Diversion Diversion Hosted Allow List - What am I doing wrong?

[dave14305]

"UPDATED: dnsmasq to 2.93-test2 (includes a couple of DNSSEC fixes over 2.92)" in 3004.388.12 Alpha1 changelog.

You beat me to it.

My own investigation clearly shows Dnsmasq changed at some time later than this version shown below.
This router runs on Firmware 3004.388.8_4 and unblocks smetrics.foxnews.com when added to the allowlist.

thisuser@RT-AX56U:/tmp/home/root# dnsmasq --version
Dnsmasq version 2.90  Copyright (c) 2000-2024 Simon Kelley
Compile time options: IPv6 GNU-getopt no-RTC no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP

While this router on FW 3006.102.7_2 does no longer merit the allowlist:

thisuser@GT-AX6000:/tmp/home/root# dnsmasq --version
Dnsmasq version 2.93-test2  Copyright (c) 2000-2025 Simon Kelley
Compile time options: IPv6 GNU-getopt no-RTC no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset no-nftset no-auth DNSSEC no-ID loop-detect no-inotify no-dumpfile

So this same dnsmasq version broken on 7_2 works on 102.8 alpha?

 

[thelonelycoder]

So this same dnsmasq version broken on 7_2 works on 102.8 alpha?

I'm not sure this works, but an md5sum on /usr/sbin/dnsmasq on the versions 3006.102.7_2 and 3004.388.12_alpha1-gb95b75253 shows a mismatch.

 

[dave14305]

I'm not sure this works, but an md5sum on /usr/sbin/dnsmasq on the versions 3006.102.7_2 and 3004.388.12_alpha1-gb95b75253 shows a mismatch.

Is the GT-AX6000 on the alpha yet? Is the bug gone on that one?

 

[thelonelycoder]

Is the GT-AX6000 on the alpha yet? Is the bug gone on that one?

I‘m not going to run alpha versions on my main router. All I‘m saying is that the md5sum are different.

 

[dave14305]

I‘m not going to run alpha versions on my main router. All I‘m saying is that the md5sum are different.

OK, thanks. I'll leave it to the alpha testers to report their findings.

 

[dave14305]

I was able to setup a 3006 router and test on 102.7_2 and 102.8_alpha and I got the same negative results. So did this work correctly on 388 alpha?

ASUSWRT-Merlin RT-AX86U_PRO 3006.102.8_alpha1-gcbc0e79254 Wed Apr  8 01:07:56 UTC 2026

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# grep smetrics\.foxn /opt/share/diversion/list/*.conf
/opt/share/diversion/list/allowlist.conf:server=/smetrics.foxnews.com/#
/opt/share/diversion/list/blockinglist.conf:local=/smetrics.foxnews.com/

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# dig smetrics.foxnews.com @127.0.0.1

; <<>> DiG 9.20.18 <<>> smetrics.foxnews.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62255
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;smetrics.foxnews.com.          IN      A

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Thu Apr 09 12:39:24 EDT 2026
;; MSG SIZE  rcvd: 49

Apr  9 12:39:24 dnsmasq[6031]: query[A] smetrics.foxnews.com from 127.0.0.1
Apr  9 12:39:24 dnsmasq[6031]: config smetrics.foxnews.com is NXDOMAIN