AdGuardHome icon indicating copy to clipboard operation
AdGuardHome copied to clipboard

Adguard DNS Rewrites not working as they should. Rewrites being processed by public DNS and not local DNS.

Open SluberskiHomeLab opened this issue 11 months ago • 9 comments

Discussed in https://github.com/AdguardTeam/AdGuardHome/discussions/7601

Originally posted by SluberskiHomeLab January 28, 2025 I have 2 Adguard Home DNS servers setup in LXC containers. About 4-5 months ago, I added DNS rewrites and it was working, but after about a month they have not been resolving locally. I noticed that instead of rewriting to my reverse proxy, the request gets resolved by one of my upstream DNS servers. I've also tried adding my secondary Adguard IP to my upstream with no luck. I've been toying around with this for the past 3-4 months and I'm lost. My rewrite entry is *.slubhome and forwards to my reverse proxy ip address

Here's the result from one of my attempts at accessing my local Adguard sync server (which is in my reverse proxy).

adguard-sync.slubhome

Status - Processed

DNS server - 9.9.9.9:53

Served from cache - [check]

Elapsed - 0.01 ms

Response code - NXDOMAIN

These are my upstream DNS servers:

https://dns10.quad9.net/dns-query

9.9.9.9

1.1.1.1

1.0.0.1

8.8.8.8

I have "Use Private DNS Resolvers" unchecked and "Enable Reverse Resolving of Client's IP Addresses" checked. (I have tried turning both off or both on with no luck.)

Any ideas?

SluberskiHomeLab avatar Jan 28 '25 14:01 SluberskiHomeLab

I also found this issue. And it behaves the same on both devices.

The information is as follows:

Date: February 28, 2025. Version: v0.107.57. CPU type: aarch64_cortex-a53.(Openwrt) and armv7l(ubuntu).

Natramit avatar Feb 28 '25 02:02 Natramit

Same problem. The problem appeared after installing AdGuard-Sync. Haven't found the root cause yet. Working fine before enabling AdGuard-Sync.

Tyler2P avatar Feb 28 '25 21:02 Tyler2P

I'm sorry, I found out that the DNS rewrite feature is under [Filters], I had turned off "Block domains using filters and hosts files" in [General settings]. Turn it on, the DNS rewrite feature works fine.

I'm stupid......

Natramit avatar Mar 02 '25 08:03 Natramit

I'll give that a shot and see.

SluberskiHomeLab avatar Apr 16 '25 12:04 SluberskiHomeLab

Same problem. The problem appeared after installing AdGuard-Sync. Haven't found the root cause yet. Working fine before enabling AdGuard-Sync.

This worked for me, it disabled on a server reboot

danieleof avatar May 07 '25 10:05 danieleof

I disabled adguard sync and it worked. Sad because I really liked that program

SluberskiHomeLab avatar Aug 25 '25 15:08 SluberskiHomeLab

Unfortunately i've forgotten what I did but after playing around with the settings again i got it to work.

I currently have AdGuardHome-Sync working with 2 instances of AdGuard Home. Working flawlessly for several months.

Have a look through your settings to see if anything is disabled

Tyler2P avatar Aug 25 '25 15:08 Tyler2P

@Tyler2P the interesting thing with this is I have many friends who have 2 Adguard instances and Adguard sync who have this working. My settings were identical to theirs except for my internal TLD. I even tried changing the TLD to the same one they had with 0 luck. I've pivoted to not running Adguard for my machines at this point, I've just been using my UniFi Dream Machine Pro for AD blocking and DNS and it's been fine, not as good as Adguard, but fine. I'll probably spin up 2 Adguard LXCs and an Adguard sync container again in the future.

SluberskiHomeLab avatar Sep 03 '25 12:09 SluberskiHomeLab

I've been having this issue, and I realize this thread is old, but here's what I found. I have individual hosts set up - Settings - Client Settings. I had the settings "Use global settings" and "Block domains...." un-checked (turned off). Because of this it was overriding the server settings. I turned back on "Use global settings" and it's now working for my laptop (the machine I've been testing with). I think I had turned that off to stop blocking some sites and apps, which just means I'll have to work harder to unblock the legitimate traffic.

CinciRyan avatar Nov 04 '25 02:11 CinciRyan