Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

AB-Solution - The Ad Blocking Solution (v3.9.2)

Discussion in 'Asuswrt-Merlin' started by thelonelycoder, Feb 15, 2017.

  1. Wutikorn

    Wutikorn Senior Member

    Joined:
    Nov 12, 2015
    Messages:
    401
    Location:
    Thailand
    After several reboots, now it's just about 10MB more on average, which is about the size of AdsbeGone.

    I just had my ISP changed at the beginning, so I am not sure which extra services were running at the time.
     
  2. yikyi

    yikyi New Around Here

    Joined:
    Feb 18, 2017
    Messages:
    9
    Is there a way to use AB-Solution together with dnscrypt and dnssec? AB-Solution and dnscrypt should work seamlessly together, but why does dnssec interfere with it?
     
  3. tomsk

    tomsk Senior Member

    Joined:
    Sep 3, 2016
    Messages:
    485
    AB-solution will work quite happily with DNScrypt. You may find you are connecting to dnscrypt resolvers that are not dnssec enabled.....
    https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv
    check the dnssec validation column to see if your resolver is supported
     
  4. yikyi

    yikyi New Around Here

    Joined:
    Feb 18, 2017
    Messages:
    9
    I acutally chose a dnssec enabled dnscrypt resolver during set-up. But when setting up AB-Solution it reminded me to disable the dns-based filtering. So I assumed it wan't me to deactived dnssec, doesn't it?
     
  5. tomsk

    tomsk Senior Member

    Joined:
    Sep 3, 2016
    Messages:
    485
    No, the setup was just asking you to make sure you aren't doing dns filtering by redirecting dns queries away from dnsmasq, or adblocking doesn't work. Dnsmasq willl simply pass the query to the dnscrypt-proxy and then upstream to the dnscrypt resolver.
     
  6. yikyi

    yikyi New Around Here

    Joined:
    Feb 18, 2017
    Messages:
    9
    Oh, I see. Thanks for clarification. :)
     
  7. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    3,349
    Location:
    Switzerland
    As @tomsk mentions, dns based filtering works with AB, if done right.
    You are correct by saying AB warns that this will not work during install. I'll change the info text for that part to be more of a info to do it the right way.
     
  8. jack901

    jack901 Regular Contributor

    Joined:
    Feb 17, 2013
    Messages:
    129
    yes I had a dns and had dnssec checked upon install it wiped out the dns ip on the dhcp server settings and placed them under wan. dnssec is still checked under dhcp server but when I tail f I get validation result is INSECURE.
    so how do I get it to be secure now?
    thanks


     
    Wutikorn likes this.
  9. halex4u

    halex4u Regular Contributor

    Joined:
    Jan 14, 2013
    Messages:
    69
    I upgraded the AB-Solution to the lastest version. Everything went well.

    But now AB-SOLUTION is not blocking ads. I have DNSCRYPT installed and I have a yellow warning:

    "Dnsmasq entry detected,
    redirecting hosts to 127.0.0.1
    Be aware that log file entries with '127.0.0.1'
    are from another script, not AB-Solution".

    I would appreciate any solution.
    Thanks!

    Sent from my ONEPLUS A3003 using Tapatalk
     
  10. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    3,349
    Location:
    Switzerland
    Did you install Dnscrypt after updating or before?
    If it was installed before the update and you did not change anything dnscrypt wise, then post your setup script for it.
    If you installed dnscrypt after updating AB, then please ask in the scripts maintainers thread why things don't work well with AB.

    AB tries to do everything to work nicely together with other scripts, but in the end I can only hope the other script maintainers do as good a job as I do.
    The helpful warning is there to give you a hint where to look.
     
  11. Beherit

    Beherit Regular Contributor

    Joined:
    Sep 19, 2016
    Messages:
    64
    Quick question: When I try to whitelist the domain tradedoubler.com, I get no exact match but a list of more than 10 subdomains such as swrap.tradedoubler.com, tar.tradedoubler.com etc.

    To whitelist them all, is it enough to add tradedoubler.com to the list or do I have to add each and single one of them individually? Or do I use a wildcard and add *.tradedoubler.com?
     
  12. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    3,349
    Location:
    Switzerland
    You have to each add them as a separate entry.
    The wildcard * DOES NOT WORK in white- and blacklist.
     
    Beherit likes this.
  13. halex4u

    halex4u Regular Contributor

    Joined:
    Jan 14, 2013
    Messages:
    69
    The Dnscrypt was installed before AB-Solution upgrade and it was working fine with the previous version of AB-Solution. I changed nothing after upgrade.

    This is what I have in Dnsmasq: http://pastebin.com/HhWEQ3K5

    This is the script from jffs/script that I run it from WAN-START : http://pastebin.com/BTg45E1u


    Thank you
     
  14. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    3,349
    Location:
    Switzerland
    Paste the full content of dnsmasq.conf
     
  15. halex4u

    halex4u Regular Contributor

    Joined:
    Jan 14, 2013
    Messages:
    69
    Last edited: Feb 19, 2017
  16. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    3,349
    Location:
    Switzerland
    For some reason dnsmasq.conf misses the entry for the blocking file.
    Code:
    addn-hosts=/tmp/mnt/ASUS/adblocking/blocking_file
    Before you do anything, copy complete output of /tmp/mnt/ASUS/adblocking/scripts/ab_dnsmasq_postconf.sh

    Then turn ad-blocking off [a] and back on again. See if the entry is in dnsmasq.conf and ab_dnsmasq_postconf.sh
    Post both if they differ or still miss the blocking_file entry.
    Else, your file is likely missing. Run (b) select same blocking file again, then let it run the update.
    Then check again.
    It'll be working now.
     
  17. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    3,349
    Location:
    Switzerland
    And @halex4u, you failed to mention the error message AB displays when that entry is missing:
    checking dnsmasq.conf
    file found
    /etc/dnsmasq.conf is missing content
    logging state looks good

    Errors found.
    Read the check's output for clues.
     
  18. tomsk

    tomsk Senior Member

    Joined:
    Sep 3, 2016
    Messages:
    485
  19. halex4u

    halex4u Regular Contributor

    Joined:
    Jan 14, 2013
    Messages:
    69
    This is the error message AB dispalys: http://pastebin.com/gtNrmyWr

    This is copy complete output of /tmp/mnt/ASUS/adblocking/scripts/ab_dnsmasq_postconf.sh: http://pastebin.com/QxqznAeA

    This is entry in ab_dnsmasq.postconf.sh after I turned of the AB-solution: http://pastebin.com/viJ8RiAK

    This is dnsmasq.conf after I turned of the AB-solution: http://pastebin.com/QAm30SF4

    After turning on/off AB-solution nothing has changed.
     
  20. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    3,349
    Location:
    Switzerland
    The problem you have is that you need to add at least ONE empty line after the last bit of code in every script you have that adds to dnsmasq.conf
    In fact it is good practice to do it with every script.
    This is evident with this line:
    Code:
    #conf-file=/jffs/configs/dnsmasq.win10.conflog-facility=/tmp/mnt/ASUS/adblocking/logs/dnsmasq.log
    This is two lines in one. AB does this automatically to files it generates, but hand coded ones by users are out of AB's reach.
    Donation link is on my Website.
    Thanks
     

Share This Page