Comment

Comment on Accessing Unbound DNS on my phone through Wireguard VPN

just_another_person@lemmy.world ⁨1⁩ ⁨day⁩ ago

I’m…totally lost here. You’re trying to use two different VPNs on your local network? If you want your Unbound device to be a VPN exit node for your network, why wouldn’t you just setup routes to make it your default gateway?

Using two different VPM tunnels like this is going to just cause routing issues all over the place if you’re already unfamiliar with how to setup the routing to begin with.

source

Sort:hotnew top

Evkob@lemmy.ca ⁨1⁩ ⁨day⁩ ago
I think you misunderstood part of my post, because there’s only one VPN tunnel, from the WG client on my phone to the WG server on my laptop.

I want my phone to use the Unbound DNS server, which is hosted locally on the same laptop that runs my Wireguard server.

source
- just_another_person@lemmy.world ⁨1⁩ ⁨day⁩ ago
  Ah, okay. If this is Android, just setup your Unbound host IP under ‘Private DNS’ on your phone then.
  
  Note: this will cause issues once you leave your home network unless your WH tunnel is available from outside. Set the secondary DNS to Mullvad or another secure DNS provider if that’s the case and you shouldn’t have issues once leaving the house.
  
  source
  - Evkob@lemmy.ca ⁨22⁩ ⁨hours⁩ ago
    Android doesn’t let me add an IP address under private DNS, it needs to be a domain (like dns.quad9.net rather than 9.9.9.9).
    
    I tried adding a quick DuckDNS domain to my reverse proxy towards port 53, where Unbound is listening. It works, as in I can nslookup using the DuckDNS domain on my desktop (or on my phone when not connected to Wireguard) but if I try to set that domain as my private DNS on Android it says it can’t connect.
    
    source
    just_another_person@lemmy.world ⁨22⁩ ⁨hours⁩ ago
    Okay, let me just clarify some stuff here because your language has been confusing.
    
    You’re using a “VPN”, but on a local network. When you say “VPN”, people assume mean you’re using a client to a remote location. That’s super confusing.
    
    For what you’re trying to do you don’t even need WG unless you mean to use your DNS server from elsewhere.
    
    Please clarify these two things, but I think you’re just complicating a simple setup for an ad blocking DNS server somehow, right?
    
    source
    -> View More Comments