adguard returns 400 error when wireguard enabled

[plord12]

I have adguard and wireguard installed on my mac. When away from home I start wireguard to access the servers on my home network.

Recently, however, I've seen the website return 400 -

Changing adguard from "Network Extension" to "Automatic Proxy" works around the issue. However if would be great, of course, if both worked better with each other.

The Android versions of adguard + wireguard don't show this issue.

Adguard version: 2.12.1.1398 Wireguard version: 1.0.16 (27) Firefox version: 119.0 (64-bit) MacOs version: 14.0 (23A344)

[AlexandrPkhm]

Hi @plord12

Unfortunately, we have not been able to reproduce the problem. Could you please let us know if the 400 error only appears on certain pages? Also, how often does it occur?

To troubleshoot this issue, we would also need to get the application logs. Here's what we need from you:

1. Click AdGuard icon in the menu bar --> Gear --> Advanced --> Logging --> Logging level --> Debug;
2. Reproduce the issue and remember the exact time it happened;
3. Menu --> Advanced --> Logging --> Export Logs and System Info...;
4. Send the archive to apple@adguard.com and mention this issue number in the subject.

[plord12]

On 26 Oct 2023, at 10:49, Alexandr @.***> wrote:

Hi @plord12 https://github.com/plord12 Unfortunately, we have not been able to reproduce the problem. Could you please let us know if the 400 error only appears on certain pages?

I only have the one website on my internal home network to test with. Its something like

Browser —> Wireguard vpn —> home network —> home assistant

Also, how often does it occur?

Every time when van’ed in to my home network from the internet.

To troubleshoot this issue, we would also need to get the application logs. Here's what we need from you:

Click AdGuard icon in the menu bar --> Gear --> Advanced --> Logging --> Logging level --> Debug; Reproduce the issue and remember the exact time it happened; Menu --> Advanced --> Logging --> Export Logs and System Info...; Send the archive to @.*** and mention this issue number in the subject.

Done

---

Peter Lord

@.> https://signal.me/#p/+447867970260 https://telegram.me/PeterLord https://github.com/plord12 @.>

[AlexandrPkhm]

Hi @plord12

Unfortunately, we have not received a log archive from you. Could you please resend it to apple@adguard.com.

[plord12]

re-sent.

On 30 Oct 2023, at 11:11, Alexandr @.***> wrote:

Hi @plord12 https://github.com/plord12 Unfortunately, we have not received a log archive from you. Could you please resend it to @.***

— Reply to this email directly, view it on GitHub https://github.com/AdguardTeam/AdguardForMac/issues/1325#issuecomment-1784965439, or unsubscribe https://github.com/notifications/unsubscribe-auth/APEZOZZY7DULFKR3FW3V2TTYB6DN7AVCNFSM6AAAAAA6IWQLX6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTOOBUHE3DKNBTHE. You are receiving this because you were mentioned.

---

Peter Lord

@.> https://signal.me/#p/+447867970260 https://telegram.me/PeterLord https://github.com/plord12 @.>

[AlexandrPkhm]

Hi @plord12

We've looked into your logs. It is likely that one of "Stealth mode" features is incompatible with your web server.

You have Protect from DPI and Mask IP address stealth mode options on, and one of them is likely causing this issue. You may try to set stealth.antidpi.http.split.fragment.size to 0 in AdGuard → Settings → Advanced → Advanced settings, or turn off Protect from DPI completely.

When you are in local network, AdGuard does not touch this site because network.filtering.localnetwork option in Advanced settings is off. If you don't want to filter your private network in VPN mode too, you may add 192.168.0.0/16 to network.extension.route.exclude option in Advanced settings.

[plord12]

Many thanks.

I disabled “Mask your IP address” and access to the server started working again.

Pete

On 13 Nov 2023, at 17:34, Alexandr @.***> wrote:

Hi @plord12 https://github.com/plord12 We've looked into your logs. It is likely that one of "Stealth mode" features is incompatible with your web server.

You have Protect from DPI and Mask IP address stealth mode options on, and one of them is likely causing this issue. You may try to set stealth.antidpi.http.split.fragment.size to 0 in AdGuard → Settings → Advanced → Advanced settings, or turn off Protect from DPI completely.

When you are in local network, AdGuard does not touch this site because network.filtering.localnetwork option in Advanced settings is off. If you don't want to filter your private network in VPN mode too, you may add 192.168.0.0/16 to network.extension.route.exclude option in Advanced settings.

— Reply to this email directly, view it on GitHub https://github.com/AdguardTeam/AdguardForMac/issues/1325#issuecomment-1808649914, or unsubscribe https://github.com/notifications/unsubscribe-auth/APEZOZZ4AJXK2P43BVLBNMLYEJK2RAVCNFSM6AAAAAA6IWQLX6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQMBYGY2DSOJRGQ. You are receiving this because you were mentioned.

---

Peter Lord

@.> https://signal.me/#p/+447867970260 https://telegram.me/PeterLord https://github.com/plord12 @.>