Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Linked IPs feature does not work when using encrypted queries #847

Open
trmdi opened this issue Nov 1, 2024 · 3 comments
Open

Linked IPs feature does not work when using encrypted queries #847

trmdi opened this issue Nov 1, 2024 · 3 comments
Labels
bug Something isn't working

Comments

@trmdi
Copy link

trmdi commented Nov 1, 2024

Issue Details

My public ipv4 is linked to my Adguard DNS device as instructed here [1]
I do a test by adding a User rule to rewrite example.com -> 1.2.3.4 in my Server setting and see that:

  • it works as expected for plain queries to 94.140.14.49
  • but not work for DoT/DoH queries. This means when the user chooses the 'Auto' option in Private DNS settings on Android or browsers, the Linked IPs feature will not work.

You can see that in this screenshot:
image
(dig +short example.com @94.140.14.49 +https behaves the same)

Is it a bug?

[1] https://adguard-dns.io/kb/private-dns/connect-devices/other-options/linked-ip/

@trmdi trmdi added the bug Something isn't working label Nov 1, 2024
@trmdi trmdi changed the title Linked IP does not work when using DoT Linked IPs feature does not work when using DoT Nov 1, 2024
@trmdi trmdi changed the title Linked IPs feature does not work when using DoT Linked IPs feature does not work when using encrypted queries Nov 2, 2024
@ameshkov
Copy link
Member

ameshkov commented Nov 2, 2024

For DoT you're supposed to use the domain name with your device ID

@trmdi
Copy link
Author

trmdi commented Nov 2, 2024

For DoT you're supposed to use the domain name with your device ID

Yes, I know that.
But the ip address is still useful in some cases, for example, you set it up in the DHCP server and any client joining your wifi network will benefit from it without doing anything else...
I think the servers for linked IPs (94.140.14.49 and 94.140.14.59) should do their job consistently, regardless of whether the queries are encrypted or not.

@trmdi
Copy link
Author

trmdi commented Nov 8, 2024

openDNS does the same for both with and without tls:
image
Both DoT and Linked IP are great features. It would be really great if AG could combine these two things.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants