Getting crazy adding the adlist

First of all here my settings

  • 2024-12-06 17:22:59 by RouterOS 7.16.2
# software id = XE51-3KWQ
#
# model = CCR2004-1G-12S+2XS
# serial number = xxxxxx
/interface ethernet
set [ find default-name=sfp-sfpplus2 ] arp=proxy-arp name="LAN "
set [ find default-name=ether1 ] name=MNG
set [ find default-name=sfp-sfpplus1 ] name=WAN
/interface wireguard
add listen-port=17304 mtu=1420 name=VPN
/interface vlan
add interface=WAN name="PROVIDER VLAN" vlan-id=XXX
/interface pppoe-client
add add-default-route=yes disabled=no interface="PROVIDER VLAN" name=PROVIDER user=\
    Xxxxxxx
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.100.2-192.168.100.254
/ip dhcp-server
add address-pool=dhcp_pool0 interface="LAN " lease-time=1d name=dhcp1
/port
set 0 name=serial0
set 1 name=serial1
/ip firewall connection tracking
set udp-timeout=10s
/interface wireguard peers
add allowed-address=172.22.0.2/24 interface=VPN name=GETAC Public key="redacted"
/ip address
add address=192.168.100.1/24 interface="LAN " network=192.168.100.0
add address=172.22.0.1/24 interface=VPN network=172.22.0.0
/ip cloud
set ddns-enabled=yes ddns-update-interval=1m
/ip dhcp-server lease
add address=192.168.100.2 client-id=1:50:6b:4b:84:6:70 mac-address=\
    50:6B:4B:84:06:70 server=dhcp1
add address=192.168.100.3 client-id=1:50:6b:4b:7c:a6:20 mac-address=\
    50:6B:4B:7C:A6:20 server=dhcp1
add address=192.168.100.9 client-id=1:4e:da:85:4b:a0:8f mac-address=\
    4E:DA:85:4B:A0:8F server=dhcp1
add address=192.168.100.249 client-id=1:9c:93:4e:e9:47:be mac-address=\
    9C:93:4E:E9:47:BE server=dhcp1
add address=192.168.100.11 client-id=1:b4:2e:99:9b:99:b3 mac-address=\
    B4:2E:99:9B:99:B3 server=dhcp1
add address=192.168.100.12 client-id=1:b0:60:88:ad:5c:8c mac-address=\
    B0:60:88:AD:5C:8C server=dhcp1
/ip dhcp-server network
add address=192.168.100.0/24 dns-server=192.168.100.1 gateway=192.168.100.1
/ip dns
set allow-remote-requests=yes cache-size=40000KiB servers=1.1.1.1
/ip dns adlist
add ssl-verify=no url=\
    https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
/ip firewall nat
add action=masquerade chain=srcnat
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh address=192.168.100.3/32,172.22.0.2/32 port=9442
set api disabled=yes
set winbox address=192.168.100.3/32,172.22.0.2/32
set api-ssl disabled=yes
/ip ssh
set host-key-size=4096 strong-crypto=yes
/system clock
set time-zone-name=XXXX
/system identity
set name=Datacenter
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key

Probably I am missing something stupid but this thing is driving me crazy..

This is what I get when I try to do an nslookup

This are the scenarios:

First scenario

  • DNS IP in DHCP server set to 192.168.100.1
  • DNS in windows set to 192.168.100.1
  • Running "nslookup google.com 192.168.100.1
  • Results in server unknown/timeout
  • Running nslookup google.com
  • Results in server unknown/timeout

Second scenario

  • DNS IP in DHCP server set to 192.168.100.1
  • DNS in windows automatic
  • Running “nslookup google.com 192.168.100.1”
  • Results in server unknown/timeout
  • Running nslookup google.com
  • Results in server unknown/timeout

Third scenario

  • DNS IP in DHCP server set to 192.168.100.1
  • DNS in windows set to 1.1.1.1
  • Running “nslookup google.com 192.168.100.1”
  • Results in server unkmown/tineout
  • Running ‘nslookup google.com’ insted
  • Results in address 1.1.1.1 and a valid query

So I get no internet or no matches



I am probably missing out something stupid but I really cant deal with this anymore..I am going crazy

Just to say, I have deleted all of the firewall rules and nat rules because I want to exclude as much as possible

hello,

/ip firewall nat
add action=masquerade chain=srcnat

that masquerade option needs output interface parameters (ie. wan internet). otherwise any communication won’t work correctly.

Hi, thanks for replying!

What do you mean sorry? That rule is what makes me possible to connect to the internet.
What do I have to modify? As for now everything work perfectly aside this damned adlist

Man, I am literally on the verge of crying, thanks.
I informed myself more and pointed the nat rule only to my wan interface. Well, now my adlist is working correctly.

Thanks <3