Flint 2 VPN Tunnel DNS issues

Hi,

I have a Flint 2, and I am trying to setup a VPN tunnel for 1 device only which is an Apple TV.

Essentially when I enable it, the device cannot resolve domains. Seems like a DNS issue.

Same behaviour on my phone (Pixel).

I’m using Adguard home. Tried disabling it, and same result. Tried “AdGuard Home Handle Client Requests” on and off and same result.

(maybe unrelated) I did have tailscale enabled, and that caused all internet traffic to fail for all devices when VPN was enabled. I assumed a conflict was the cause so i disabled tailscale, which then restored internet for all other devices with VPN enabled.

Strangely, it works completely fine with my desktop as the client on the VPN tunnel - which is throwing me. Where do i start to diagnose this?

Only other non-standard setup on the router is IGMP proxy for multicast, but I'm hoping this isn’t the issue as i need this left alone.

Only thing in noticed in LuCi firewall settings was wgclient1 is set to reject, but this might mean nothing. Same behaviour with OpenVPN anyway.

Not sure if port forward rules are relevant but just in case:

Hi

Please let us know your firmware version and provide screenshots of the following pages:

  • VPN – VPN Dashboard
  • Network – DNS
  • Application – AdGuard Home

We recommend doing the following:

  • Enable the VPN
  • In Application – AdGuard Home, enable AdGuard Home and “AdGuard Home Handle Client Requests”
  • In Network – DNS, enable “Override DNS Settings of All Clients” and “Allow Custom DNS to Override VPN DNS”

After applying these settings, check whether Apple TV still experiences DNS issues.

If the issue persists, please open the AdGuard Home management interface and review the Query Log to confirm whether Apple TV’s DNS requests are being processed correctly.

Hi,

Thankyou for replying, much appreciated.

I’ve tried changing the settings as you have highlighted. Didn’t work.

I’ve checked the Adguard logs and appears no DNS requests are reaching Adguard when VPN tunnel is on from any client.

I have previously disabled Adguard completely and it made no difference.

We tested locally using Flint 2 v4.8.3 but were unable to reproduce the issue.

Configuration:

Test Result:


Please verify:

  1. What is the firmware version you're using? If not the latest, please try upgrading to 4.8.3
  2. Is encrypted DNS enabled on client devices? If so, please disabling it

If issues persist, kindly connect your router to GoodCloud and share it with us following this tutorial if possible.
Note to send us the router's MAC address and login password via PM so that we can remote troubleshooting.
Technical Support via GoodCloud - GL.iNet Router Docs 4

Try and check your VPN file on another device. Just try run it on another device because it could be the DNS in that config file is incorrect

Thanks Will, definitely a DNS issue, as i tried nslookup as well and fails on DNS.

I havent tried 4.8.3. I had the preview toggle on, and it didnt prompt the upgrade to 4.8.3. I try to avoid upgrading if I have to as its a nightmare setting up my multicast EE TV box again. (ps, can you make multicast/IGMP work out of the box please haha).

Ill setup goodcloud and PM you.

The DNS does look unusual. Its Privado VPN –> DNS = 198.18.0.1,198.18.0.2

Think i fixed it.

The two Adguard rules were not active. Once enabled them - all seems fine!

1 Like