[AGH 0.106.3 as Home Assistant addon] Filtering stopped working

[Stooovie]

Issue Details

Filtering stopped working. SOME traffic is obviously (seen in query log) going through AGH but not all. For example, when I go to www.imore.com from my desktop (a web mag filled with ads), I see a couple of blocked entries but NOT the imore.com domain itself. Happens with all websites. This is NOT CONSISTENT though - when I enter the same URL on my phone (same wifi), I DO see the imore.com domain.

Adult sites protection is usually ignored - sometimes I get the blocking screen instead, but more often than not I just get the porn site, unfiltered.

• Version of AdGuard Home server:

  • 0.106.3

• How did you install AdGuard Home: Home assistant 2021.11.5 add-on 4.2.0 (Home Assistant OS running on RPi4). HA Supervisor 2021.10.8. HAOS 6.6. Everything fully updated.

• How did you setup DNS configuration: as DNS server on router. Worked fine for two years.

• If it's a router or IoT, please write device model: TP-LINK Archer AX10

• CPU architecture: ARMHF

Expected Behavior

All traffic to go through AGH and filtered according to blocklists.

Actual Behavior

SOME traffic goes through AGH and filtering mostly doesn't work.

Additional Information

Only noticed this today. Ads are not filtered. Nslookup google.com DOES list 192.168.0.181 (IP of the Pi running Home Assistant) as expected. I'm not aware of any updates or other changes.

UPDATE: I am seeing "Privacy warning - This network is blocking encrypted DNS traffic" in the iOS 15 Wifi settings. I think that's new. Any clues?

[Stooovie]

Also, these entries in the Query log look REALLY weird .

[ainar-g]

Hello and thank you for the report. What browsers do you use to check if AGH is working? Google Chrome, for example, is known to both create a bunch of random DNS queries and ignore the local DNS server.

UPDATE: I am seeing "Privacy warning - This network is blocking encrypted DNS traffic" in the iOS 15 Wifi settings. I think that's new. Any clues?

If this is to be believed, it means that that message appears if your network “does not meet certain requirements”. The article goes on to link to another article with recommendations.

[Stooovie]

Hi, Safari on iOS 15, Safari and Edge (= probably similar to Chrome) on MacOS 12 Monterey. It somehow sort of started working after powercycling the whole Pi but it's still kind of flaky and definitely not as good as before. I was able to get much better protection with the exact same filter lists before. I wish I could be more precise but I can't - the AGH addon for Home Assistant doesn't output much actionable logs, even with logging set to Debug.

The Privacy warning about WiFi on my iPhone was fixed by completely resetting network preferences on the device. That was probably a confluence of multiple things. That one is okay now.

Thanks for the notice on Chrome ignoring DNS. My random domain names in the AGH log sure looks like one of those Chrome logs, yes. I'll probably just switch back to Safari on my Mac, using Edge on a Mac is weird anyway :)

[ainar-g]

Another thing to consider: if you're using Apple Private Relay, it will use its own DNS servers by default. See #3248.

[Stooovie]

No, I'm not.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.