AdGuard Home v0.100.2

We must apologize to everyone who expected v1.0 to come after v0.99 for tricking y'all a little bit. 😔 Please let the multiple new features and other useful changes be the saving Grace for poor v0.100. And there's a lot of new stuff, just look at it:

Blocking disguised trackers: #1185

You might have heard the news about third-party trackers disguised as first-party by using CNAME (or even A/AAAA) DNS records. This is not a problem for AdGuard Home now! 💪It checks if DNS responses contain any blacklisted IP addresses or CNAME records, and blocks DNS queries if there are any.

Improved Browsing Security and Parental Control services performance: #525

AdGuard Home provides an option to use AdGuard's own website rating web services to check if a domain is malicious or has adult content. The problem with these web services was that their performance was not ideal. Now we use AdGuard DNS servers instead, and the situation has greatly improved. Note that we're still using the privacy-preserving protocol that does not expose domain names to the web services. 😇

Fine-grained client settings: #821 #809

Here go two long-awaited features.

First of all, it is now possible to configure different DNS servers for different clients. For instance, you might want your kids to use a DNS server with some additional protection, and choose something less restrictive for yourself. 😏 This is not a problem anymore!

Second, a "client" may now have multiple identifiers: IP, MAC addresses or CIDR ranges. Why would you need that? For instance, a person may be using different devices and would like to have the same config for all of them. Also, this is an easy way to create "client groups" (Kids, Family, Guests, etc).

DNS server configuration: #1165

Here's what's included here.

1. Blocking mode. You can now choose among three options: NXDOMAIN, null IP, custom IP address. With the latter, you can now use something like pixelserv-tls to block DNS queries.
2. An option to send EDNS Client Subnet: #1091. This might be useful to those who run a public AdGuard Home server.
3. An option to configure the rate limit. It was always possible via the configuration file, but now it's also exposed to the UI.

Cloudflare is not the default resolver anymore: #1116

It couldn't make it till the official v1.0 release... 🥺 While we have nothing against this resolver per se, it may be not working good enough with some devices. You can learn more about why we did this here.

Breaking changes in the API

There are some incompatible changes in the API in this version. 🚨 Please read the changelog to learn more:
https://github.com/AdguardTeam/AdGuardHome/blob/master/openapi/CHANGELOG.md

Other changes and bug fixes

• [Changed] Update to Go v1.13: #1041
• [Added] Extract the client's IP address from HTTP headers in case of a reverse proxy: #1220
• [Added] Add Norwegian language to AdGuard Home: #1174
• [Added] An option to reset DHCP configuration: #1024
• [Fixed] Fix the order of modules initialization on startup: #1212
• [Fixed] 502 error after the AGH update: #1186
• [Fixed] DNS Settings description text is inaccurate: #1022
• [Fixed] Client name couldn't be resolved via rDNS if client has 2 names: #1230
• [Fixed] DHCP server ignores static assignment: #1005
• [Fixed] IPv6 address could not be used as client identifiers: #1075
• [Fixed] No paging in the DHCP static leases table: #1197
• [Fixed] User session issues: #1006 #1106 #1196
• [Fixed] Panic when requesting query log data: #1194

AdGuard Home v0.99.3

Move along citizens, nothing to see here 👮‍♂️🤚

Well, except for a regular minor update with a few fixes and improvements.

• Fixed a bunch of query log search issues
• Fixed a couple of crashes
• Some minor improvements

Here's the full changelog:
https://github.com/AdguardTeam/AdGuardHome/milestone/20?closed=1

AdGuard Home v0.99.2

Please don't mind us, just fixing some more bugs, nothing to look at, thank you very much.

• [Fixed] Crash when showing Dashboard in UI if authentication is disabled: #1119
• [Fixed] Skip corrupted entries in query log: #753

AdGuard Home v0.99.1

This hotfix is so hot, Scoville scale doesn't go high enough 🌶

A bunch of leftover bugs after the v0.99 release have been fixed here.

• [Changed] Enable DNS response compression: #1109
• [Fixed] Sign out button is shown even when not using AdGuard Home Authentication: #1093
• [Fixed] Unnecessary error alert: "New app version check is disabled by user": #1083
• [Fixed] Cannot update filters on Windows: #1088
• [Fixed] AGH does not resolve whois/rDNS info for non-A and non-AAAA queries: #1103
• [Fixed] Do not print the certificate and key contents to the log even when the verbose level is enabled: #1107
• [Fixed] Language issue: it looks as if "English" is selected even though the interface is in a different language: #1082
• [Fixed] Cannot write query log to file: #1115
• [Fixed] Error reconfiguring DNS server on Windows due to delayed UDP socket unbinding: #1098
• [Fixed] Incorrect content type headers on API responses: #1086

AdGuard Home v0.99.0

It took us a while to publish a new release of AdGuard Home... 😴

The good news is, it may take you even longer to read through the changelog, that's how many improvements there are in this update! So we'd better kick things off asap.

Login page

Do you know the two most important pieces of advice for dating? 🤔

1. Be attractive.
2. Don't be unattractive.

Turns out, they are applicable to software development as well! Finally, we have a beautiful login page instead of the ugly standard browser authentication window. HTTP basic auth is still around and will be useful for those who are using our API (yes, we have an API! Didn't you know?).

Whois data for the DNS clients

There's never too much data. You can now see more information about your DNS server clients. AdGuard Home gets country and the organization name from the whois data on the client IP.

Please note that this feature makes sense only for those who run AdGuard Home on a VPS.

Canary domain for Firefox: #988

Mozilla is going to make a questionable move and enable Cloudflare DNS for all Firefox 🦊 users from the US by default. We're not saying Cloudflare DNS is bad, but it's obvious to us that people should be able to choose what they want when it comes to DNS providers. Fortunately, there's an option to opt-out by blocking a special "canary" domain, and that's what AdGuard Home does.

Rework of the statistics screen and the query log: #415 #776

AdGuard Home had always been storing statistics and the query log just for the last 24 hours. It had been due to some implementation peculiarities, and certainly not because we were too lazy to undertake such a serious rework, no-no. 🙅 Long story short, it's much different now. See:

You can not only choose the query logs retention period in the settings; it's now possible to disable or clear it right from there.

You can also change the statistics retention period or clear statistics separately.

Also, we conducted small research, and it clearly tells that the most interesting events usually lie between requests 5001-10000. So the query log is no more limited to the last 5000 records!

Using the certificate & private key from a file instead of copy/pasting it: #634

You too are tired of replacing the 'c' and 'v' letters on your keyboard due to the amount of copy/pasting it takes every time when the certificate is renewed? 🤬 Not any longer, simply specify the path to the cert & the private key once and forget about it.

New translations: #1043

Now, huge thanks to everyone who's been helping us translate AdGuard! You people seriously rock! 🤟

Thanks to your efforts, today we're adding the following languages:

• Czech
• Danish
• German
• Indonesian
• Korean
• Italian
• Polish
• Slovak
• Portuguese (pt-BR)
• Dutch
• Slovenian
• Turkish

Notable bugfixes and improvements

• [Added] Encrypt/hash password in config: #394
• [Added] Option to set time span when filter lists must be checked for updates: #641
• [Added] Add response information to the "filtered" query log items: #912
• [Added] Allow configuring DNS cache size: #947
• [Added] Add TikTok and Epic Games to Blocked services: #950 #1010 (thanks to @onedr0p for the contribution!)
• [Added] Add option to instantly expire a DHCP lease: #833
• [Changed] Change the way AdGuard Home registers a system service: #1048
• [Fixed] DNS cannot function during Filter update: #928
• [Fixed] Using DoH upstream causes DNS timeout on WAN failover: #875
• [Fixed] Static DHCP lease disappears after the device connects: #1016
• [Fixed] DHCP static lease is not applied when the client reconnects: #1015
• [Fixed] No answer in AAAA log if set to DNS redirects: #989
• [Fixed] DHCP leases need to be added to the "Clients (runtime)" list: #979
• [Fixed] DHCP Range check: #848
• [Fixed] First-time run wizard won't work on [::]: #953

API: BREAKING CHANGES

There are some incompatible changes in the API in this version. Please read the changelog to learn more:
https://github.com/AdguardTeam/AdGuardHome/blob/master/openapi/CHANGELOG.md

AdGuard Home v0.98.1

A quick hotfix for a release is like a cherry on top of a tasty cake. And it turns out we are darn good cooks! 👨‍🍳

After this hotfix, the "Blocked services" settings won't reset every time you restart AG Home. You know, like they should have done in the first place. Bon appetit! 👌

AdGuard Home v0.98.0

Welcome AdGuard Home v0.98!

We're rapidly approaching the psychological milestone of v0.100 which may or may not mean something special. 🤔 For now, we have a couple of new big features to play with, and they are quite special in and of themselves. There are boring bugfixes too but who cares, let's look at pretty pictures! 🤩

DNS Rewrites: #818

This is a long-awaited feature requested by lots of users. In the previous versions, adding your own domain was only possible via custom filtering rules, but this has an obvious drawback: the domain appeared as blocked in the query log. 🤷‍♀️

Now there's no drawbacks, only upsides: query log stays tidy, and it's much easier to understand what's going on just by glancing over the Rewrites table.

Blocking access to popular services: #819

Here's a scenario: you tell your kid there will be no YouTube or Twitch until they do their homework. 😨 Instead of watching over their shoulder so that they don't sneak a fortnite stream on their phone, you can simply make a few clicks in AG Home and disable these apps just for a specific client. Parenting done right!

And that's only one example. Configure any client individually (by IP or MAC) or all at once, block access to specific web services or take no prisoners and block them all. Just don't have too much fun playing God! 🤪

Bugfixes and minor improvements

When composing an AG Home announcement, we operate by a simple rule: no screenshot -- no spotlight 🙅‍♂️
For the full list of other (minor) changes and bugfixes, go here: https://github.com/AdguardTeam/AdGuardHome/milestone/13?closed=1

AdGuard Home v0.97.1

What time is it? It's a hotfix time! 🌶 Just to be clear, we're not exactly happy about it, but it needed to be done asap.

By the way, fun fact: the more beta testers, the fewer hotfixes! 😮 So if you feel like moving to a beta build is a good idea (absolute madman!), get over to this page. We have beta builds for everything!

• [Fixed] DHCP: Check if the subnet mask is correct #887
• [Fixed] Windows: "Access denied" error on trying to remove a filter #878
• [Fixed] Crash when global setting 'SafeSearch' is off #880
• [Fixed] Filter rules were not unloaded after filter's checkbox has been unchecked #879

AdGuard Home v0.97.0

Hope you didn't get used to all these flashy look-at-all-these-new-features-and-pretty-screenshots types of releases because this time all you get is honest to God bug fixes. 🐞🔨 Well, almost: there have been a few spare [Added] tags lying around so we've found some use for them. We promise with the next release the changelog will be less like this 🐴 and more like this 🦄.

• [Added] Print DOH/DOT addresses if it's configured: #761

It is now a little bit easier to figure out how to configure your devices to use AdGuard Home as a DOH or DOT server.

• [Added] User-friendly client names -- using arp -a command: #826
• [Added] FreeBSD releases: #873
• [Added] An article about regexp usage in own filters: #721
• [Added] An option to check for updates forcibly: #815
• [Fixed] AGH does not notify about expiring certificate until the user opens encryption settings: #851
• [Fixed] panic: runtime error: invalid memory address or nil pointer dereference: #831
• [Fixed] Auto-update: remove backup directory after successful update: #801
• [Fixed] Allow URLs with IP addresses when adding a new filter subscription: #832
• [Fixed] Race on stop when running as a service: #799
• [Fixed] data race in dnsfilter: #807
• [Fixed] Error while making an rDNS lookup for 127.0.0.1: #838

AdGuard Home v0.96-hotfix

We have a good tradition 🎂 Whenever a new version of AdGuard Home gets released, it is required to wait one day and then release a hotfix. Because having bugs in AGH releases is a tradition, too. Hm, now that I think of it, it's not that good of a tradition 🤔 In fact, I don't like it at all! 😡 And you can help us get rid of it forever, now that Beta update channel is available 🎉

Let me now get serious for a minute and describe what was fixed in this update:

• [Fixed] An issue with forcing parental control for specific clients: #727#issuecomment-499593806
• [Fixed] Bootstrapping DOH and DOT uses system resolver on Windows: #770
• [Fixed] Wrong URL in the certificate expiration alert: #806

P.S. One a bright side, if you are using v0.96, you can now check out how the built-in update works. Please note that the update check is performed once in 8 hours.