Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Browsing security web service #4121

Closed
bcookatpcsd opened this issue Jan 10, 2022 · 4 comments
Closed

Browsing security web service #4121

bcookatpcsd opened this issue Jan 10, 2022 · 4 comments

Comments

@bcookatpcsd
Copy link

image

I have multiple outbound links, and lost my main link where DNS routes out for recursion.

I forwarded recursion to another machine on the other side of the network.

These queries (security web service) do no go through the specified upstream, but seem to route instead.

By not having a working default route on the machine running adguard, no recursion was possible until I unchecked this box.

sigh

~ 20 minutes

Can these queries use the provided upstream?

Thank you in advance.

@DandelionSprout
Copy link
Member

DandelionSprout commented Jan 20, 2022

I remember from last year that the AdGuard team is very secretive about how the Browsing Security module works, and which entries they use.

Even my attempt at reverse-engineering their entries ever only got to maybe 1/1000th as many entries as what they use.

@bcookatpcsd
Copy link
Author

When it stops working, it's crippling.

After I'm done w/ my temper tantrum, I might try AGH again..

I just went back to unbound and hblock.

It doesn't have graphs, but it does have the allure of logs to debug problems..

I would imagine they are using Quad9 on the other side of their service.

https://exchange.xforce.ibmcloud.com/

@ainar-g
Copy link
Contributor

ainar-g commented Jan 20, 2022

Hello. Yes, the safe browsing and parental control services currently use the hardcoded upstream of AdGuard DNS servers. After all, it uses the AdGuard malware / adult website database.

@ameshkov, how about allowing to set custom upstreams for the situations involving proxies?

@ameshkov
Copy link
Member

I don't really understand what would custom upstream solve here since you would still need to get to AG DNS to make the query.

Also, this is an optional feature disabled by default, no one is forced to use it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants