RT2600ac Safe Access on router and Pi-hole on NAS

Currently reading
RT2600ac Safe Access on router and Pi-hole on NAS

25
7
NAS
DS1618+, DS918+
Router
  1. RT1900ac
  2. RT2600ac
  3. MR2200ac
Operating system
  1. Windows
Mobile operating system
  1. Android
As I own the Synology RT2600ac router and I like the Safe Access package there (mainly for the parental control features), I have question: would it be possible to use Safe Access on my router and pi-hole on my NAS (in Docker) in the same time? Would this be possible? If yes, then how to configure them both (DNS etc.) to work properly? I also have the DoH (DNS over HTTPS) via Cloudflare set up in my router (SRM).
I would be very happy for any advice for this.
 

Shadow

Subscriber
552
177
NAS
DS216+II, DS118, DS718+
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. Windows
Mobile operating system
  1. Android
If you want to use AdGuard on your network, the first thing you need to do is disable DoH on your router (AdGuard can do this instead), or else you cant set DHCP clients to use AdGuard as DNS.

I have very bad experience with using Safe Access in combination with a local DNS service, so I can't comment anyrthing further than this as I've disabled the packages on my routers.
 

fredbert

Moderator
NAS Support
Subscriber
1,700
692
NAS
DS1520+, DS218+, DS215j
Router
  1. RT2600ac
  2. MR2200ac
Operating system
  1. macOS
Mobile operating system
  1. iOS
From memory of setting up Safe Access: Safe Access intercepts DNS requests sent to the router and it applies the access policy to the requested URLs. For ones that it deems as OK it then uses SRM's own Internet DNS servers.

If you want to use a local DNS server then you'll have to set SRM's Internet DNS server settings to point to your local DNS server (not a DNS server on the Internet).

If you run DNS Server on SRM you still won't access it when running Safe Access unless SRM's Internet DNS server setting is set to the router itself.

I run a local DNS and have set SRM's DNS to be itself plus OpenDNS (as a fallback). My SRM DNS Server is a slave zone for a primary on DSM's DNS Server, but you could point SRM to PiHole, or whatever you like.
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Trending threads

Top