# pcWRT like access control/block lists

**URL:** <https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866>\
**Category:** Router\
**Created:** [June 21, 2024, 7:05pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866 "2024-06-21T19:05:04Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![anon61715343](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon61715343](https://forum.gl-inet.com/u/anon61715343)\
**Post date:** [June 21, 2024, 7:05pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/1 "2024-06-21T19:05:04Z")

</div>

Can GL-iNet routers do some of the access control stuff that [pcWRT](https://www.pcwrt.com/) routers can do? Particularly block lists that can block domain names, partial domain names and IP addresses.

Are device profiles possible? Something being considered?

Not needing parental controls, I mainly want to be able to block known bad, malicious, spammy etc domains/tlds.

Just trying to wrap my head around how to block stuff. And if it is possible with access control and the firewall etc. I am just an average privacy enthusiast not a network ninja.

 ![Screenshot from 2024-06-21 10-53-15](https://forum-static.gl-inet.com/original/3X/0/e/0e38740cc40db391bfdf6d52cf01ef4708c94e10.png)

---

<div class="post-metadata">

**Author:** ![j2zero](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/j/7ea924/32.png) [@j2zero](https://forum.gl-inet.com/u/j2zero)\
**Post date:** [June 21, 2024, 7:11pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/2 "2024-06-21T19:11:57Z")

</div>

If you get a model that supports adguard then you can create client profiles inside adguard and restrict on a per device basis or you can do global block actions.

---

<div class="post-metadata">

**Author:** ![misuzu](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/misuzu/32/14021_2.png) [@misuzu](https://forum.gl-inet.com/u/misuzu)\
**Post date:** [June 21, 2024, 11:38pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/3 "2024-06-21T23:38:39Z")

</div>

Im using Adguard Home with Flint 2 and Marble 3000. Its quite easy to do what you want if AGH is supported. I also mainly use Hagezi's list (which also have a spam tlds list).

---

<div class="post-metadata">

**Author:** ![anon61715343](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon61715343](https://forum.gl-inet.com/u/anon61715343)\
**Post date:** [June 22, 2024, 7:26pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/4 "2024-06-22T19:26:18Z")

</div>

Thanks for the responses!

I should have mentioned that I do not want to use Adguard Home because that means I cannot use Encrypted DNS (DoH) (as far as I understand it anyway), which is a must for me.

I was kinda hoping for a solution where I can set the router to use encrypted DNS/DoH AND be able to have block lists to block domains and TLDS etc like pcWRT seems to be able to do. Router DNS and blocking seem to be independent/separate with pcWRTs Access Control/blocking as far as I can tell.

Maybe using using NextDNS could work for me.

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [June 22, 2024, 8:29pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/5 "2024-06-22T20:29:23Z")

</div>

> [@anon61715343](#):
>
> I should have mentioned that I do not want to use Adguard Home because that means I cannot use Encrypted DNS (DoH) (as far as I understand it anyway), which is a must for me.

You totally can use DoH while using AGH.

---

<div class="post-metadata">

**Author:** ![anon61715343](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon61715343](https://forum.gl-inet.com/u/anon61715343)\
**Post date:** [June 22, 2024, 8:45pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/6 "2024-06-22T20:45:33Z")

</div>

Oh! Awesome! Thanks for responding.

But is it just Adguard DoH? Or can I still choose whatever DoH provider/server I want in the Encrypted DNS settings section with Adguard enabled? Or will all DNS go through Adguard DNS?

Like can I have Adguard Home enabled AND be using Cloudflare or NextDNS or Mullvad DoH?

 ![Screenshot from 2024-06-22 12-40-44](https://forum-static.gl-inet.com/original/3X/b/a/ba7ab0c6373caf690c0b409aba84eb5cec382122.png)

This is what made me think if I enable Adguard Home I can't use any other DNS.

> When AdGuard Home is enabled, the router will force the use of DNS servers provided by AdGuard Home.

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [June 22, 2024, 9:01pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/7 "2024-06-22T21:01:28Z")

</div>

AdGuard isn't AdGuard Home.

In AGH you can configure any DoH DNS server you want to use. Just enable it and visit the config panel - it will be shown as soon as you enabled AGH.

---

<div class="post-metadata">

**Author:** ![anon61715343](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon61715343](https://forum.gl-inet.com/u/anon61715343)\
**Post date:** [June 22, 2024, 9:20pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/8 "2024-06-22T21:20:17Z")

</div>

Ok. Thanks for helping. Sorry I am very new to all this.

I am a little confused...when you say AGH are referring to AdGuard Home which is available in router settings under Applications. And you are saying that AdGuard Home and AdGuard are separate things?

I enabled it and got a dashboard with stats. Then I clicked this below to go to the Settings page.

 ![Screenshot from 2024-06-22 13-13-04](https://forum-static.gl-inet.com/original/3X/2/1/21c96897b0e1e0e521044cf9937c69110fee332b.png)

So in there somewhere I can set DoH? And that will be equivalent to setting Encrypted DNS in the router DNS settings section, and all my devices on my network will use that DNS?

Do I set it in here I assume?

 ![Screenshot from 2024-06-22 13-16-01](https://forum-static.gl-inet.com/original/3X/3/6/36fd10bc96fe2c659b64a95cd4f6c5b131ed20c4.png)

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [June 22, 2024, 9:36pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/9 "2024-06-22T21:36:36Z")

</div>

Yep. Make sure to click the „Learn more“ link so you will get to the AGH manual.

And yes, AGH and AdGuard are completely different things.

---

<div class="post-metadata">

**Author:** ![anon61715343](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon61715343](https://forum.gl-inet.com/u/anon61715343)\
**Post date:** [June 22, 2024, 9:44pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/10 "2024-06-22T21:44:19Z")

</div>

Ok great! Thank so much for your help!

Just want to confirm...will be it equivalent/the same as setting up Encrypted DNS in the GL UI/router DNS settings section? And all my devices on my network will (in most cases) use that DNS?

I basically understand what setting up encrypted DNS/DoH on my router means, I just want to be sure using DoH in AGH instead is basically the same.

If I use AGH I can get encrypted DNS/DoH on my router/for my network AND all the ad etc blocking that AHG can do, is that correct?

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [June 22, 2024, 9:46pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/11 "2024-06-22T21:46:30Z")

</div>

> [@anon61715343](#):
>
> Just want to confirm...will be it equivalent/the same as setting up Encrypted DNS in the GL UI/router DNS settings section? And all my devices on my network will (in most cases) use that DNS?

Yep.

> [@anon61715343](#):
>
> I basically understand what setting up encrypted DNS/DoH on my router means, I just want to be sure using DoH in AGH instead is basically the same.

It is.  
Both will DoH from your network to the DNS server. Internal DNS inside your network will be plain DNS.

> [@anon61715343](#):
>
> If I use AGH I can get encrypted DNS/DoH on my router/for my network AND all the ad etc blocking that AHG can do, is that correct?

Correct.

---

<div class="post-metadata">

**Author:** ![anon61715343](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon61715343](https://forum.gl-inet.com/u/anon61715343)\
**Post date:** [June 22, 2024, 9:49pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/12 "2024-06-22T21:49:22Z")

</div>

Thank you!!!

What is internal DNS? I can also do web search to try to answer that too.

---

<div class="post-metadata">

**Author:** ![anon61715343](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon61715343](https://forum.gl-inet.com/u/anon61715343)\
**Post date:** [June 23, 2024, 6:15pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/13 "2024-06-23T18:15:56Z")

</div>

If I set up DoH in AGH or the router, do you know if it matters if I have my browser (Firefox) set to use DoH?

Do you know if one overrides the other? I assume they should be set to the same server?

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [June 23, 2024, 6:39pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/14 "2024-06-23T18:39:25Z")

</div>

Browser overrides router.

Best is to disable DoH in your browser so the router can do it. Or use the same server at least, yep.

---

<div class="post-metadata">

**Author:** ![anon61715343](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon61715343](https://forum.gl-inet.com/u/anon61715343)\
**Post date:** [June 23, 2024, 6:47pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/15 "2024-06-23T18:47:43Z")

</div>

Thanks for clearing that up! I have been wondering about that forever!

---

<div class="post-metadata">

**Author:** ![silviu\_25](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a87d85/32.png) [@silviu\_25](https://forum.gl-inet.com/u/silviu_25)\
**Post date:** [October 28, 2024, 4:20pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/16 "2024-10-28T16:20:35Z")

</div>

Does anyone know if it's possible to have also the "Internet Logs" from "Access Control" of pcWRT?  
that is showing every single IP / URL that devices try to connect to and it seems to be very deep and useful feature.

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [October 28, 2024, 4:45pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/17 "2024-10-28T16:45:00Z")

</div>

You can use the AGH logs for that. But only DNS will be shown, no URLs since this isn't technically possible.

---

<div class="post-metadata">

**Author:** ![silviu\_25](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a87d85/32.png) [@silviu\_25](https://forum.gl-inet.com/u/silviu_25)\
**Post date:** [October 28, 2024, 4:54pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/18 "2024-10-28T16:54:40Z")

</div>

Thanks, I will have a try and come back with results.

---

<div class="post-metadata">

**Author:** ![silviu\_25](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a87d85/32.png) [@silviu\_25](https://forum.gl-inet.com/u/silviu_25)\
**Post date:** [October 28, 2024, 4:59pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/19 "2024-10-28T16:59:10Z")

</div>

oh AdGuard Home.... that's a joke compared with what can show you the Access Control / Internet Logs from pcWRT.  
Maybe something better?

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [October 28, 2024, 5:57pm UTC](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866/20 "2024-10-28T17:57:16Z")

</div>

That is the only thing that will provide logs, I am sorry.

[Next page](https://forum.gl-inet.com/t/pcwrt-like-access-control-block-lists/43866.md?page=2)
