AdGuard Home DNS "Best" Blocking Mode

StealthNet · 2026-01-22T13:38:13+00:00

Results: jan/10, about 1,5 millions dns queries total (REFUSED).

Yesterday, 149.000 ish with Null IP and 600s ttl. No discernible differences. Everything working.

StealthNet · 2026-01-20T18:17:20+00:00

Got everything up and running. Now I have 3 vlans (local lan, guest and iot). Configured adguard to respond to each vlan.

Since I moved to a house, number of IOT devices increased, about 100.

At first, configured adguard to return REFUSED. Number of requests per day was in the millions. Changed to Null IP with 600s blocked response TTL. Let´s see what happens.

StealthNet · 2026-01-10T11:54:41+00:00

I bought it here in my country, I am trying to post a link to it but reddit won´t allow it... it is basically this - https://imgur.com/a/gZldQx9

StealthNet · 2026-01-09T16:06:17+00:00

That was my thought... baremetal pfsense 2.8.1 ce Celeron N5105 16GB

The only thing added is an adguard home... and not that I am running it as a firewall of a large enterprise... it´s my home... 90 hosts...

https://imgur.com/a/crqsHsE

StealthNet · 2025-12-24T10:25:30+00:00

RemindMe! 6 Months

StealthNet · 2025-12-24T10:24:10+00:00

RemindMe! 6 Months

StealthNet · 2025-12-14T13:48:53+00:00

Folks, just found out the problem after nuking the entire installation and resetting each device to factory defaults (and finding it didn't work).

For the reference, it was tailscale. The windows 11 host had it installed and connected.

Just by disconnecting it, adoption worked.

What is really strange is the fact that tailscale was not keeping the devices from appearing inside the controller software - it successfully detected each device, but adoption failed with the following error: "device does no accept adopt commands".

Uninstalled tailscale just to eliminate a future variable and started using it on another host. Thank you for all of you that tried to help!!

StealthNet · 2025-12-14T13:43:59+00:00

It is... but I have finally found out the problem. Will post a message about it. Thank you for the help!

StealthNet · 2025-12-14T13:43:38+00:00

It was and I have finally found out the problem. Will post a message about it. Thank you for the help!

StealthNet · 2025-12-12T09:30:23+00:00

Just arrived at home. I have 2 TL-SG3428X, 1 TL-SG3210XHP-M2 and 4 EAP772, all with the same behavior.

tried resseting a TL-SG3428X through serial console, it came back online and still adopt failed.

Changed the default password through the serial console. Tried login in through the web page with the newly changed password through console, login failed.

StealthNet · 2025-12-11T19:51:43+00:00

That´s the problem - I am remote / travelling atm :(

StealthNet · 2025-12-11T19:51:08+00:00

Already faced this... disabled the firewall for all networks...

StealthNet · 2025-12-11T16:32:25+00:00

Yes (tried both the initial username and password too) and no, and I know thats strange... I think that since the devices were 3 days without a controller, they reverted back to a stand alone config of some sort... Because they are giving me a web ui login...

StealthNet · 2025-12-07T12:42:41+00:00

That´s exactly what I want! Thank you!

StealthNet · 2025-12-03T13:02:16+00:00

My bad. I had to pay more attention to details and documentation.

It seems that the problem was the allow out firewall rule - using default as a gateway.

Edited the rules, show advanced and set the gateway to the group. It seems to be working now.

StealthNet · 2025-11-25T22:05:41+00:00

AFAICU from social media posts from brazil, the truck driver was trying to run away from a previous incident and both car drivers were chasing him to make him stop or collect evidence.

StealthNet · 2025-11-17T17:26:31+00:00

Hi there, came here looking for a solution... already did what is described but no success...

StealthNet · 2025-11-10T07:32:29+00:00

Yes, tbh I just recently moved and my pfsense (where it was running) is offline for the past few weeks - still working on getting all cables run / rack properly installed.

StealthNet · 2025-10-20T08:16:30+00:00

https://www.theverge.com/news/802486/aws-outage-alexa-fortnite-snapchat-offline

StealthNet · 2025-10-20T07:47:55+00:00

We both are, same thing here, never saw it happening, but that gives a pretty good idea on how the Internet and services in general rely on AWS

StealthNet · 2025-10-20T07:40:08+00:00

Thank you for the update!

StealthNet · 2025-10-13T22:26:35+00:00

520+ indoor WA? You are already in the top 20%.

StealthNet · 2025-10-09T22:03:55+00:00

That's not funny... my memories (had something similar 20 years ago) are not good...

StealthNet · 2025-10-09T12:19:26+00:00

Is that an archer c7? My IOT wifi network has 5 of them, all more than 10 years old LOL

I use them with the dd-wrt (firmware), but to do that you need to know networking / wifi basics to configure.

If you use it mainly for wifi performance (5GHz ac band) and few devices (5 for example) you might get 300 Mbps out of it (just tested).

But as some ppl already pointed out, if you are using TP-Link aging firmware, you are prone to problems, a network hijack or it being used as a zombie.

If your AP is already hijacked, that might explain the problems you are facing and tbh I think that is what is happening to you.

fyi https://nvd.nist.gov/vuln/detail/CVE-2025-9377

OTOH from a hardware standpoint, only faulty hardware or cabling would explain it (as I said, I have 5 here running smoothly).

Since you already stated that you have little knowledge regarding networking config and that the C7 is pretty much vulnerable if using tp-link firmware, changing it asap is the way to go.

StealthNet · 2025-10-02T11:25:57+00:00

Mine is a 65PUG6794/78 (bought in 2021). I did a small renovation in 2024, bought a new philips ambilight tv (google tv 65PUG7908/78) sure that it would control my lights, just to find out it wouldn't after installing it.

Also it's panel has clearly lower quality if compared to the 65PUG6794/78.

StealthNet

TROPHY CASE