AX1800, Mullvad DNS, unable to resolve some domains

[bruce]

Hello,

In default, GL firmware does not intercept filtering the ort 53 DNS requests.

Instead, if Mullvad VPN is enabled, the Mullvad will listen to all 53 DNS traffic, and all DNS request traffic will through Mullvad DNS.
If the Mullvad DNS unable to resolve the domains, so the VPN client cannot access these resource.

If you want to avoid intercepting DNS from Mullvad, you can use the GL GUI> NETWORK > DNS > choose the Encrypt DNS.

VPN client DNS overreach

If ADG is enabled, all DNSs are handled by ADG, including the excluded domains set on VPN policy (that list is not related to ADG). he excluded domain are just go to WAN port instead of using the VPN port when establishing TCP/HTTP. But the DNS queries will go to the VPN port. You mentioned that the VPN provider you are using is Mullvad. According to our experience, Mullvad will hijack all DNS (port 53) traffic, no matter what DNS server you set up in VPN profile, router DNS, ADG DNS, clients…