[How-to] Adblock Plus filters right on router

ColinTaylor · Mar 27, 2015

waffles said:
I am not quite clear: are you still suggesting I replace the parameter "ulimit -s 2048" with "ulimit -n 2048"?

It's just speculation on my part as I don't use privoxy.

I would suggest that to start with you add "max-client-connections 256" to the config file and add "ulimit -n 2048" to the startup script. Try it with and without "ulimit -s 2048". See if you think it makes a difference.

When you get the problem it might be worth logging onto the router and issuing the following 2 commands. You might get lucky and it could highlight a problem with memory or number of processes.

Code:

# ps w
# free

PS The reason I chose "max-client-connections 256" and "ulimit -n 2048" is because that is double the default values (at least on my N66U - might be different for you).

waffles · Mar 27, 2015

OK, so here are my updated files:

config file (S24privoxy)

Code:

#!/bin/sh

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ulimit -s 2048
max-client-connections 256

. /opt/etc/init.d/rc.func

and
/jffs/scripts/services-start (did I pick the correct one?)

Code:

#!/bin/sh

sleep 10
/opt/etc/init.d/rc.unslung start
ulimit -n 2048

ColinTaylor · Mar 27, 2015

No, I think that's wrong.

Put "ulimit -n 2048" in S24privoxy (the privoxy start script) after the other ulimit command.
Put "max-client-connections 256" in the config file. Sorry, I don't know the name of that file. Is it /opt/etc/privoxy/config ?

waffles · Mar 27, 2015

Thank you for staying with me here, Colin!

My S24privoxy now:

Code:

#!/bin/sh

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ulimit -s 2048
ulimit -n 2048

. /opt/etc/init.d/rc.func

I found a "config" file under ..../entware.arm/etc/privoxy/
and added the "max client..":

Code:

confdir /opt/etc/privoxy
logdir /opt/var/log
filterfile default.filter
logfile privoxy
actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.
actionsfile default.action   # Main actions file
actionsfile easylistgermany.script.action
actionsfile easylist.script.action
actionsfile user.action
filterfile easylistgermany.script.filter
filterfile easylist.script.filter
filterfile user.filter
listen-address  0.0.0.0:3128
toggle  1
enable-remote-toggle  1
enable-remote-http-toggle  0
enable-edit-actions 1
enforce-blocks 0
buffer-limit 4096
forwarded-connect-retries  0
accept-intercepted-requests 1
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 300
socket-timeout 300
max-client-connections 256
#permit-access  192.168.1.0/24
debug   1    # show each GET/POST/CONNECT request
debug   4096 # Startup banner and warnings
debug   8192 # Errors - *we highly recommended enabling this*
#admin-address privoxy-admin@example.com
#proxy-info-url http://www.example.com/proxy-service.html

rebooting the router and keeping fingers crossed......

steelskinz · Apr 7, 2015

Could someone only post privoxy files for R7000 please ? I want to try it on Tomato but don't want to install all the entware stuff. Thank you.

ryzhov_al · Apr 7, 2015

steelskinz said:
Could someone only post privoxy files for R7000 please ? I want to try it on Tomato but don't want to install all the entware stuff. Thank you.

You may try privoxy binary from here.

steelskinz · Apr 7, 2015

Thanks !

steelskinz · Apr 10, 2015

waffles said:

Thank you for staying with me here, Colin!

My S24privoxy now:

Code:

#!/bin/sh

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ulimit -s 2048
ulimit -n 2048

. /opt/etc/init.d/rc.func

I found a "config" file under ..../entware.arm/etc/privoxy/
and added the "max client..":

Code:

confdir /opt/etc/privoxy
logdir /opt/var/log
filterfile default.filter
logfile privoxy
actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.
actionsfile default.action   # Main actions file
actionsfile easylistgermany.script.action
actionsfile easylist.script.action
actionsfile user.action
filterfile easylistgermany.script.filter
filterfile easylist.script.filter
filterfile user.filter
listen-address  0.0.0.0:3128
toggle  1
enable-remote-toggle  1
enable-remote-http-toggle  0
enable-edit-actions 1
enforce-blocks 0
buffer-limit 4096
forwarded-connect-retries  0
accept-intercepted-requests 1
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 300
socket-timeout 300
max-client-connections 256
#permit-access  192.168.1.0/24
debug   1    # show each GET/POST/CONNECT request
debug   4096 # Startup banner and warnings
debug   8192 # Errors - *we highly recommended enabling this*
#admin-address privoxy-admin@example.com
#proxy-info-url http://www.example.com/proxy-service.html

rebooting the router and keeping fingers crossed......

Did it work ?

waffles · Apr 10, 2015

steelskinz said:
Did it work ?

It has improved, meaning I seem to get errors less frequently. Not perfect, but 'tolerable' for me for now.

andyg · May 4, 2015

seriously thinking about implementing the adblock now...any opinions?
http://www.technologyreview.com/vie...cretly-connect-to-user-tracking-and-ad-sites/

ColinTaylor · May 4, 2015

As someone once said: "If you're not paying for the product, you are the product!"

mstombs · May 4, 2015

andyg said:
seriously thinking about implementing the adblock now...any opinions?
http://www.technologyreview.com/vie...cretly-connect-to-user-tracking-and-ad-sites/

I recommend
http://www.zenz-solutions.de/personalhttpproxy/
when you don't have the benefit of your router to help.

Chrysalis · May 4, 2015

andyg said:
seriously thinking about implementing the adblock now...any opinions?
http://www.technologyreview.com/vie...cretly-connect-to-user-tracking-and-ad-sites/

my merlin is running lighthttpd and the dns server forwards tracking domains to it.

But also I have afwall on my phones, I think android is a mess for security especially with google themselves wanting to track people so much.

kvic · May 6, 2015

Thanks! This ad block serves gadgets well.

A perfect application to take away some idle cycles from my rt-ac56u.

steelskinz · May 6, 2015

ryzhov_al said:
I've finished ipset how-to.

Another example about Peer Guardian functionality right on router has been added.

Is the script still up to date ?

ryzhov_al · May 6, 2015

steelskinz said:
Is the script still up to date ?

I'm still using it. Looks up to date.

Harikrishnan M · Jun 14, 2015

I have followed the installation and configuration steps on my RT-AC66U / Merlin 378.54_2 and run into the "2aab0000 Error: Unable to take any additional connections: Resource temporarily unavailable" problem. I have configured the iptables only for one android phone and this error starts about 5 minutes into browsing. The mobile browser also stops connecting after the error starts.

I have tried all the options mentioned in this thread and have not been able to fix the problem. Is there any suggestion on how to get this problem fixed.

Once fixed I wanted to try enabling the filter for my entire home network with about 10 devices and see how it performs.

amigohd · Jun 14, 2015

I am using https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset with my AC87U but Apple's iCloud Service is blocked. How can I "unblock" a specific IP range which is blocked by peerguardian list?

SOLUTION:
grep -v APPLE does work within the script after gunzip the downloaded list

WaVeR · Jun 30, 2015

Hi Folks,

Since the last update 378.53/54 privoxy and DNScrypt doesn't start automatically. I'm forced to connect to the routeur to restart the 2 services. Anyone else with this issue?

RMerlin · Jun 30, 2015

WaVeR said:
Hi Folks,

Since the last update 378.53/54 privoxy and DNScrypt doesn't start automatically. I'm forced to connect to the routeur to restart the 2 services. Anyone else with this issue?

The System Log is your best friend. Have a look at it, it probably reports something to the effect that the router was asked to run a script, but you have custom scripts disabled. If that's the case, enable them under Administration -> System.

Thread starter	Title	Forum	Replies	Date
	Difference between DNS Director "Adguard Adblock" and setting up an "Adguard Home" instance	Asuswrt-Merlin	8	Apr 26, 2023
	Possible DNS-Rebind attack detected and unresponsive router plus one more	Asuswrt-Merlin	3	Feb 11, 2024
S	Using Web & Apps Filters with scheduling	Asuswrt-Merlin	0	Apr 25, 2023

[How-to] Adblock Plus filters right on router

Part of the Furniture

Regular Contributor

Part of the Furniture

Regular Contributor

Regular Contributor

Very Senior Member

Regular Contributor

Regular Contributor

Regular Contributor

Occasional Visitor

Part of the Furniture

Very Senior Member

Senior Member

Part of the Furniture

Regular Contributor

Very Senior Member

New Around Here

Regular Contributor

Regular Contributor

Asuswrt-Merlin dev

Similar threads

Similar threads

Sign Up For SNBForums Daily Digest