Access a Blocked Service from a PC in the domain

[joel72265]

I want to grant access to Dropbox.com from Domain PC 2 but have been unsuccessful. Because PC 2 is in the kt.local domain its DNS query goes to the DC's and is blocked (Global Blocked Services). Any help would be appreciated, here is my setup

Domain PC 1.kt.local: DNS = 192.168.1.2X, 192.168.1.3X (Domain Controller, Forwarders = 192.168.1.23, 192.168.1.25) - All DNS requests work, Dropbox is blocked.
Domain PC 2.kt.local: DNS = 192.168.1.23, 192.168.1.25 (AdGuard) - Global Blocked Services work correctly but this PC needs access to Dropbox.com.

Adguard 1: 192.168.1.23
AdGuard 2: 192.168.1.25

AdGuard > Settings > DNS settings
Upstream DNS servers:
[/in-addr.arpa/]192.168.1.2X
[/in-addr.arpa/]192.168.1.3X
[/kt.local/]192.168.1.2X
[/kt.local/]192.168.1.3X

Private reverse DNS servers:
192.168.1.2X
192.168.1.3X

AdGuard > Filters > Blocked Services: Dropbox.com is blocked (Global)

AdGuard > Filters > Custom filtering rules
@@IP-PC-2 dropbox.com$important

AdGuard Version: v0.107.55

A similar discussion here #4982

[Dynamic5912]

Your custom filtering rule is wrong for a start.

Plus there's other domains to unblock other than just Dropbox.com

[joel72265]

can you share the correct 'custom filtering rule' ?

Dropbox.com is just an example, it could be any website on the 'Blocked Services' list

[Dynamic5912]

just for clarity, in the screenshot you sent, the 'Use Global blocked services' selector

a) should be to the LEFT, correct ?? or

b) should to the right (RED)

Left if you want it off.

[joel72265]

The PC was added as a Persistent client (Client Settings > Persistent client) and for that Client the 'Use Global blocked services' selector is already OFF.

[joel72265]

Domain PC 2.kt.local: DNS = 192.168.1.23, 192.168.1.25 (AdGuard) - even after ADDING the custom filtering rule, because PC 2 is in the domain (PC 2.kt.local) all kt.local queries are passed to the Domain Controller's which block the website.

[Dynamic5912]

Domain PC 2.kt.local: DNS = 192.168.1.23, 192.168.1.25 (AdGuard) - even after ADDING the custom filtering rule, because PC 2 is in the domain (PC 2.kt.local) all kt.local queries are passed to the Domain Controller's which block the website.

Then what you're trying to do is not going to work as the dns requests to AGH are coming from your DC and not the devices directly.

[joel72265]

yes, PC 2 => AGH => DC => (DC Forwarder => AGH) => the website is blocked. This is not working which is why I posted and wanted to know if there was another way to achieve this.

Thank you for your guidance and advice thus far.

[joel72265]

should I open this as a New Issue request ?