Can't resolve domains when policy mode enabled 4.8.2 Flint 2

Pro4TLZZ · October 6, 2025, 11:08pm

Hi,

It’s been awhile since I’ve been here but I am back.

I have done fresh install of 4.8.2 on my Flint 2.

I’m trying to route a bunch of domains over a VPN using Policy mode. I am also using AdGuard Home for DNS. Whenever I try to access these domains I can’t because of a DNS timeout.

If I go to manually resolve the domains it looks like the router hijacks the requests:

PS C:\Users\> nslookup bing.com 8.8.8.8
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    bing.com
Addresses:  2620:1ec:33:1::10
          2620:1ec:33::10
          150.171.28.10
          150.171.27.10

PS C:\Users\> nslookup browserleaks.net 8.8.8.8
Server:  dns.google
Address:  8.8.8.8

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
*** Request to dns.google timed-out
PS C:\Users\> nslookup browserleaks.net 192.168.1.1
Server:  console.gl-inet.com
Address:  192.168.1.1

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
*** Request to console.gl-inet.com timed-out

My config is below. The issue occurs regardless of whether procd_set_param group is set to nonevpn or explicitvpn. Can you help please?

I missed a lot these last few months.

I think it's related to the DNS management on the router. If I use secure DNS like the DNS over https then I can browse to the website. But obviously it doesn't go over the VPN because the router doesn't know about the DNS request

Pro4TLZZ · October 8, 2025, 8:20am

@will.qiu can you help please?

will.qiu · October 9, 2025, 8:55am

Hi

It appears you've modified some scripts. Could you share the specific details?

When using the VPN policy ADG Home, please disable “AdGuard Home Handle Client Requests”.

Currently, when this option is enabled, the VPN policy may not function properly.
Please try disabling it.

Pro4TLZZ · October 9, 2025, 8:57pm

I only modified /etc/init.d/adguard but the issue is reproducible if I return it to it's original settings which is explicitvpn and it was actually reproducible before I modified the file.

I do have the AdGuard Home Handle Client Requests setting disabled.

On the previous firmware I didn't have this issue.

will.qiu · October 10, 2025, 4:08am

We use Flint 2 4.8.2 for testing and do not reproduce the issue.

VPN Settings:

ADG Home Settings:

DNS Settings:

Result:

Please try enabling "Allow Custom DNS to Override VPN DNS" in the DNS page to forward all DNS requests to ADG Home and see if that helps.
If this setting is disabled, domain names in the list will use VPN DNS to request, while others will use ADG Home requests—this may cause of the issue.

Pro4TLZZ · October 10, 2025, 2:05pm

Thanks I checked again and the issue was the DNS in my VPN config files weren’t working, I made new ones which work.