Hello @marz_adam
The upload arrived this time, thank you. The logs are clear.
The update has never started. Your ROCK stayed on 2.67 build 1661 for the whole nine days the logs cover. The check works and returns build 1683 every time, but the download then fails immediately, 24 times, always the same way:
While downloading update: System.Net.WebException:
Name or service not known (download.roonlabs.net:80)
That is a DNS failure. The ROCK could not turn that hostname into an address, so nothing was ever downloaded.
Those 24 are the only lookup failures in the entire log set. Everything else resolves without a miss, including updates.roonlabs.net on the same domain and api.roonlabs.net across 45,000 requests. A broken DNS server would break all of them. One name failing while the rest work means that name is being blocked.
Blocklists refresh themselves, so a name that was never touched before can start being blocked without you changing anything. That fits your point about running AdGuard for years with no trouble.
Why your DNS change had no effect. While the ROCK is on DHCP it takes DNS from your router and there is no way to override it on the ROCK itself. Your RT-AX86U also has DNS Director, called DNS Filter on older firmware, under LAN. When enabled it forces every client onto the DNS server named there and ignores what DHCP handed out. Please check whether it is on and what it points to.
Two things to do.
First, please open the AdGuard Home query log and search for download.roonlabs.net. That shows whether your ROCK asked for it and what AdGuard answered, including which filter blocked it. One screen settles this.
Second, please give the ROCK a static IP so it uses a DNS server of its own choosing:
- Open the ROCK web interface and go to the Networking section.
- Switch from DHCP to static, entering the ROCK’s current IP address, subnet mask and gateway. Your router’s DHCP lease list has these.
- Set the DNS servers to
1.1.1.1 and 1.0.0.1.
- Save, then stop Roon Server and reboot the ROCK.
- Try the update again.
The permanent fix, once confirmed. In AdGuard Home, under Filters then Custom filtering rules, please add:
@@||roonlabs.net^
That allows our domain whatever any blocklist says, and it is better than turning AdGuard off. You can then put the ROCK back on DHCP if you prefer.
If the query log shows AdGuard was never asked for that name, please tell us, because then the lookups are going somewhere else and we need to find where.