Hello.
On my Beryl AX (fw version 4.7.0) I have AdGuardHome installed. DHCP is set up to send the router's IP as their DNS server. So, everything works just fine and ads get blocked alright.
Now, the moment I turn on my WG VPN client (pointing to a custom WG server), the ads are back. So somehow AGH gets bypassed when the VPN is on. Haven't yet figured out why it happens and whether this by design or a bug.
Would appreciate if someone could bring clarity around that for me.
Thanks.
Omg.. It's embarrassing - I just realized that I didn't set the DNS = setting in my WG conf to the address of the router - no wonder DNS queries were bypassing AGH 
I just realised I have this issue as well. I'm assuming the default Wireguard VPN in my case its surfshark has different DNS servers than the Adguard home. Did you just modify it to be router IP address e.g 192.168.8.1 ?
Had the same problem.
I changed the DNS in the Wireguard profile to my routers IP and set the DNS-Upstream Server in AGH to the Wireguards IP. I think this did the trick but I'm not sure if it is right to set Wireguards IP as only DNS-Upstream Server but the AGHs query log seems fine and I have no DNS leak so I guess everything's all right.
@simplymacbook Yes.
I just looked into this and even with the wireguard client dns set to the vpn's dns, if you have adguard home enabled in v4.7.0 and higher. Adguard home is already doing dns filters without setting it specifically in the VPN config. Why were you having an issue, that's odd.
Are you sure the VPN DNS you used doesn't do ads filtering on its end?
I know the vpn does but I can see in adguard home stats that its actively checking the dns queries. All the devices DNS server is also targetting the flint2 so it's definately working without explicitly changing the vpn settings.