If you have just setup your VPN using an OpenVPN client instead of a WireGuard client, you need to update the interface used into the Policy which has your desired domains inside DomainVPNRouting script.
So, now make sure you're using the OpenVPN interface you just setup, into the DomainVPNRouting's policy you're using for TikTok domain(s).

Can u teach me how to do it ?

 

[HKEPC]

How about DNS Setting ? Can I fix DNS Geo Leak ?