I have an openwrt v24.10 setup running on a Ubiquiti ER-X router.
I have a number of VLANs running. Until very recently, one of those VLANs had a raspberry pi running pihole in it. That was my DNS server. To reduce dependence on the pi, I decided I would try to install adguardhome.
I have done that now.
I set AGH to listen on 0.0.0.0 port 53.
dns:
bind_hosts:
- 0.0.0.0
port: 53
I have moved dnsmasq to port 54.
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option cachesize '500'
option authoritative '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option localservice '0'
option ednspacket_max '1232'
option port '54'
Clients in each VLAN are given 192.168.x.1 as their DNS server, through option 6 in the DHCP settings.
config dhcp 'PIGEON_VLAN'
option interface 'PIGEON_VLAN'
option start '2'
option limit '211'
option leasetime '12h'
option domain 'lan'
list dhcp_option '6,192.168.76.1'
config dhcp 'IOT_VLAN'
option interface 'IOT_VLAN'
option start '2'
option limit '249'
option leasetime '12h'
option domain 'lan'
list dhcp_option '6,192.168.20.1'
Devices in each VLAN are using AGH for DNS queries and can access the internet fine.
HOWEVER, something seems to have gone wrong with inter-VLAN traffic. Previously devices in the PIGEON VLAN could ping and access devices in the IOT VLAN. Forwarding for this is defined in firewall thus:
config forwarding
option src 'PIGEON_ZONE'
option dest 'IOT_ZONE'
I also have these traffic rules:
config rule
option name 'Allow-Ping'
option family 'ipv4'
list proto 'icmp'
option src '*'
option target 'ACCEPT'
option dest '*'
config rule
option name 'Allow-DNS/DHCP-PIGEON'
option family 'ipv4'
option src 'PIGEON_ZONE'
option dest_port '53 67 68'
option target 'ACCEPT'
config rule
option name 'Allow-DNS/DHCP-IOT'
option family 'ipv4'
option src 'IOT_ZONE'
option dest_port '53 67 68'
option target 'ACCEPT'
But since installing AGH, I can't ping anything in IOT from PIGEON, and, for the devices in IOT which offer webpages, I can't view those from PIGEON either.
If I SSH into the router and ping devices in IOT, that works fine.
Is there something about AGH which affects inter-VLAN traffic? This was all working fine before AGH was installed.
Many thanks