had no time to share this with you but ok here an alternative solution, did all thru web ui, go to custom rules> check the filtering>unblock
then search for the site you want to unblock
works fine with me like this
What is the setup for those that are keeping logs? For example:
- Where are you saving your data
- What is your query log rotation length
Today I started saving logs in /root/aghData/. I have the space on the router emmc (~4 GB free), but after a bit of reading, I'm concerned about the flash being burnt out faster than need be and so I am second guessing it.
My router doesn't have a USB port but instead of buying a USB-C hub, I'll try and code around it.
I'm thinking of
- Putting AGH logs back to /var/
- Using scp initially, to copy the logs to my server
- Write a simple script that does rsync if the router's query log is bigger than the server's. Otherwise, if the server's logs are larger, then add a timestamp to the server's logs, and use scp to start a new query.log on the server (with the expectation that a new query log must have been created on the router)
- Set up a .service file to run hourly
But then again, I now realize that ~4GB of eMMC storage is more resilient to writes that previous memory technology, so this might all be a moot point and I can continue to save data on root? My plan was to allow for 90 day logs and then export 4x a year, which works out to ~1GB file size. Should I break this up into monthly/weekly files instead?
Just spitballing here, curious to hear others' opinions.
7 days of statistics and query logs are more than enough. Don't complicate things. Keep it default if possible. On my RPi4 setup logs are written to sdcard
1 Like
eMMC NAND flash is no different to any other NAND flash and it wears out as much as SSD flash, which depends mostly on the type (SLC/MLC/TLC/QLC) and the use pattern. eMMC devices normally do have wear leveling which to some degree prolongs their lifespan. Personally I would avoid using eMMC in this way and I would treat it just like any other built-in router flash, because it is built-in and hard to replace without specialized equipment, and because making many very small writes may accelerate flash wear. Depending on the filesystem you are using, it may or may not cache these many small wrties.
1 Like
One more point on the list of thing not working like wished. 
I do have Adguard installed configured with DoH servers.
DNSSEC is marked, but it is definitely not working. As well I'm not even shure if DNS is finally working over HTTPS. Because on Encryption Settings I get an error when selecting it.
(error: port 443 is not available) edit: DoH upstream is working.
What can I do to make DNSSEC working?
update: it's working now !? 
I did set other bootstrap DNS servers. And it seems like this was it.