Unbound DNS

[haim9080]

You need Unbound or any DNS resolver, so AGH should run on an alternative port. I do not use it, but here is a guide:

https://samuelsson.dev/install-adguard-home-on-an-opnsense-router/

Maybe you should use something different than 5353, because that collides with mDNS.

I managed to install ADGUARD. In the end, I disabled UNBOUND DNS. Now I also have OPENVPN, which comes out in FULL TUNNEL. I connect from my phone to the VPN, so the traffic doesn't go out. I see it in the ADGUARD logs as passing through, but on the phone there is no browsing at all.
What could be the solution to this?

[Patrick M. Hausen]

AdGuard Home needs a forwarder or upstream DNS server as it might be called. It cannot do recursive resolution by itself. That's why I

- let AGH listen on port 53 on all interfaces
- let Unbound listen on port 53530
- set 127.0.0.1:53530 as an upstream for AGH

If you don't want a local Unbound in that equation, you need to point your AGH at your ISP's or some other recursive DNS server.

With that being solved it's a matter of

- have AGH listen on *all* interfaces: 0.0.0.0 - firewall rules will take care of nobody abusing it
- point your OpenVPN clients at "OPNsense address in the OpenVPN network, port 53" for DNS

HTH,
Patrick

[haim9080]

AdGuard Home needs a forwarder or upstream DNS server as it might be called. It cannot do recursive resolution by itself. That's why I

- let AGH listen on port 53 on all interfaces
- let Unbound listen on port 53530
- set 127.0.0.1:53530 as an upstream for AGH

If you don't want a local Unbound in that equation, you need to point your AGH at your ISP's or some other recursive DNS server.

With that being solved it's a matter of

- have AGH listen on *all* interfaces: 0.0.0.0 - firewall rules will take care of nobody abusing it
- point your OpenVPN clients at "OPNsense address in the OpenVPN network, port 53" for DNS

HTH,
Patrick

Dear Patrick, i solve that with reinstall AGH and do listen only to interface LAN and everything working great.
Thank you a lot.

I really appreciate that.
Haim