starred/AdGuardHome

Fork 0

mirror of https://github.com/AdguardTeam/AdGuardHome.git synced 2026-03-04 00:01:12 -05:00

Disabling Plain DNS if DNS-over-Plain-HTTP is used or no DNS used at all #4940

New issue

Open

opened 2026-03-04 05:41:15 -05:00 by deekerman · 3 comments

deekerman commented

2026-03-04 05:41:15 -05:00

Owner

Originally created by @ammnt on GitHub (Dec 10, 2023).

Prerequisites

I have checked the Wiki and Discussions and found no answer
I have searched other issues and found no duplicates
I want to request a feature or enhancement and not ask a question

The problem

We can not disable plain DNS if we use DoH via unenctypted DoH behind reverse proxy.

Proposed solution

Add ability to disable plain DNS if we use DoH behind proxy like Cloudflare, NGINX etc.

Alternatives considered and additional information

No response

Originally created by @ammnt on GitHub (Dec 10, 2023). ### Prerequisites - [X] I have checked the [Wiki](https://github.com/AdguardTeam/AdGuardHome/wiki) and [Discussions](https://github.com/AdguardTeam/AdGuardHome/discussions) and found no answer - [X] I have searched other issues and found no duplicates - [X] I want to request a feature or enhancement and not ask a question ### The problem We can not disable plain DNS if we use DoH via unenctypted DoH behind reverse proxy. ### Proposed solution Add ability to disable plain DNS if we use DoH behind proxy like Cloudflare, NGINX etc. ### Alternatives considered and additional information _No response_

deekerman added the

enhancement

external libs

labels

2026-03-04 05:41:15 -05:00

deekerman commented

2026-03-04 05:41:19 -05:00

Author

Owner

@ainar-g commented on GitHub (Dec 11, 2023):

I'm not even sure any addresses should be required to disable plain DNS. The current requirement of encrypted addresses is really just a limitation of dnsproxy, and we can probably remove it in the future.

@ainar-g commented on GitHub (Dec 11, 2023): I'm not even sure any addresses should be required to disable plain DNS. The current requirement of encrypted addresses is really just a limitation of `dnsproxy`, and we can probably remove it in the future.

deekerman commented

2026-03-04 05:41:19 -05:00

Author

Owner

@DandelionSprout commented on GitHub (Mar 25, 2024):

My experience with proxies are pretty much none, but would it help to somehow block port 53 on the proxy?

@DandelionSprout commented on GitHub (Mar 25, 2024): My experience with proxies are pretty much none, but would it help to somehow block port 53 on the proxy?

deekerman commented

2026-03-04 05:41:19 -05:00

Author

Owner

@Hello-World-Traveler commented on GitHub (Oct 29, 2024):

The server that adguard runs on, always has pain DNS, when that is turned off, adguard doesn't process any DNS from that server even without proxy. Is this a bug or do i need to do something in the linux server for DOH?

I understand that plain DNS will use 53.

Dig command

;; communications error to 127.0.0.1#53: connection refused
;; communications error to 127.0.0.1#53: connection refused
;; communications error to 127.0.0.1#53: connection refused

TLS and DOH is active. Version: v0.107.53

@Hello-World-Traveler commented on GitHub (Oct 29, 2024): The server that adguard runs on, always has pain DNS, when that is turned off, adguard doesn't process any DNS from that server even without proxy. Is this a bug or do i need to do something in the linux server for DOH? I understand that plain DNS will use 53. Dig command ``` ;; communications error to 127.0.0.1#53: connection refused ;; communications error to 127.0.0.1#53: connection refused ;; communications error to 127.0.0.1#53: connection refused ``` TLS and DOH is active. Version: v0.107.53

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/AdGuardHome#4940

No description provided.

Rows
Columns