RT2600ac Safe Access on router and Pi-hole on NAS

Currently reading
RT2600ac Safe Access on router and Pi-hole on NAS

43
15
NAS
DS1618+, DS918+
Router
  1. RT1900ac
  2. RT2600ac
  3. MR2200ac
Operating system
  1. Windows
Mobile operating system
  1. Android
As I own the Synology RT2600ac router and I like the Safe Access package there (mainly for the parental control features), I have question: would it be possible to use Safe Access on my router and pi-hole on my NAS (in Docker) in the same time? Would this be possible? If yes, then how to configure them both (DNS etc.) to work properly? I also have the DoH (DNS over HTTPS) via Cloudflare set up in my router (SRM).
I would be very happy for any advice for this.
 

Shadow

Subscriber
689
245
NAS
DS216+II, DS118, DS718+
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. Windows
Mobile operating system
  1. Android
If you want to use AdGuard on your network, the first thing you need to do is disable DoH on your router (AdGuard can do this instead), or else you cant set DHCP clients to use AdGuard as DNS.

I have very bad experience with using Safe Access in combination with a local DNS service, so I can't comment anyrthing further than this as I've disabled the packages on my routers.
 

fredbert

Moderator
NAS Support
Subscriber
2,604
1,054
NAS
DS1520+, DS218+, DS215j
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. macOS
Mobile operating system
  1. iOS
From memory of setting up Safe Access: Safe Access intercepts DNS requests sent to the router and it applies the access policy to the requested URLs. For ones that it deems as OK it then uses SRM's own Internet DNS servers.

If you want to use a local DNS server then you'll have to set SRM's Internet DNS server settings to point to your local DNS server (not a DNS server on the Internet).

If you run DNS Server on SRM you still won't access it when running Safe Access unless SRM's Internet DNS server setting is set to the router itself.

I run a local DNS and have set SRM's DNS to be itself plus OpenDNS (as a fallback). My SRM DNS Server is a slave zone for a primary on DSM's DNS Server, but you could point SRM to PiHole, or whatever you like.
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Similar threads

Interesting. It’s likely this is just a one off. It seems the wired devices I could see before the upgrade...
Replies
2
Views
191
When you are considering about bridge mode in the exist Asus router then 2200 as primary managed router =...
Replies
5
Views
973
I got it working, I created a new profile, turned off the Internet schedule and only allowed the site that...
Replies
3
Views
481
There was some changes to DNS and Safe Access, with people wanting to use their own internal pi-hole...
Replies
1
Views
896
When in mesh mode the additional MR2200ac cannot be directly accessed, they are all controlled through the...
Replies
4
Views
147

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Trending threads

Top