Instead of having another RPi running a WireGuard client and funneling my network traffic through it, I've installed a Mullvad VPN profile on my GL-B1300 router itself. WLAN: Client -> RPi4 (Pi-hole + Unbound) -> GL-B1300 (OpenWrt w/ Mullvad VPN) -> WAN.LAN: Client -> RPi4 (Pi-hole + Unbound) -> GL-B1300 (OpenWrt w/ Mullvad VPN) -> WAN.My setup is similar, but differs slightly as follows: I am having the same exact issue on my end and have been unable to find any other posts regarding this sort of setup, so I'm glad to see its not just me.

Unbound config on the other RPi4 (configured according to Pi-hole documentation):.I've tried playing around with the MTU values and endpoint port to no avail. Endpoint Port (Port from Mullvad server).Mullvad WG interface config (configured mostly according to Mullvad documentation with the primary exceptions being not using their DNS server): WGZ0 -> lan: input (reject), output (accept), forward (reject) Wan -> REJECT: input(reject), output (accept), forward (reject) Lan -> WGZ0: input (accept), output (accept), forward (accept) Some potential problem areas I considered were:įirewall zones (here's my current config): When I look at the query log on Pi-hole, a number of requests end up with a reply of 'SERVFAIL' or 'NXDOMAIN' with a status saying 'Retried', or when there is a status saying 'OK (forwarded to localhost - unbound)', the reply is 'N/A.' This results in me not being able to access a number of websites.So far, I've managed to get to a point where some of my traffic gets properly routed Pi-hole + unbound first (DHCP advanced setting '6,pi-holeip'), then through Mullvad, but other sites never properly resolve ( this is the problem I'm facing): In essence, I'd like all of my local traffic to be routed through Mullvad, but before entering the tunnel, be routed through a separate RPi4 with Pi-hole and Unbound as the upstream DNS server. WLAN: Client -> TP-Link AX-1500 -> RPi4 (OpenWrt) -> RPi4 (Pi-hole -> Unbound) -> RPi4 (Mullvad with Wireguard) -> WAN.LAN: Client -> RPi4 (OpenWrt) -> RPi4 (Pi-hole -> Unbound) -> RPi4 (Mullvad with Wireguard) -> WAN.What I would like to accomplish is something like this: WLAN: Client (iPhones, etc) -> TP-Link AX-1500 (WAP) -> RPi4 (OpenWrt) -> different RPi4 (Pi-hole -> Unbound) -> WAN.LAN: Client (macbook, etc) -> RPi4 (running the RPi4 community build of OpenWrt) -> different RPi4 (Pi-hole -> Unbound as upstream DNS server) -> WAN.Apologies in advance for any silly questions - I'm about as beginner as you can get.

Mullvad servers