From 897821d6e2af84cd6dacb983899a8febe629a96a Mon Sep 17 00:00:00 2001
From: FURK4NGG <105324908+FURK4NGG@users.noreply.github.com>
Date: Wed, 15 Jul 2026 09:40:47 +0300
Subject: [PATCH] Update README.md

---
 README.md | 31 +++++++++++++++++++++++++++++--
 1 file changed, 29 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 9d9cf7f..127c3a9 100644
--- a/README.md
+++ b/README.md
@@ -938,8 +938,9 @@ sudo nano /var/www/adguardhome/AdGuardHome.yaml
 sudo systemctl restart adguardhome  
 
 sudo ss -lunpt | grep ':53'  
->SERVER_PUBLIC_IP:53
+>SERVER_PUBLIC_IP:53  
 >10.8.0.1:53
+>127.0.0.1:53 (dnsmasq)  
 
 Test(PC)>ping 10.8.0.1  
 
@@ -947,7 +948,7 @@ dig google.com
 >SERVER: 10.8.0.1#53  
 
 
-## Restrict DNS access to WireGuard clients  
+## Restrict DNS access to WireGuard clients only  
 sudo nft -a list chain inet filter input  
 Expected result:
 
@@ -1087,6 +1088,8 @@ dig @10.8.0.1 MX srv1.mail-tester.com
 dig @127.0.0.1 MX srv1.mail-tester.com  
 >... timed out  
 
+
+Forward all local DNS requests to AdGuard Home:  
 sudo nano /etc/dnsmasq.d/99-adguard-upstream.conf  
 ```
 no-resolv  
@@ -1145,3 +1148,27 @@ What Is My Ip Adress -> https://ifconfig.me/
 Disable uBlock Origin, AdGuard Browser Extension, Brave Shields, or any other third-party content blocker if the login page does not load correctly  
 
 Login Page -> https://ads.domain/login.html  
+
+# DIAGRAM
+
+Client  
+   │
+WireGuard  
+   │
+10.8.0.1
+   │
+AdGuard Home
+   │
+Upstream DNS
+   │
+Internet
+
+localhost (127.0.0.1)
+        │
+     dnsmasq
+        │
+   AdGuard Home
+        │
+     Postfix
+
+