DNS LEAK ADguard bypass selected own "Upstream DNS servers"

[klisza1993]

Prerequisites

• [X] I have checked the Wiki and Discussions and found no answer

• [X] I have searched other issues and found no duplicates

• [X] I want to report a bug and not ask a question or ask for help

• [X] I have set up AdGuard Home correctly and configured clients to use it. (Use the Discussions for help with installing and configuring clients.)

Platform (OS and CPU architecture)

Linux, AMD64 (aka x86_64)

Installation

GitHub releases or script from README

Setup

On one machine

AdGuard Home version

v0.107.34

Action

I have notice that during configuring firewall "fortinet" i couldnt access internet. Started digging and issue is that, im using my own "Upstream DNS servers" with DoH and DoTLS, and somehow Adguard is bypassing my servers cuzing DNS LEAKE. You can see logs from my firewall, and if i'll not pass"dns-family.adguard.com" then im cut off from internet, where im only allowing my own DNS mentioned before.. Solution to this was to disable protection i GUI, but is it ok, that it behaves like this way.. screenshot of what i had to disable:

Screenshot of potential dns Leak

Screenshot of my own rule allowing only my desired DNSs - which isnt working.

Expected result

...

Actual result

..

Additional information and/or screenshots

No response

[bayasdev]

Disable safe browsing nor parental control since it works by making DoH queries to Adguard DNS

[EvilBox]

Confirmed. Adguard is leaking. I did turn off features:

1. Safe browsing
2. Parent control
3. Safe search
4. and push "Disable protection" button on Dashboard

I wrote only my private DNS (without any cryptography, just classic dns) on "Upstream DNS servers" and I get dns.adguard-dns.com domain in DNS Leak test

[klisza1993]

Confirmed. Adguard is leaking. I did turn off features:

1. Safe browsing
2. Parent control
3. Safe search
4. and push "Disable protection" button on Dashboard

I wrote only my private DNS (without any cryptography, just classic dns) on "Upstream DNS servers" and I get dns.adguard-dns.com domain in DNS Leak test

Ooh i had true.. is it mention in documentation simewhere? I did sesrch but didnt find. Btw, if you disable protection then agh i usless ;)

[ghost]

Hi there, are you still experiencing this?