Recent content by mrchow

try to uninstall pixelserv-tls via opkg and set it up again with diversion?

Just wanted to chime in to confirm this. The CA needs to be 2048 bit, otherwise the generated certificates are not trusted.

While most solutions are similar in what they do - creating a custom host file for a dns server - there are differences in the features. One difference for example is the backend server the dns server redirects to. In diversion you’re able to use pixelserv-tls, pihole uses lighttpd.

The generated certificate is not iOS 13 compliant. A new and compliant certificate has to be created by pixelserv. Thus you have to upgrade to the most recent version. Afterwards existing certs have to be purged.

you're still able to use pixelserv generated certs, because pixelserv is creating them in a iOS 13/catalina compliant way. The openssl command users run is to create a certificate authority, which is then used to sign certificates issued by Pixelserv.

I may be wrong, but it is not needed to state alternative names since pixelserv issues them when generating certificates.

the steps are described within the repo readme under build from source.

I'd definitely be in to test/try this script. My UCE count is insanely high.. (6911 in ~7 days...). Btw.: my issue with pixelserv crashing is gone as of now. It seems it was related to blocking the trend micro urls.

Ok I’ll set it up once I find the time. Thank you for your assistance! Sent from my iPhone using Tapatalk

Sorry for the late reply. Wanted to observe the issue again. So it crashed again (process is not running anymore). It may be related to the fact that I blocked rgom10-en.url.trendmicro.com. I'll unblock it and try it again here's some of the log-output right before the crash (last pixelserv-tls...

Download the ipk manually and install it by specifying its' path. The file on the server looks good and hasn't been touched since the beginning of April. 'opkg --force-depends remove libopenssl' broke my entware install anyway.. wget stopped working.. I just copied the file to the router via...

Yup It wouldn’t make sense to run skynet and yamalwareblock at the same time. If you install skynet after ya-malware-block, you’d receive an error since it checks if the script is installed. They share similar IPSet lists for blocking malware anyway (assuming you have malware banning enabled in...

@Adamm if I like to change the frequency how often new malware entries get pulled, I'd have to adjust the cron entry within the script.. is this correct?

All his scripts state GPL v3. Sent from my iPhone using Tapatalk

@swetoastThe entry b.ads1.msn.com was the culprit for skysports.com not working. Although thanks for your support.