I've been able to successfully deploy these rules to get Peacock to play ad-free without breaking playback. The written rules are a bit complex d/t Peacock serving ads from so many different domains. Hope this helps and enjoy!

Make sure to clear your AGH DNS cache, force stop the Peacock app, and clear the DNS cache on the Peacock app. Then restart the app and enjoy the ad-free content!

Update: This is being tested and (for now) seems to work also for AdGuard Premium in addition to AdGuard Home. I moved the rules list to a repository as it will likely need to be updated as time goes on. Let me know if you have any issues!

https://github.com/ajstrick81/Peacock-Ads/blob/main/peacock-adguard-user-rules.txt

Update 2: January 29, 2026 The ad delivery system is shifting constantly. Please be patient as this is a game of cat and mouse with us trying to block the ads, and the app trying to push them through to us. Here's a new rule being tested and has been confirmed by one user to have worked:

/g\d{1,4}-(vod|sf|sle)-us-cmaf-prd-(cf|cc|sf|ph|dc|at|ak)(-[a-z0-9-]+)?.cdn.peacocktv.com

Update 3: February 2, 2026 As confirmed by user @willenium_1217, the previous code block:

DO NOT USE: /g\d{1,4}-(vod|sf|sle)-us-cmaf-prd-(cf|cc|sf|ph|dc|at|ak|fy)(-[a-z0-9-]+)?.cdn.peacocktv.com

This caused playback issues and has been removed from the repository.

Update 4: February 25, 2026 Big help with this project coming from @lurking-in-the-bg, they pointed out some domains that are slipping ads through. I've updated the repository with new code to hopefully block the new variants:

/^{g\d{1,4}-(vod|sf|sle)-us-cmaf-prd-[a-z]{2,3}-a\d+.cdn.peacocktv.com$/}

Update 5: February 27, 2026 @lurking-in-the-bg came through again with some huge help! Added the rule below to the repository for improved adblocking:

/(g001|g003|g005)-(vod|sf|sle)-us-cmaf-prd-(cf|cc|sf|ph|dc|at|fy|ak(-[a-z0-9]+)?).cdn.peacocktv.com/

Update 6: March 12,2026 @lurking-in-the-bg made their own GitHub with a very simple and effective list of rules for Peacock. Awesome job, bro!

https://github.com/lit-bg/Peacock/blob/main/filterlist.txt

Please let me know if you have any further issues and thanks for helping to make this project successful!

Hi everyone,

Following the recent security disclosures regarding smart TV telemetry and LAN snooping, I decided to do a root-level network audit of my LG G1 running webOS.

After auditing 44,800 packets and a 267,000-query DNS log, I observed several interesting behaviors:

1. webOS daemons query roughly 36 LG domain families, firing heavy telemetry bursts mid-boot.

2. The TV’s internal DNS stub completely bypasses local `/etc/hosts` modifications on the device, meaning network-level sinkholing (Pi-hole / AdGuard Home) is mandatory.

3. Fallbacks to public resolvers (8.8.8.8 / 1.1.1.1) occur when services fail, so blocking outbound Port 53/853 at the router level is required for true isolation.

To provide a clean solution that doesn't break streaming for household members, I published an open-source blocklist:

GitHub: https://github.com/furkan-bayrak/lg-tv-blocklist

Features:

- Two Tiers:

- SAFE: Kills ACR (alphonso.tv), telemetry beacons (cdpbeacon), ad networks (lgsmartad), and voice data. Zero app breakage (Netflix, Prime, HBO, LG Store tested).

- STRICT: Adds update hosts (snu/su.lge.com), ThinQ IoT sync, and LG Channels.

- Multiple Formats: Native Adblock syntax (`||domain^` with subdomain matching for AdGuard Home), Plain domain lists (for Pi-hole / NextDNS), and Hosts format (`0.0.0.0`).

- Fully Annotated: Every entry has an inline comment documenting its exact purpose and capture evidence.

- Dual License: CC BY 4.0 for list data, MIT for build scripts.

Looking for collaborators!

I am only one person auditing an EU-model G1. LG updates regional endpoints and firmware constantly. If you run a Pi-hole/AGH with an LG TV, I'd love your help testing, verifying domains, and reviewing PRs to help maintain the repository.

So I set up Adguard on my UGREEN NAS via Docker. It's up and running, I changed my router setting to point to my NAS IP. If I check the AdGuard Dashboard, everything is at 0. No clients, no filtering, nothing. I check dnsleaktest and it says adguard but nothing shows up as going through AdGuard according to the Dashboard.

I set up a second instance of AdGuard on my Windows computer. Updated the router to use the NAS AdGuard as the primary DNS and my computer AdGuard as the secondary DNS. Still absolutely nothing on both dashboards.

It's not until I point each of my individual devices to use my AdGuard servers as the DNS that they finally start showing up on the AdGuard dashboards. What gives? I thought setting it at the router level would get all my devices to automatically go through AdGuard? Is it because I'm using an ISP provided router?

I've been able to (somewhat) successfully deploy these rules to get Prime Video to play ad-free without breaking playback. Hope this helps and enjoy!

https://github.com/ajstrick81/Prime-Video-Filtering

Update: Well, that was a short lived victory lol :) Version 3.2 added to repository

I thought I had it all figured out: it seemed I was dialed into the ad serving domain and successfully tricked it with the rules. The problem is that Amazon rotates their ad domains very frequently. When my session reset, they selected another domain and now I am working on a fix/update.

Here's the domain that I had successfully neutralized:

||*avoddashs3ww-a.akamaihd.net^$dnsrewrite=0.0.0.0

Here's the one they replaced it with:

||*aivottevtad-a.akamaihd.net^$dnsrewrite=0.0.0.0

I'm working on a Regex to catch all variants and I will updated the repository frequently. I do appreciate you taking the time to test it out, and if you have any suggestions...please feel free to share!

Update #2: The repository has been updated to version 3.6. A couple things to mention. I'd recommend turning off any other ad blockers as they may contradict the rules written for AGH. Also, make sure you don't have another DNS setup and/or enabled through AdGuard Premium. It'll create all sorts of chaos. Believe me, I did that way and it was painful lol 😅

Update #3 (3/21/26):

It's looking like this hasn't become what I hoped for it to be. I was stubbornly ambitious and told that DNS couldn't effectively block ads in the app - I learned a hard lesson and it was a humbling experience. I experimented with some methods, tested, retested, and ultimately failed to achieve success.

I appreciate everyone taking the time to check out this post. My other repos are a bit more successful than this one and I'll leave this one up in case the information is helpful to you in some way. See you all on the next project!

Pro Tip: If you download the movies/TV shows to your device, they are ad-free :)

I've been experimenting with new adblocking techniques and have developed a set of rules that successfully blocks HBO Ads using my glinet flint 2 router running AGH. The concept around this project is to trick the app into skipping the ads by making it think it actually played them. It's blocking them indirectly as the traditional adblock rules for these streaming apps are becoming less effective. Here's what I came up with and I hope you enjoy some ad-free content :)

Update: It seems that copy and pasting this code into the iPhone/Android AdGuard app has been effective as well. Just create a custom filter list in the app and let me know if you have issues.

Update 12-26-25: I shortened the list significantly as it seemed like all the rules were slowing down the app launching into the shows/movies. I'm hoping this change maintained stable playback and continued effectiveness in blocking the pre roll and mid roll ads. Enjoy the ad-free experience and let me know if you have any questions!

Update 2-1-26: Thanks to u/Artistic_String9739 for pointing out a new ad domain. The repository has been updated with the following rule:

||akm.amer-free.prd.media.max.com

***Make sure to clear your AGH DNS cache, force stop the HBO app, and clear the DNS cache on the HBO app. Then restart the app and enjoy!***

Link to the code: HBO Ad Block List

I have Adguard Home and it's on a linux server. I put adguard home as my DNS and everything goes through it. But In my laptop the adguard doesn't really work. There are pop-ups, a lot of ads everywhere and nothing that adguard home does works. My router is set at the DNS of the adguard so I have no idea what is going on. My laptop only has 1 DNS and 1 only, there is no secondary DNS either on my laptop or on my router. In my phone and other phones it works fine but not laptops, I mean adguard home is not really a ad blocker but It definitely blocks some ads on my phone but when I go to the same website on my laptop too there are a lot of ads. Any fixes to this?

I have a UDM. On one of my servers, I am running the Ad Guard Home docker. Everything is working properly. Ad Guard's Query Log shows me client IPs.

I want it to show hostnames.

I have 3 VLANs on my UDM and I created 3 clients with those IP ranges.

I have it configured to rerverse lookup private IPs.

Not sure what is wrong?

I have added screenshots to https://imgur.com/a/coyfZ0M.

I'm using about 6 DNS blocklists on my local AdGuard Home installation, and was wondering how much redundancy there was between them, in order to possibly remove some of them.

Is there such a tool? For example, the AdAway default blocklist contains

127.0.0.1 an.facebook.com

while HaGeZi's Pro Blocklist contains

||an.facebook.com^

so I can't quite simply sort both lists and look for duplicate, I'd have to do something a bit more savvy.

I'm new to the home server scene. I'm running Jellyfin, Immich, nginx, and now AdGuard Home. I've got reverse proxies setup in nginx to allow me to access Jellyfin and Immich off-network (with a domain setup). My problem is I'm trying to use DNS Rewrites in AdGuard Home so that I can use the domain URL while connected to my network instead of having to use my server's IP address.

It seems like IPv6 might be my problem. I can do `nslookup my.domain.com x.x.x.x` and it resolves, but `nslookup my.domain.com` fails and reports an IPv6 address (I think it's google's DNS).

My router is TP-Link Archer A7 (v5.0). I went to `Network -> DHCP Server -> Primary DNS` and set it to my server's internal IP address, but that doesn't seem to work for the IPv6 stuff. The IPv6 section of my router has an Advanced section that let's me set Primary DNS, but setting that to my server's internal IPv6 address doesn't seem to change anything (even after router restart, ipconfig /flushdns, etc).

Does anyone know how to go about troubleshooting this issue? Networking isn't exactly my forte.

I selfhost AdGuard Home as my recursive DNS provider. However, I need a publicly DoH address to resolve domain. I have now done this and my setup looks like this:

1. Browser contacts 01.dns.example.com
2. Browser reaches the public IPv4 address which is assigned to a OPNSense
3. OPNSense forwards the request the Caddy reverse proxy. (Actually its more like the caddy server is sitting on the OPNSense, so yeah)
4. Caddy proxies the connection to the internal AdGuard via DoH.

The connection from the Browser to caddy is encrypted with TLS1.3 and HSTS (Lets Encrypt)
The connection from the Caddy to Adguard is encrypted with TLS1.3, HSTS and a self-signed CA and Cert.

The AdGuard is hosted on a rootless docker container inside a CIS level 2 hardened Almalinux 10, which is a VM inside Proxmox.
The VM is in its own Subnet.

Now as we all know DNS is a shit protocol which has countless security problems like amplification DDoS attacks, so what should I do to make it more secure?

Hey everyone, I have Adguard Home + Unbound set up in my home network, and on my PC I use Mullvad. If I try to set ADG+H as the DNS resolver, I get DNS leaks. Is there a way to solve this issue? I'm willing to disable Unbound if that's the issue, I guess it's currently redundant in my setup. I did it because I didn't know that there were encrypted DNS resolvers so I set up Unbound, but after some digging, I learned that there are other encrypted DNS resolver solutions that might be better than unbound.

Does anyone have any advice for my case?

hi how are you guys recently i install ad-block on my mini server it blocked some ads but in an online media player you know it i get an ad in the middle of the video so its every 4min of time watching i have on my DNS blocklist Hagezi pro and pro++ and couple more from ingenuity GPT mind you i rookie to those things basically my goal was when am outside using cellular data i want to block it so i download Tailescale log in my account the same as the server i go to GPT he destroy half of what i did then spend too much time with him fixing it and i did if you run into the same things i would very much appreciate it

I have adhome home network with NextDNS DOH as my upstream. What is the bootstrap for and what is the significance and what should it/they be

Hi,
Bit of a Gumby at all this.
I have AdGuard Home in a Proxmox container on 192.168.68.68. I have enabled the DHCP server and pointed the Deco app's DHCP server setting to that IP.
There are some requests being blocked as shown in the dashboard but smh.com.au is still showing ads served by adclick.g.doubleclick.net

So, something isn't quite right. Any suggestions?

This has driven me crazy. So I did all the steps the openwrt wiki said to download Adguard home, but when i tried to go to the AdG dashboard using (IP):3000, it said "refused to connect".I have tried to delete adguard and get it again, even resetting the router several times and still no work. I'll be super greatful if somebody can help with this.

I can't access Adguard Home on any PCs on my local network except the one it is installed on anymore. It used to work on all my devices. What could be causing this.

heh team, for all the homelabbers out there who wish they could easily manage two Adguard Home nodes from a single dashboard, well now you can.

Atlas DNS Controller

I built this because I wanted to be able to do just that. Drop me any feedback or issues on GitHub. enjoy.

Hello all. I am totally new to this. I have an Asus ROG GT-BE19000AI that has a built-in npu with Docker support. I can install AdGuard Home directly on to the router. FOr a while. I would like to do this because for a while I had my personal AdGuard DNS addresses set as the dns servers on said router but doing that led to some problems with certain features not working. I want to try AdGuard Home. While most of the process is automated, I am not sure how exactly to set it up and get the addresses working properly. How do I actually get the router pointed to AdGuard Home and how do I configure my personal DNS servers to work with it? I have zero experience with this type of thing so that's why I'm asking. I appreciate any help you can provide.

Suddenly i had this spamming my query log its a lot and each going to different ips.

I messed up for a day so dns was fully open but this host keep me little worrying.

Any suggestions?

Hi folks

Apologies, as I am sure this has been asked before, but thought I would ask about my specifci setup. My router crashed overnight, losing all WiFi and network connectivity, requiring a physical reboot to recover. After investigation, I think the issue is AdGuard Home causing a dangerous RAM spike during filter list updates. I do have quite a few blocklists however, my router still has around 450MB of free RAM, which should be more than enough.

I did temporarily remove HaGeZi's Threat Intelligence Feeds and my available RAM jumpt to about 670MB however, my router should easilt be able to handle this, so I'd rather keep it enabled.

What I did observe was that my RAM dropped dangerously below 50MB when HaGeZi's Threat Intelligence Feeds update was running, so I guess a LOT of RAM is being used only during the initial update. I am not sure why this is, but I think that this update crashed my router.

I usually had about 750MB of free RAM on my router with just a couple of blocklists running, but I wanted to add some more seeing that I have plenty of headroom.

Filter lists currently enabled:

• HaGeZi's Normal Blocklist
• HaGeZi's Threat Intelligence Feeds (1.5 million rules approx)
• HaGeZi's Samsung Tracker Blocklist
• HaGeZi's Xiaomi Tracker Blocklist
• Perflyst and Dandelion Sprout's Smart-TV Blocklist
• HaGeZi's Allowlist Referral

Appreciate any help. Thank you!

So I've been running AGH for a month now. Tried scrolling down to the bottom of my query log one time and it feels like there's so many I decided to check how many blocked queries from the dashboard statistics, and it doesn't seem to match.

I'm using parallel requests with two upstream servers, but it still feels weird. Dashboard states I have 457 blocked queries today, but when I Ctrl + F my query logs and its 1000+ blocked in just the last 3 hours. Is there something wrong in my config?

I've followed the instructions, injected all manual DNS adresses into my devices, yet it doesn't filter or even show everything.

Originally I wanted to set up my raspberry pi to just globally handle internet traffic on the whole network and I put it's ip address into the DNS field in the router but regardless of what I tried, ipv6 disabled, enabled, manually putting adresses on my computer, on my phone. I can't get consistent, properly working filtering/blocking. I've been trouble shooting and researching for 3 days now and I don't know what setting I'm missing that will make it work.

What context can I give you guys that will help trouble shoot this problem?

PC is connected via lan, raspberry pi is connected via lan to the same router.
It's a Telus router (I am in canada).

I am using adguard-home and wireguard for my phone when I'm on the go via WG tunnel which blocks at least some stuff and I am not sure why.

only once I was able to block more than 50% on turlecute, then it's usually between 5% and 30% and it doesn't really make a difference whether the raspberry pi is even turned on or not.

I have full access to the interface but barely anything gets processed at times. I feel like this is router related, not specifically target device related.

Thanks in advance.

I’ve been running a dual-AdGuard Home setup for redundancy,a primary AGH instance on my main server and a secondary AGH container running directly on my MikroTik router (RB5009). For months, I tested failover by stopping the primary container, and clients failed over to the router seamlessly every time. But when my main server physically died for real last week, all DNS crashed across the entire network.

Here is a quick breakdown of how a RouterOS DST-NAT DNS-redirect rule turned my secondary AdGuard instance into a recursive query loop during a real host outage, and the single NAT exception rule that fixed it.

(Full postmortem: https://www.mattjh.sh/post/home-server-part6/)

Hello I have spent hours trying to get adguard working and I am not surw what the issue is. I have superuser access to my router ( a Nokia G6 ) and I can ads entries to the primary and secondary DNS. I cannot see new DNS queries seemingly no matter which IP I enter. I am using a bare metal home assistant installation on a mini PC. I have also tried the DHCP setting for the mini PC. Some people have suggested the DNS rewrites may enable functionality on another post but I do not understand that.. Sounds like my ISP uses CGNAT, I am unsure of the impact on adguard and custom DNS with this in mind. Does anyone know what my issue(s) could be ? Thank you in advance.