RT2600ac Safe Access on router and Pi-hole on NAS

Currently reading
RT2600ac Safe Access on router and Pi-hole on NAS

111
36
NAS
DS1618+, DS918+
Router
  1. RT1900ac
  2. RT2600ac
  3. MR2200ac
Operating system
  1. Windows
Mobile operating system
  1. Android
As I own the Synology RT2600ac router and I like the Safe Access package there (mainly for the parental control features), I have question: would it be possible to use Safe Access on my router and pi-hole on my NAS (in Docker) in the same time? Would this be possible? If yes, then how to configure them both (DNS etc.) to work properly? I also have the DoH (DNS over HTTPS) via Cloudflare set up in my router (SRM).
I would be very happy for any advice for this.
 
If you want to use AdGuard on your network, the first thing you need to do is disable DoH on your router (AdGuard can do this instead), or else you cant set DHCP clients to use AdGuard as DNS.

I have very bad experience with using Safe Access in combination with a local DNS service, so I can't comment anyrthing further than this as I've disabled the packages on my routers.
 
From memory of setting up Safe Access: Safe Access intercepts DNS requests sent to the router and it applies the access policy to the requested URLs. For ones that it deems as OK it then uses SRM's own Internet DNS servers.

If you want to use a local DNS server then you'll have to set SRM's Internet DNS server settings to point to your local DNS server (not a DNS server on the Internet).

If you run DNS Server on SRM you still won't access it when running Safe Access unless SRM's Internet DNS server setting is set to the router itself.

I run a local DNS and have set SRM's DNS to be itself plus OpenDNS (as a fallback). My SRM DNS Server is a slave zone for a primary on DSM's DNS Server, but you could point SRM to PiHole, or whatever you like.
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Similar threads

On a Windows 10 Enterprise in Edge browser when I try to enter Safe Access it says the same, just more...
Replies
4
Views
1,392
  • Question
User defined Destination NAT (DNAT) /Source NAT (SNAT) is what is needed. My last router had this and...
Replies
1
Views
1,904
Safe Access is an outbound access control mechanism, meaning that it controls requests coming from your...
Replies
5
Views
1,938
  • Question
Fredbert, thanks a lot! Your primary/secondary DNS configuration did the trick! Works!
Replies
7
Views
2,082
I've already posted this in Synology official forum, but maybe here I get more help, or quicker :-) I'm...
Replies
0
Views
1,037
Interesting. It’s likely this is just a one off. It seems the wired devices I could see before the upgrade...
Replies
2
Views
1,968
When you are considering about bridge mode in the exist Asus router then 2200 as primary managed router =...
Replies
5
Views
3,249

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Back
Top