Firmware v4.9 Preview: What to Expect

Router
397

Hi

We tested locally using MT6000 v4.9.0-op24 beta2 (released on 2026-06-01). With a similar configuration (DPI + AdGuard Home + Windscribe VPN client), everything appears to be working normally, and the VPN can operate correctly:

Please

  1. Try to upgrade to this version and check whether the issue still persists.
  2. Make sure that IP Masquerading for the corresponding tunnel is enabled:
    image
    image1320×787 55 KB

    image
    image648×429 16.4 KB
3 Likes
398

Hi

I think you can directly edit the file to customize the AT command list.

The reference steps are as follows:

  1. Copy and decompress the corresponding file:

    cp /www/views/gl-sdk4-ui-internet.common.js.gz ./
gzip -d gl-sdk4-ui-internet.common.js.gz

  2. Use SCP or other tools to transfer the file to your local machine for formatting and editing.

  3. Locate the corresponding definition list and modify it:

    image
    image637×436 20.4 KB

  4. Transfer the modified file back to the router.

  5. Compress it and place it back into the source directory:

    gzip -c gl-sdk4-ui-internet.common.js > gl-sdk4-ui-internet.common.js.gz
cp gl-sdk4-ui-internet.common.js.gz /www/views/
chmod 664 /www/views/gl-sdk4-ui-internet.common.js.gz

  6. Result:

    image
    image637×640 13.1 KB

1 Like
399

Hi

If “AdGuard Home Handle Client Requests” is not enabled:

  • LAN DNS requests will first be handled by the router’s dnsmasq instance
  • dnsmasq will then forward the requests to AdGuard Home for processing

As a result, AdGuard Home will not be able to see which client initiated the request (e.g. 192.168.8.0/24), and it will only see requests coming from the local dnsmasq process (127.0.0.1).

When it is enabled:

  • LAN DNS requests can be sent directly to AdGuard Home
  • Therefore, AdGuard Home is able to see the actual client IP addresses
400

Hi

@gnirtS @dgsound

Thank you for the suggestion to allow configuring SQM Download to “0” in order to disable downstream traffic shaping.

We will further discuss this with the product team.

1 Like
401

That works! Thank you!

402

Hi

Please see:

3 Likes
403

I’ve been having multiple issues with Surfshark Wireguard and Adguard home enabled.

  1. I had updated Adguard home to the latest, then the fix after the bugged version, but since the screw up, decided to revert back to the version that was on by default to avoid issues whilst troubleshooting.

  2. I can’t get these working together. I will either get blocks on normal sites until one of the other is disabled. Other times I have no access to apps and other times ads where I had none on some apps.

  3. I think it would be really helpful to have a CLEAR, concise guide for the basic user on how to set up a FLint 2 with both a Wireguard VPN and Adguard home. By this, I mean, what should go in the upstream DNS servers, the Bootstrap Servers, what, if anything must be changed in the VPN client card’s DNS settings (I thing you mentioned this in a reply), which settings under adguard to change, as it’s very confusing. A simple step by step guide I’m sure would help people and prevent a lot of posts.

Today I lost everything again and a complete crash whilst trying to get the settings working. I reset the firmware back to 4.9.0 beta 1 with no restoration of settings and manually configured everything again painstakingly.

I have left Adguard home working but have not enabled VPN as I can see this will just repeat the problems. I did also have my USB mounted to save the Adguard logs, but again we found out there were no logs due to the way GL have this set up internally in RAM. So that was aborted and back to writing logs to router flash.

404

on v4.9.0-op24, my time is out of sync, the admin panel has only timezone selection, even the Luci has no NTP configuration, only “Sync with browser” while my other routers on official OpenWrt have options for network time protocol servers, etc…
SO where do I configure NTP servers in the Admin?
DPI option is greyed out with “Waiting time synchronization”

405

Here’s the 4.9.x-op24 conversation :backhand_index_pointing_down:

4.9.x-op24

1 Like
406

Why? How do you intend to use it?

407

Will there be a long-term fix for using PBR and a Roku? I don't want to only use Global mode with AGH.

408

Hi

A significant increase in memory usage while updating DNS filter lists is expected behavior in AdGuard Home, including the latest v0.107.76 release (see the Github issues below):

We recommend:

  1. Reducing the number of configured DNS filter lists.
  2. Alternatively, consider applying more aggressive memory reclamation settings as described here:
409

Hi

Thank you for your feedback.

We have been able to reproduce this behavior locally and will work with the development team to further investigate whether it is expected behavior or if it requires a fix.

Updated on 2026/6/4:

We have confirmed that this is an issue and it will be fixed in a future firmware release.

For currently affected users, please SSH into the router and run the following commands to fix the problem:

sed -i '914s/local resolvfile resolvdir localuse=1/local resolvfile resolvdir localuse=0/' /etc/init.d/dnsmasq
sed -i '1117d' /etc/init.d/dnsmasq
sed -i '1116a\ [ "$resolvfile" = "/tmp/resolv.conf.d/resolv.conf.auto" ] && localuse=1' /etc/init.d/dnsmasq
sed -i '1302s/local noresolv resolvfile localuse=1/local noresolv resolvfile localuse=0/' /etc/init.d/dnsmasq
sed -i '1307d' /etc/init.d/dnsmasq
sed -i '1306a\ [ "$noresolv" = 0 ] && [ "$resolvfile" = "/tmp/resolv.conf.d/resolv.conf.auto" ] && localuse=1' /etc/init.d/dnsmasq

/etc/init.d/dnsmasq restart

reboot
410

Hi

Yes, there is validation implemented on the frontend.

For I1–I5, valid <tag> annotations are required.

image
image997×853 64.1 KB

411

Hi

Based on the logs, it appears that TCP connections between your network and Quad9 are being interrupted.

Please try the following:

  1. Add additional upstream DNS servers from different providers in AdGuard Home and check whether the issue only occurs with Quad9. This will help determine whether the problem is network-related.

  2. Add different Quad9 protocol types, such as DoT and DoQ, to determine whether an upstream firewall or network device is interfering with or blocking a specific protocol used by Quad9.

412

Hi

The DNS-related configuration on GL.iNet routers is generally not very complicated. You can refer to the following documentation for an explanation of the different options:

In short, when a VPN is enabled:

  • If "Allow Custom DNS to Override VPN DNS" is enabled, all LAN client DNS requests will be handled by the DNS servers configured under Network → DNS, or by AdGuard Home (if enabled).
  • If "Allow Custom DNS to Override VPN DNS" is disabled:
    • DNS queries for traffic routed through the VPN will be handled by the VPN DNS servers specified in the VPN configuration.
    • DNS queries for traffic routed normally through the WAN will be handled by the DNS servers configured under Network → DNS, or by AdGuard Home (if enabled).

In most cases, we recommend enabling "Allow Custom DNS to Override VPN DNS", so that only the DNS servers configured under Network → DNS or AdGuard Home (if enabled) are used.

When using "Allow Custom DNS to Override VPN DNS" together with AdGuard Home, if you find that a website is inaccessible or ads are not being filtered correctly, please check AdGuard Home → Dashboard → Query Log to see whether the relevant requests are being incorrectly blocked or missed.

Since AdGuard Home and its filter lists are not maintained by us, we recommend seeking assistance from the relevant community or maintainers when encountering such issues.

image689x201
image689x2011299×379 23.4 KB

One additional point when using VPN together with AdGuard Home:

If you are using VPN Policy Mode with Domain list, please disable "AdGuard Home Handle Client Requests". Otherwise, the Domain-based policy rules will not work correctly.

413

Hi

You can install luci-app-chrony and then manage and configure the NTP server via Luci → Services → Chrony.

opkg update && opkg install luci-app-chrony

For the issue where DPI shows “Waiting time synchronization”, please refer to the following thread to see whether it helps:

1 Like
414

Hi

As mentioned earlier, if you want to use VPN Policy Mode with domain lists together with AdGuard Home, you just need to disable “AdGuard Home Handle Client Requests”.

1 Like
417

For me, the main thing is that firmware updates based on OP are released for my MT3000 and MT6000; whether it’s version OP24 or OP25 makes no difference to me.

Many thanks to glinet for the support, but I’d like to see more new features)

For example, a built-in torrent downloader), since there are powerful processors and USB 3.0

1 Like
418

Will try that, thank you!