# DNS requests are still going through the vpn **URL:** \ **Category:** Router\ **Created:** [October 21, 2023, 6:09pm UTC](https://forum.gl-inet.com/t/dns-requests-are-still-going-through-the-vpn/34397 "2023-10-21T18:09:33Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![i\_fin](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/i/3e96dc/32.png) [@i\_fin](https://forum.gl-inet.com/u/i_fin)\ **Post date:** [October 21, 2023, 6:09pm UTC](https://forum.gl-inet.com/t/dns-requests-are-still-going-through-the-vpn/34397/1 "2023-10-21T18:09:33Z")
I added the firewall rule (firewall dns forward from wan port 53 to the glinet lan (127.0.0.1 & 192.168.1.1) port 3053), but it didn’t help. DNS requests are still going through the vpn. How to exclude adguard home from vpn? brume2, axt1800 4.4.6 ---
**Author:** ![shivadow](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/57b2e6/32.png) [@shivadow](https://forum.gl-inet.com/u/shivadow)\ **Post date:** [October 21, 2023, 6:30pm UTC](https://forum.gl-inet.com/t/dns-requests-are-still-going-through-the-vpn/34397/2 "2023-10-21T18:30:05Z")
Adguard is a vpn in its own right so that’s probably half your problem. Not sure about the router version but on the device version of adguard the dns can be changed. You might want to uncheck the dns rebinding attack and override dns setting for all clients. ---
**Author:** ![i\_fin](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/i/3e96dc/32.png) [@i\_fin](https://forum.gl-inet.com/u/i_fin)\ **Post date:** [October 21, 2023, 6:43pm UTC](https://forum.gl-inet.com/t/dns-requests-are-still-going-through-the-vpn/34397/3 "2023-10-21T18:43:41Z")
![2023-10-21 214137 (2)](https://forum-static.gl-inet.com/original/2X/8/8773da2d6aca0045ea71fc84ba3c4a8c1f5d5e79.png) i think it is not normal ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [October 22, 2023, 8:14am UTC](https://forum.gl-inet.com/t/dns-requests-are-still-going-through-the-vpn/34397/4 "2023-10-22T08:14:15Z")
> [@i\_fin](#): > > I added the firewall rule (firewall dns forward from wan port 53 to the glinet lan (127.0.0.1 & 192.168.1.1) port 3053) Does not make sense to me. You don’t want to forward anything from the WAN interface since this is your external interface. There is no need for forwarding rules in general, since you are trying to connect from inside your network to outside your network. I would say the best way might be either a static route or switching to VPN policy and excluding the hostnames of the DNS services. But to be clear: I don’t think this is necessarily a good idea, depending on why you are using VPN. DNS leak (i.e. DNS without VPN) destroys the anonymity and can cause problems, because e.g. DNS servers answer that are not suitable for your internet zone (i.e. via VPN). Example: You are in the USA and use a VPN from the EU. Now your PC asks for the address for [example.org](http://example.org) and gets back from the DNS server in the USA (without VPN) that the IP is in New York. However, your Internet access is in the EU, which is why the path of the packets is unnecessarily prolonged. ---
**Author:** ![i\_fin](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/i/3e96dc/32.png) [@i\_fin](https://forum.gl-inet.com/u/i_fin)\ **Post date:** [October 22, 2023, 7:05pm UTC](https://forum.gl-inet.com/t/dns-requests-are-still-going-through-the-vpn/34397/5 "2023-10-22T19:05:03Z")
I have a “VPN Policy Set up Based on the Target Domain or IP” (only domains) and I would like DNS requests to pass through the vpn only for those domains that are included in the VPN or no requests at all passed through the vpn (if the first option is not possible). Because I use vpn only for 1-2% of the requested domains. ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 29, 2025, 4:26am UTC](https://forum.gl-inet.com/t/dns-requests-are-still-going-through-the-vpn/34397/6 "2025-10-29T04:26:10Z")