AdGuard Home - Upstream servers not reachable

Renato · 2024-03-13T16:03:45.933Z

After the update, when I go to Settings Page → Settings (top menu) → DNS Settings and I click on “Test upstreams”, now I’m getting these errors:

dns_ad536×1041 142 KB

admon · 2024-03-13T16:16:20.173Z

Please check that the DNS root servers are reachable. You can configure them at the same place but one field below.

Renato · 2024-03-13T16:30:28.334Z

admon:

Please check that the DNS root servers are reachable.

Yes, they are.
E.g.: the 2nd server on the list is https://dns.quad9.net/dns-query

I can ping dns.quad9.net

Try to add these servers to your list:

https://dns.quad9.net/dns-query
https://dns.twnic.tw/dns-query
https://doh.opendns.com/dns-query
https://security.cloudflare-dns.com/dns-query
tls://security.cloudflare-dns.com

All of them are listed on: Known DNS Providers | AdGuard DNS Knowledge Base

I tested before the upgrade and all of them were working.

admon · 2024-03-13T16:41:33.282Z

Check the Bootstrap-DNS-Servers. Are they still there? Only IPs allowed there.

Renato · 2024-03-13T16:51:58.406Z

Yes, they are still there. Exactly like before the update.

They are:

9.9.9.10
149.112.112.10
2620:fe::10
2620:fe::fe:10
94.140.14.14
94.140.15.15
2a10:50c0::ad1:ff
2a10:50c0::ad2:ff
94.140.14.14:5443
[2a10:50c0::ad1:ff]:5443
1.1.1.1

admon · 2024-03-13T16:53:43.842Z

Strange. Not sure if it’s my scripts fault.
Try to disable AdGuard and enable it again - or maybe even reboot the device.

Renato · 2024-03-13T17:17:40.412Z

admon:

Try to disable AdGuard and enable it again - or maybe even reboot the device.

Tried both… The error is still happening

admon · 2024-03-13T19:14:31.320Z

I can’t tell why it happen - but it shouldn’t be a result of the script, since the script only updates the AdGuard binaries.

Renato · 2024-03-13T19:37:49.389Z

admon:

I can’t tell why it happen - but it shouldn’t be a result of the script

But just to confirm: it’s also happening to you?
I’ll open a bug report on Adguard…

admon · 2024-03-13T19:40:00.274Z

Nope, is working fine for me.

But I don’t think it’s worth a bug report. Might be some configuration on your device.

slesar · 2024-03-14T02:35:06.077Z

Show me your upstream setting page

Renato · 2024-03-14T09:34:24.510Z

I noticed that, if I put this block (marked in red) at the top, it works well.
If I put it in anywhere else, it didn’t work

Block on the top:

ok2235×855 208 KB

Block at the bottom:

wrong2261×994 323 KB

Settings:

settings1782×5665 327 KB

slesar · 2024-03-14T13:12:23.259Z

I belive it was error syntax
Each lines only, no space, no wrap text.

Renato · 2024-03-14T13:21:15.231Z

There is no space, no wrapped text…

Looks like DNSCrypt servers must be always AFTER the DoH/QUIC/TLS servers.

Make a test…

In this way, it doesn’t work:

sdns://AQAAAAAAAAAADjIwOC42Ny4yMjAuMjIwILc1EUAgbyJdPivYItf9aR6hwzzI1maNDL4Ev6vKQ_t5GzIuZG5zY3J5cHQtY2VydC5vcGVuZG5zLmNvbQ
sdns://AQYAAAAAAAAAEzE0OS4xMTIuMTEyLjEyOjg0NDMgZ8hHuMh1jNEgJFVDvnVnRt803x2EwAuMRwNo34Idhj4ZMi5kbnNjcnlwdC1jZXJ0LnF1YWQ5Lm5ldA
sdns://AQMAAAAAAAAAEjEwMy44Ny42OC4xOTQ6ODQ0MyAxXDKkdrOao8ZeLyu7vTnVrT0C7YlPNNf6trdMkje7QR8yLmRuc2NyeXB0LWNlcnQuZG5zLmJlYmFzaWQuY29t
sdns://AQIAAAAAAAAAETk0LjE0MC4xNC4xNDo1NDQzINErR_JS3PLCu_iZEIbq95zkSV2LFsigxDIuUso_OQhzIjIuZG5zY3J5cHQuZGVmYXVsdC5uczEuYWRndWFyZC5jb20
sdns://AQAAAAAAAAAACjguMjAuMjQ3LjIg0sJUqpYcHsoXmZb1X7yAHwg2xyN5q1J-zaiGG-Dgs7AoMi5kbnNjcnlwdC1jZXJ0LnNoaWVsZC0yLmRuc2J5Y29tb2RvLmNvbQ
https://dns.quad9.net/dns-query
https://dns.twnic.tw/dns-query
https://doh.opendns.com/dns-query
https://security.cloudflare-dns.com/dns-query
tls://security.cloudflare-dns.com
quic://dns.adguard-dns.com
quic://zero.dns0.eu
https://dns.adguard-dns.com/dns-query
tls://dns.adguard-dns.com

In this way, it works:

https://dns.quad9.net/dns-query
https://dns.twnic.tw/dns-query
https://doh.opendns.com/dns-query
https://security.cloudflare-dns.com/dns-query
tls://security.cloudflare-dns.com
quic://dns.adguard-dns.com
quic://zero.dns0.eu
https://dns.adguard-dns.com/dns-query
tls://dns.adguard-dns.com
sdns://AQAAAAAAAAAADjIwOC42Ny4yMjAuMjIwILc1EUAgbyJdPivYItf9aR6hwzzI1maNDL4Ev6vKQ_t5GzIuZG5zY3J5cHQtY2VydC5vcGVuZG5zLmNvbQ
sdns://AQYAAAAAAAAAEzE0OS4xMTIuMTEyLjEyOjg0NDMgZ8hHuMh1jNEgJFVDvnVnRt803x2EwAuMRwNo34Idhj4ZMi5kbnNjcnlwdC1jZXJ0LnF1YWQ5Lm5ldA
sdns://AQMAAAAAAAAAEjEwMy44Ny42OC4xOTQ6ODQ0MyAxXDKkdrOao8ZeLyu7vTnVrT0C7YlPNNf6trdMkje7QR8yLmRuc2NyeXB0LWNlcnQuZG5zLmJlYmFzaWQuY29t
sdns://AQIAAAAAAAAAETk0LjE0MC4xNC4xNDo1NDQzINErR_JS3PLCu_iZEIbq95zkSV2LFsigxDIuUso_OQhzIjIuZG5zY3J5cHQuZGVmYXVsdC5uczEuYWRndWFyZC5jb20
sdns://AQAAAAAAAAAACjguMjAuMjQ3LjIg0sJUqpYcHsoXmZb1X7yAHwg2xyN5q1J-zaiGG-Dgs7AoMi5kbnNjcnlwdC1jZXJ0LnNoaWVsZC0yLmRuc2J5Y29tb2RvLmNvbQ

slesar · 2024-03-14T14:09:12.297Z

Okay double check syntax in config.yaml
You will be noticed what wrong after dns crypt or before dns crypt