DNS intercept/hijacking doesn't seem to be working

I've tried setting up DNS hijacking through these instructions https://openwrt.org/docs/guide-user/services/dns/intercept but it doesn't seem to be working. When I check dnsleaktest com I get the result of Vultr but I setup Adguard DNS in OpenWRT.

Troubleshooting information: https://pastebin.com/Qzbm3xYk

head -n -0 /etc/resolv.* /tmp/resolv.*

What does it say?

==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1

==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1

==> /tmp/resolv.conf.auto <==

Interface lan

nameserver 176.103.130.130
nameserver 176.103.130.131

Interface wan

nameserver 176.103.130.130
nameserver 176.103.130.131

After trying again now it's empty...

Make sure you have disabled ISP DNS:
https://openwrt.org/docs/guide-user/base-system/dhcp_configuration#upstream_dns_provider

Seems to be the same after this.

Probably you should post updated diagnostics:

uci show network; uci show dhcp
head -n -0 /etc/resolv.* /tmp/resolv.*

Here they are

https://pastebin.com/Whwj559p

DNS leak tests show only recursive resolvers.
AdGuard doesn't seem to have their own recursive resolvers, so they forward DNS queries to Vultr.

1 Like

Got it, thanks.

1 Like