VPN wireguard and Adguard Home

Technical Support for Routers 4G LTE, 5G NR, USB modems
21

Have you configured in your server (router)?

22

But we have established his build of firmware doesn't have the custom firewall menu option. Apparently openwrt 22.03.4 uses a different approach. Please re-check the previous two posts. Hence the need to ask where to put the code now...

23

Thanks for the reminder.

Execute that command in the SSH, can work only for temporarily, is lost on reboot.

Since the firewall menu has not the custom rule, please manual add in the SSH:
Login the SSH,

  1. Create the file: vi /etc/firewall.user
    iptables -w -t nat -I PREROUTING -i br-lan -p udp --dport 53 -j DNAT --to 10.0.0.1

    image
    image918×465 5.35 KB

  2. chmod 755 /etc/firewall.user

  3. add the custom rule in the /etc/config/firewall:

config include 'user_script'
        option type 'script'
        option path '/etc/firewall.user'
        option reload '1'
        option fw4_compatible '1'

image
image971×464 10.8 KB

  1. reboot OR /etc/init.d/firewall restart
24

I modified it that should be:

iptables -w -t nat -I PREROUTING -i br-lan -p udp --dport 53 -j DNAT --to 10.6.0.1

image
image1789×1273 227 KB

NOW IT WORKS!!!!!!!
I can see in ADH devices connected to GL-X750

25

Not, but it works!

image
image1129×1732 118 KB

27

Someone in other forum told me:
The redirection rule you added:

Code:

iptables -w -t nat -I PREROUTING -i br-lan -p udp --dport 53 -j DNAT --to 10.6.0.1

Only covers udp dns packets, which most dns requests are, but not all. Some are tcp. For completeness you should also add:

Code:

iptables -w -t nat -I PREROUTING -i br-lan -p tcp --dport 53 -j DNAT --to 10.6.0.1
1 Like
28

Just one question. If I disable the WG Inhaven internet. So I can only navigate with wireguard running.

If i want to navigate without VPN. What I have to do??

Or better, how I can do if I want that one device connected to GL inet doesn’t pass by VPN.

29

That is because you asked for it :wink:
You want to send all DNS traffic to AdGuard Home on the other side of the VPN tunnel - which will cause no DNS when the connection is down.

I would highly recommend to redesign your network and needs …

1 Like
30

Ok. That is right.

But For all devices it works perfect. But I have one stream player (fire stick from Amazon) and it sometimes stops playing. I need more speed for that. So, how I can vpn just for firestick?

31

In your setup this isn't possible because it would break your DNS. So after you fixed your DNS (so every side is able to get DNS - no matter if VPN is enabled or not) you can switch the VPN Proxy Policy to exclude your device: VPN Dashboard - GL.iNet Router Docs 4

32

I will see