OpenWrt AdGuard Home 101 ( DNSMASQ )

peras · May 28, 2022, 12:43am

Remove the "GuestBLOCK" rule from your traffic rules.
What are you using it for?

mercygroundabyss · May 28, 2022, 2:29am

@danluckner you should check what gateway/Dns clients are getting.

But as @peras peras said. that rule needs to go because you are stopping your guest clients from talking to the router. Thus... no connectivity.

danluckner · May 30, 2022, 4:20pm

Guys, it worked, but not because of that rule.
That rule is to prevent guests trying to ssh into the router.

Anyway, what I did is: in the Zones configuration, I had the input as "Accept".

That resolved. I missed that his was "reject" (see below)

Thank you all for the help @mercygroundabyss @peras

mercygroundabyss · May 30, 2022, 5:00pm

By default dropbear (the ssh deamon) only listens on one interface. It is possible to set it to listen on multiple interfaces but there is a bug logged on it.

github.com/openwrt/openwrt

dropbear failed to bind on multiple interfaces

opened 03:47PM - 06 Apr 22 UTC

kouhj

packages

The dropbear has a nice config option to support multiple interfaces, such as: … ``` config dropbear option PasswordAuth 'on' option RootPasswordAuth 'on' list Interface 'lan' list Interface 'lan2' ``` The `service_trigger()` function of `/etc/init.d/dropbear` contains the following snippet to monitor mulitple interfaces parsed from config: ``` [ -n "${interfaces}" ] && { for n in $interfaces ; do procd_add_interface_trigger "interface.*" $n /etc/init.d/dropbear reload done } ``` And the code below in `/etc/init.d/dropbear` seems to try to load all the IP addresses of all the interfaces, however it will fail with error message `interface lan lan2 has no physdev or physdev has no suitable ip` ``` dropbear_instance() { local ipaddrs [ "$2" = 0 ] || { echo "validation failed" return 1 } [ -n "${Interface}" ] && { [ -n "${BOOT}" ] && return 0 network_get_ipaddrs_all ipaddrs "${Interface}" || { echo "interface ${Interface} has no physdev or physdev has no suitable ip" return 1 } } ... ``` It seems that `network_get_ipaddrs_all ()` only supports one interface at a time. So the patch to this issue could be looping through all the interfaces: ``` --- /etc/init.d/dropbear.orig +++ /etc/init.d/dropbear.new @@ -134,7 +134,7 @@ dropbear_instance() { - local ipaddrs + local ipaddrs if_ipaddrs [ "$2" = 0 ] || { echo "validation failed" @@ -144,10 +144,13 @@ [ -n "${Interface}" ] && { [ -n "${BOOT}" ] && return 0 - network_get_ipaddrs_all ipaddrs "${Interface}" || { - echo "interface ${Interface} has no physdev or physdev has no suitable ip" - return 1 - } + for n in ${Interface}; do + network_get_ipaddrs_all if_ipaddrs $n || { + echo "interface $n has no physdev or physdev has no suitable ip" + return 1 + } + ipaddrs="$ipaddrs $if_ipaddrs" + done } [ "${enable}" = "0" ] && return 1 ```

You can also stop luci listening on the guest interface too. No need for blocking rules then. The services are just not available to guests at all.

kuriSu-kUN · July 16, 2022, 8:36am

Hi,
I was playing around with AdGuard Home on OpenWRT and I think I've managed to make the update through WebGUI work again.
I didn't search the entire thread so sorry if this is already been described in another comment , but since I haven't found it as a solution at the OP, I'm posting it here...

@directnupe I've noticed something.

At first I thought I've installed the edge version but I think I actually installed the beta because I choose it from here and the update was working as expected.
Then I've changed to the edge release and I couldn't update automatically through the web interface.
Since I kept backup from the beta folder, I compared the two AdGuardHome.yaml files, the one from beta and the one from Edge, and I've noticed that even if the installation and configuration procedure was the same. At the Edge version of .yaml file first line, instead of being ex: bind_host: 192.168.1.1
it was bind_host: 0.0.0.0
I've replace the zeros with the actual IP and boom! Update is working as expected.

I hope this will work to the rest of you...

directnupe · July 16, 2022, 2:03pm

Dear kuriSu-kUN,
Hello and I hope that your are both and safe. I will follow your instructions and report back. Thanks for noticing this.
Peace

Jhunboss · October 13, 2022, 9:38pm

HI @directnupe.

Thank you for your comprehensive tutorial.
I have the number of DNS Queries and Blocked by Filters queries increasing on my dashboard but I don't feel that the ads are blocked.

What information from AGH and/or my router should I share to hope help? thank you!

AashishAS · November 1, 2022, 6:53am

Do an adblocker test on browser.

anon4457646 · November 15, 2022, 6:42pm

i feel that too, ads sometime are blocked sometime not .
if you do a test on https://d3ward.github.io, you ll see on every test that the ads blocked are less, less,less, from 100/100 to 10/100

Jhunboss · November 21, 2022, 8:52pm

Thank you for your answers. I forgot to disable DoH configuration on Windows 11 and on my browsers. Everything is working perfectly now.