Messages

1

Documentation and Translation / Re: AdGuard Home setup guide

« on: July 08, 2024, 12:46:52 pm »

However, I could not figure out how to do this so I'm not sure if this is the solution for the issues I'm facing.

Disclaimer: I do not have dual WAN, so my expertise here is limited.

the default pass all out rule in your firewall is going to have "LAN net" as source and "*" as destination. The above post says, you must change that to point to your dual WAN gateway.

Secondly, (actually, firstly, before the step above) you need LAN rules to allow from "LAN net" to "this firewall" ports 443, 3000, 22, etc.

Finally, a question: is Dual WAN working properly without AdGuard Home? Because if not, it has little to do with AdGuard Home then I guess.

Thank you for these suggestions! I will try them and report back. Dual-WAN without AdGuard is working properly, so it's only when AdGuard is installed, that I start facing issues.

2

Documentation and Translation / Re: AdGuard Home setup guide

« on: July 08, 2024, 09:08:33 am »

Hey everyone, thanks for this detailed thread and all the solutions that have been mentioned.

I'm new to OPNsense and while I am well-versed in consumer-grade routers/AdGuard Home, I'm not great with advanced networking. Due to this, I'm facing a few issues trying to get AdGuard working with a dual-WAN setup on OPNsense. I hope someone can help me

The steps I followed:

• Setup my OPNsense box with a single WAN connection and verified internet connectivity on clients.
• Setup AdGuard according to this guide.
• Verified that the internet was accessible to clients.
• Followed the official multi-WAN documentation to setup a load-balancing configuration.

This set of steps seemed to work at first since I was able to access the internet.

However, immediately after this:

• AdGuard web UI becomes inaccessible at the correct ip/port (3000 or 8080, which I configured it to use).
• Load-balancing/fail-over seem to stop working.
• All access to the internet is lost at the client-end.

Other things I tried:

• I switched the sequence of steps to first setup dual-WAN and then attempt to setup AdGuard but then, I immediately run into an inaccessible AdGuard web UI, so even the configuration wizard at port 3000 is unreachable.
• Add a new Firewall rule to forward all DNS (Port 53) traffic to AdGuard as mentioned in the first post.
• Add my router IP address in System/Settings/General.

None of these have helped restore internet connectivity or access to AdGuard web UI. Additionally, I'm not sure if it's related, but, if I try to test WAN fallback in my load-balancing setup by disconnecting one of my internet connections to the router, it does not seem to failover to the second WAN and instead, all clients lose internet connectivity entirely. The router itself seems to have connectivity as it's able to check for updates successfully.

I also noticed this note by planetix:

Edit: As often happens, writing this post made me re-think a couple things to try and I got it working.

The problem, if anyone else runs in to this, is I am using a failover group for a gateway (my ISP WAN interface + backup LTE modem) and for that to work correctly the LAN "pass all outbound" rule has to be modified to use it vs. the default "any" gateway.

This means you need to explicitly define any additional ports (besides 80 and 443 which are in the default anti-lockout rule) you want to access on the OPNsense box itself, in this case 3000 (for the wizard) and then 81 (the port I picked AdGuardHome to run on). Easy fix when I realized what the problem was.

I figured it out when I looked where I should have in the first place - the firewall logs vs. the service logs. The latter showed no issues because there weren't any with the service. The firewall blocked access, by design, until I explicitly allowed those ports access from my LAN net to my LAN address.

Hope this helps someone else

However, I could not figure out how to do this so I'm not sure if this is the solution for the issues I'm facing.

Once I get this working, I want to integrate Zenarmor into OPNsense and install a few more useful plugins/packages.

Does anyone have experience in getting AdGuard + Unbound to work in a dual-WAN setup like mine? Is there anything simple/obvious that is escaping me? What else can I try to make this work?

Please do try to ELI5. Thanks in advance!

Anyone?

3

Documentation and Translation / Re: AdGuard Home setup guide

« on: June 29, 2024, 07:32:26 am »

Hey everyone, thanks for this detailed thread and all the solutions that have been mentioned.

I'm new to OPNsense and while I am well-versed in consumer-grade routers/AdGuard Home, I'm not great with advanced networking. Due to this, I'm facing a few issues trying to get AdGuard working with a dual-WAN setup on OPNsense. I hope someone can help me

The steps I followed:

• Setup my OPNsense box with a single WAN connection and verified internet connectivity on clients.
• Setup AdGuard according to this guide.
• Verified that the internet was accessible to clients.
• Followed the official multi-WAN documentation to setup a load-balancing configuration.

This set of steps seemed to work at first since I was able to access the internet.

However, immediately after this:

• AdGuard web UI becomes inaccessible at the correct ip/port (3000 or 8080, which I configured it to use).
• Load-balancing/fail-over seem to stop working.
• All access to the internet is lost at the client-end.

Other things I tried:

• I switched the sequence of steps to first setup dual-WAN and then attempt to setup AdGuard but then, I immediately run into an inaccessible AdGuard web UI, so even the configuration wizard at port 3000 is unreachable.
• Add a new Firewall rule to forward all DNS (Port 53) traffic to AdGuard as mentioned in the first post.
• Add my router IP address in System/Settings/General.

None of these have helped restore internet connectivity or access to AdGuard web UI. Additionally, I'm not sure if it's related, but, if I try to test WAN fallback in my load-balancing setup by disconnecting one of my internet connections to the router, it does not seem to failover to the second WAN and instead, all clients lose internet connectivity entirely. The router itself seems to have connectivity as it's able to check for updates successfully.

I also noticed this note by planetix:

Edit: As often happens, writing this post made me re-think a couple things to try and I got it working.

The problem, if anyone else runs in to this, is I am using a failover group for a gateway (my ISP WAN interface + backup LTE modem) and for that to work correctly the LAN "pass all outbound" rule has to be modified to use it vs. the default "any" gateway.

This means you need to explicitly define any additional ports (besides 80 and 443 which are in the default anti-lockout rule) you want to access on the OPNsense box itself, in this case 3000 (for the wizard) and then 81 (the port I picked AdGuardHome to run on). Easy fix when I realized what the problem was.

I figured it out when I looked where I should have in the first place - the firewall logs vs. the service logs. The latter showed no issues because there weren't any with the service. The firewall blocked access, by design, until I explicitly allowed those ports access from my LAN net to my LAN address.

Hope this helps someone else

However, I could not figure out how to do this so I'm not sure if this is the solution for the issues I'm facing.

Once I get this working, I want to integrate Zenarmor into OPNsense and install a few more useful plugins/packages.

Does anyone have experience in getting AdGuard + Unbound to work in a dual-WAN setup like mine? Is there anything simple/obvious that is escaping me? What else can I try to make this work?

Please do try to ELI5. Thanks in advance!