# Adguard Home, Port Forwarding for Wireguard to show clients

**URL:** <https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299>\
**Category:** Router\
**Created:** [July 2, 2024, 4:52am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299 "2024-07-02T04:52:23Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![mertonv](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/cdc98d/32.png) [@mertonv](https://forum.gl-inet.com/u/mertonv)\
**Post date:** [July 2, 2024, 4:52am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/1 "2024-07-02T04:52:23Z")

</div>

I was looking at the solution of this thread and I was wondering if there's any reason why this would be a bad idea to do in order to get AdguardHome to show me the requests from my Wireguard Clients

The thread I'm refering too:  
[GL-MV1000 with AdGuard all clients show as localhost](https://forum.gl-inet.com/t/gl-mv1000-with-adguard-all-clients-show-as-localhost/13664/31):

> [@GL-MV1000 with AdGuard all clients show as localhost](https://forum.gl-inet.com/t/gl-mv1000-with-adguard-all-clients-show-as-localhost/13664/31):
>
> This is how to do this from the Luci interface without the need for the SSH access.  
> This has to created in section _Firewall - Port Forwards._
> 
> ![AGH port forward rule workaround](https://forum-static.gl-inet.com/original/2X/b/b7cda1c5aef81e77b9b451a66e8744ae557dbb8a.jpeg)

This is my port forward to get the WgClients to report to AGH:

 ![image](https://forum-static.gl-inet.com/original/3X/0/a/0a53cbdaa4ae884c6622c1a0a72a0d7f9b888fff.png)  
And the result in the log (Top line, with the port forward enabled, bottom disabled)  
 ![image](https://forum-static.gl-inet.com/original/3X/d/b/dbda94a7222e11c06e83b1df2b749ccf1b1dc7db.png)

Thanks

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [July 2, 2024, 5:47am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/2 "2024-07-02T05:47:46Z")

</div>

The only problem with AdGuard Home handling the clients directly is that VPN policies won’t work anymore.

---

<div class="post-metadata">

**Author:** ![mertonv](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/cdc98d/32.png) [@mertonv](https://forum.gl-inet.com/u/mertonv)\
**Post date:** [July 2, 2024, 6:29am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/3 "2024-07-02T06:29:33Z")

</div>

Isn't that getting fixed in 4.6 anyway?

> [@](#):
>
> [GL.iNet What's New - GL.iNet](https://www.gl-inet.com/whats-new/)

![Image](https://static.gl-inet.com/www/images/whats-new/4.6/vpn.jpg)

I'm asking more if it is in any way insecure or can cause a conflict to redirect the DNS port to my Wireguard clients (The ones that connect to me as server)

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [July 2, 2024, 6:40am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/4 "2024-07-02T06:40:02Z")

</div>

No, it's not fixed because you can't fix it. It is by design.

---

<div class="post-metadata">

**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\
**Post date:** [July 3, 2024, 3:51am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/5 "2024-07-03T03:51:35Z")

</div>

Seems the first post is talking about clients from VPN, while the following post is talking clients connected on LAN.

Clients in LAN surely can appear in Adguard Home. The MV1000 post is so old now.

---

<div class="post-metadata">

**Author:** ![mertonv](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/cdc98d/32.png) [@mertonv](https://forum.gl-inet.com/u/mertonv)\
**Post date:** [July 3, 2024, 4:05am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/6 "2024-07-03T04:05:59Z")

</div>

Clients from LAN (`192.168.8.1/24`) appear correctly in the query log.  
Clients from Wireguard (`10.0.0.1/24`) appeared as requests from localhost (`127.0.0.1`). After adding that port forward rule (taking the idea from that old post), now they report as individual client requests (Ie `10.0.0.2`) and I can create rules and exceptions for them.

> [@mertonv](#):
>
> This is my port forward to get the WgClients to report to AGH:
> 
> ![image](https://forum-static.gl-inet.com/original/3X/0/a/0a53cbdaa4ae884c6622c1a0a72a0d7f9b888fff.png)
> 
> And the result in the log (Top line, with the port forward enabled, bottom disabled)
> 
> ![image](https://forum-static.gl-inet.com/original/3X/d/b/dbda94a7222e11c06e83b1df2b749ccf1b1dc7db.png)

My question is if that would expose my system or cause conflict. I'm assuming it "shouldn't", since the only ones with access to my network would be the Wireguard clients but I rather ask than just assume.

**Is doing this safe, right?**

---

<div class="post-metadata">

**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\
**Post date:** [July 3, 2024, 4:24am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/7 "2024-07-03T04:24:45Z")

</div>

I think it should be OK.

I am checking with developers to see if we can include vpn clients directly to adguard home.

---

<div class="post-metadata">

**Author:** ![mertonv](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/cdc98d/32.png) [@mertonv](https://forum.gl-inet.com/u/mertonv)\
**Post date:** [July 3, 2024, 5:18am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/8 "2024-07-03T05:18:56Z")

</div>

That would actually be awesome. 👍🏻  
Thank you very much!

---

<div class="post-metadata">

**Author:** ![kaz050457](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/k/d78d45/32.png) [@kaz050457](https://forum.gl-inet.com/u/kaz050457)\
**Post date:** [April 22, 2025, 7:08am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/9 "2025-04-22T07:08:24Z")

</div>

how about clients from zerotier network appear as 127.0.0.1? Can you guide me how to portforward so client appear as there IP not localhost. ty

---

<div class="post-metadata">

**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\
**Post date:** [April 22, 2025, 7:10am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/10 "2025-04-22T07:10:48Z")

</div>

Sorry I don't have experience in this.

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 30, 2025, 3:30am UTC](https://forum.gl-inet.com/t/adguard-home-port-forwarding-for-wireguard-to-show-clients/44299/11 "2025-10-30T03:30:44Z")

</div>


