Hmmm.. You should really add some firewall rules to allow only those clients that you want to query this DNS. Reason is because this server can be use for Amplification Attacks against others.
If you’re supporting family, would it be better to have the DNS address at the device level not the router level? Would that make it easier to determine the specific clients using the service and then set client specific rules?
If you're looking for specific devices, then sure. But if you want to block your smart devices that might not support custom DNS, then you'd want to do it at the router level.
My question is im running adguard home on 2 rasbarry pie one master and one backup, can I run the adguard home on the linode and then close down my rasbarry pies or is it a bad idea
i run one Adguard on my home box and a second one on linode. Then make the local my dns server 1 and linode my DNS server 2. Now I can reboot the box and still be protected...
I'm going to attempt this too! Question, with Linode, can you setup rules for the webgui to be accessed by your home IP ? Example if anyone knows your dns ip your using and types in :3000 they get to the portal. Can we source restrict that to say your "HOME" wan ip ?
You selected 1 cpu shared along with other specs. Afterwards inside the cli of the VPS, after you issued the script for the installation of AdGuard, it downloaded the package for amd64 cpu type. Where in the linode options during creation of the VPS is visible what kind of cpu is that one logical core? amd64? armv7? armv9? arm64?
I come to see the router DNS configuration but to be fair.. its unclean i don't know what to do with my TP-Link ruter and how to add this AdGuardHome dns to works :(
I have two vps instances. One with wireguard and another one with adguard home. So port 53 is only open to wg0 interface, so no risk or DNS flooding there. if you want to know more, let me know. You could do this setup on one vps by using docker, but to be honest I still struggle with network config in docker and I don't want to screw the network setting for the wireguard server (docker overrides iptables rules set in wireguard and ufw)
@@danucc Thanks for your reply. Yes would be interested in the setting with the 2 instances. Don`t know if this is relevant, but I want to use adguard only with DoT on Port 853.
So I noticed when you selected Private IP address you actually didn’t use the private IP that linode generates when you added it to your Ubiquiti dashboard. What is the purpose of generating a private IP if the public IP is the one you used for you DNS pointer? because when I look at my dashboard the IP address at the top in summary (18:32) is listed as public under the network tab, while the Private IP is entirely different. Any enlightenment would greatly appreciated!
I know this is an old video, but I have a question. I have the tp-link AX4400 and at the part where you go into your router to enter the Linode IP address I got a little confused. I have DHCP enabled, I see the IP address range followed by the default gateway and primary and secondary DNS. Does the Linode IP address go into the Primary DNS spot? Also, this was a fantastic video!
You're 100% spot on! Your Linode IP address will go in the Primary DNS spot. Thing to note is that if your Linode goes offline, you'll lose internet access at home until either the Linode comes back up or you change the primary DNS to something (or nothing) else. :)
@@DBTechYT You're the man! Nailed it in one shot with your video. I had a feeling I did it right, but seeing a different router threw me off. Thank you for the response and the awesome walk through!
@@DBTechYT Last question ill ask. Seems to be working flawlessly on my computer, but I am still being littered with ads on my iPhone in safari. I've gone through about 50 different websites, and probably another 40 reddit posts and everything points to installing adguard on my iPhone. Any suggestions?
@@Fractured-Exe I have basically no experience with Apple products, but you might go into your network settings and make sure that your DNS is set manually to your Linode IP address. Something might be trying to bypass the DNS it's getting from your router.
Hi DB Tech, what is the point of the private IP when you created the linode vm? From what i saw, it just creates a local interface with a private ip on that vm, that you did not set or used for anything specifically. Is there any reason for adding that to linode ?
@@DBTechYT thank you. But i still don't get it. For the dns we have the public ip of the linode vm. That is the ip we get and set in our local router or pc or anything else that we want to use adguard. Then for what do we use the ip with 192.168....
@@DBTechYT that is the public ip. I believe we are confusing the public ip with the private ip. The public one is is the one accessible from internet, the one exactly like you said, that you set on your router as DNS server, and the private one is the one with 192.168.xxx.xxx - ex. 192.168.163.40, that can't be accessed from internet but only from inside linode network vm.
Hey! @DB Tech Is there any way of setting up sync between one instance on macvlan network and other on seperate server (raspberry pi)? I followed your guide on setting up Adguard in macvlan network. I get these errors in log: ERROR sync sync/sync.go:99 Error getting origin status ... connect: no route to host"} . I've even tried using ORIGIN_APIPATH variable to point exactly at directory. No luck so far... Thanks for help!
Love the video was able to get it running in no time
awesome tutorial - thank you .got mine working.
Hmmm.. You should really add some firewall rules to allow only those clients that you want to query this DNS.
Reason is because this server can be use for Amplification Attacks against others.
That's a good idea
you know how i did this in linode? I starting to discover this world now
Videos started looking more awesome! All the best, new place for videos looks nice!
Thank you so much!! I've super excited! :)
Great video, how does it work if there is a site or access is being blocked through Ad guard but you need to whitelist it?
then you add that site to the allow list
If you’re supporting family, would it be better to have the DNS address at the device level not the router level? Would that make it easier to determine the specific clients using the service and then set client specific rules?
If you're looking for specific devices, then sure. But if you want to block your smart devices that might not support custom DNS, then you'd want to do it at the router level.
@@DBTechYT thanks for the quick reply!
How do you Enable reverse resolving of clients' IP addresses? I tried on a local installation and on a vps. I cannot make it work
My question is im running adguard home on 2 rasbarry pie one master and one backup, can I run the adguard home on the linode and then close down my rasbarry pies or is it a bad idea
i run one Adguard on my home box and a second one on linode. Then make the local my dns server 1 and linode my DNS server 2. Now I can reboot the box and still be protected...
That's a great idea!
When I set this up, it's only listing internal ips I can connect to and not the external ip addresses. ports are open but I cannot connect.
Thanks for the excellent tutorial, I tried to install adward on cloudron but I don't know why it is not blocking the filters on my computer
can you run adguard and other applications simultaneously on a linode instanse? For example freeNAS and adguard home?
Do you know if the Linode you create for this has to be dedicated to AdGuard Home and cannot be shared with other services on the Linode?
I'm going to attempt this too! Question, with Linode, can you setup rules for the webgui to be accessed by your home IP ? Example if anyone knows your dns ip your using and types in :3000 they get to the portal. Can we source restrict that to say your "HOME" wan ip ?
With ufw or maybe whitelist your cidr
@@bygalaxy115 ufw ?
@@JasonsLabVideos search it up its the integrated firewall on ubuntu
You selected 1 cpu shared along with other specs. Afterwards inside the cli of the VPS, after you issued the script for the installation of AdGuard, it downloaded the package for amd64 cpu type. Where in the linode options during creation of the VPS is visible what kind of cpu is that one logical core? amd64? armv7? armv9? arm64?
They're all amd64
I come to see the router DNS configuration but to be fair.. its unclean i don't know what to do with my TP-Link ruter and how to add this AdGuardHome dns to works :(
I also installed Adguard on a public VPS. How do you protect your adguard instance getting flooded for DNS attacks?
I have two vps instances. One with wireguard and another one with adguard home. So port 53 is only open to wg0 interface, so no risk or DNS flooding there. if you want to know more, let me know.
You could do this setup on one vps by using docker, but to be honest I still struggle with network config in docker and I don't want to screw the network setting for the wireguard server (docker overrides iptables rules set in wireguard and ufw)
@@danucc Thanks for your reply. Yes would be interested in the setting with the 2 instances. Don`t know if this is relevant, but I want to use adguard only with DoT on Port 853.
@@danucc Would Appreciate if you could give more details.Thx
@@danucc This is the way I'm using it. WireGuard + AdGuard on a VPS, no ports open, only the VPN one.
So I noticed when you selected Private IP address you actually didn’t use the private IP that linode generates when you added it to your Ubiquiti dashboard. What is the purpose of generating a private IP if the public IP is the one you used for you DNS pointer? because when I look at my dashboard the IP address at the top in summary (18:32) is listed as public under the network tab, while the Private IP is entirely different. Any enlightenment would greatly appreciated!
Also curios on this do you have an answer?
I know this is an old video, but I have a question. I have the tp-link AX4400 and at the part where you go into your router to enter the Linode IP address I got a little confused. I have DHCP enabled, I see the IP address range followed by the default gateway and primary and secondary DNS. Does the Linode IP address go into the Primary DNS spot? Also, this was a fantastic video!
You're 100% spot on! Your Linode IP address will go in the Primary DNS spot. Thing to note is that if your Linode goes offline, you'll lose internet access at home until either the Linode comes back up or you change the primary DNS to something (or nothing) else. :)
@@DBTechYT You're the man! Nailed it in one shot with your video. I had a feeling I did it right, but seeing a different router threw me off. Thank you for the response and the awesome walk through!
Hell yes!! That's awesome!! Glad the video was helpful :)
@@DBTechYT Last question ill ask. Seems to be working flawlessly on my computer, but I am still being littered with ads on my iPhone in safari. I've gone through about 50 different websites, and probably another 40 reddit posts and everything points to installing adguard on my iPhone. Any suggestions?
@@Fractured-Exe I have basically no experience with Apple products, but you might go into your network settings and make sure that your DNS is set manually to your Linode IP address. Something might be trying to bypass the DNS it's getting from your router.
Hi DB Tech, what is the point of the private IP when you created the linode vm?
From what i saw, it just creates a local interface with a private ip on that vm, that you did not set or used for anything specifically.
Is there any reason for adding that to linode ?
It's so you can have a dedicated IP to point your DNS settings to
@@DBTechYT thank you. But i still don't get it. For the dns we have the public ip of the linode vm. That is the ip we get and set in our local router or pc or anything else that we want to use adguard. Then for what do we use the ip with 192.168....
In your router, where you can set your custom DNS: put the Linode IP there. That's it.
@@DBTechYT that is the public ip. I believe we are confusing the public ip with the private ip. The public one is is the one accessible from internet, the one exactly like you said, that you set on your router as DNS server, and the private one is the one with 192.168.xxx.xxx - ex. 192.168.163.40, that can't be accessed from internet but only from inside linode network vm.
Hey! @DB Tech Is there any way of setting up sync between one instance on macvlan network and other on seperate server (raspberry pi)? I followed your guide on setting up Adguard in macvlan network. I get these errors in log: ERROR sync sync/sync.go:99 Error getting origin status ... connect: no route to host"} . I've even tried using ORIGIN_APIPATH variable to point exactly at directory. No luck so far... Thanks for help!
I haven't tried your specific setup, but have you looked at this video: th-cam.com/video/oTBJ79mMYNA/w-d-xo.html
@@DBTechYT Yes. I did exactly what you in that video. As I said I keep getting the same error.
There are so many pi hole type blocks. What's your favorite? I think you have 3 different videos on ways to do it.
I prefer using AdGuard home if only because I like the interface better
good works
Your Test Lab IP third octet.. nice.. 🤣
😉
rdns doest work :(
i tried this on Azure and it doesn't work
I guess I'm not super surprised by that since they are different platforms