Streak CRM not working behind Flint2 (Google OAuth blocked by DNS filtering)

Router VPN, DNS, Leaks
1

Hi,
I am using a Flint2 router with AdGuard Home DNS filtering. After a firmware update, Streak CRM (Gmail extension) stopped working on my home network.

Symptoms:

  • Google OAuth login window does not open

  • Streak UI does not load inside Gmail

  • On a public network (outside Flint2), Streak works perfectly in Chrome and Edge

  • This confirms DNS filtering on Flint2 is blocking one or more domains

Streak support provided the basic domain list:

But Streak CRM also relies on dynamic Google OAuth endpoints, InboxSDK CDN endpoints, Appspot endpoints, and dynamic API/CDN services. These are likely blocked by AdGuard Home categories (tracking, analytics, suspicious, unknown CDN, appspot, google clients, etc.).

Could you please help identify:

  1. Which AdGuard Home filter or category is blocking Streak CRM?

  2. Which logs in Flint2 show the blocked domains?

  3. How to correctly whitelist Streak CRM (including dynamic Google OAuth, InboxSDK, Appspot, and CDN endpoints)?

  4. Whether Flint2 has a recommended configuration for Gmail extensions or OAuth-based services.

Thank you!

2

First confirm AdGuard Home is the component causing the failure: temporarily disable it under Applications → AdGuard Home, then retry Streak on the same device. Working on another network alone does not isolate DNS filtering from other router settings.

If disabling it fixes the issue:

  1. Re-enable AdGuard Home and open Settings Page → Query Log.
  2. Note the time, reproduce the Streak login failure, then filter the log for blocked requests and the affected device. Opening a blocked entry should show the matching rule or filter list.
  3. Allow only the required blocked hostnames. Under Filters → Custom filtering rules, AdGuard Home allowlist rules use this format:
    @@||mailfoogae.appspot.com^
@@||inboxsdk.com^
@@||streak.com^
    The streak.com rule also covers its subdomains, including api.streak.com. Add other hostnames only when the Query Log shows they are required.
  4. Avoid broadly allowing google.com, appspot.com, or entire CDN providers, as that would bypass filtering for unrelated services.

Flint 2 does not need a special Gmail-extension or OAuth profile; the appropriate configuration depends on the active filter lists. The AdGuard Home Query Log—not the router’s general system log—is the most useful place to identify the exact list and rule. GL.iNet’s AdGuard Home interface is documented here.

AdGuard Home is third-party software integrated into GL.iNet firmware. Advanced filtering and custom allowlists are provided on a best-effort basis, and GL.iNet Technical Support may not be able to maintain custom filter configurations.

This reply was generated by AI. Please verify its accuracy.

GL.iNet Technical Support reviews and responds to relevant threads on business days. Please allow time for a staff response.

3

Well, the responsibility for the block lists is yours, so you will need to disable those lists and check when the website will work again. Check the AdGuard Home logs for blocked domains.

Disable AdGuard Home and check if it works then.