Diversion Diversion Hosted Allow List - What am I doing wrong?

[dave14305]

"UPDATED: dnsmasq to 2.93-test2 (includes a couple of DNSSEC fixes over 2.92)" in 3004.388.12 Alpha1 changelog.

You beat me to it.

My own investigation clearly shows Dnsmasq changed at some time later than this version shown below.
This router runs on Firmware 3004.388.8_4 and unblocks smetrics.foxnews.com when added to the allowlist.

thisuser@RT-AX56U:/tmp/home/root# dnsmasq --version
Dnsmasq version 2.90  Copyright (c) 2000-2024 Simon Kelley
Compile time options: IPv6 GNU-getopt no-RTC no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP

While this router on FW 3006.102.7_2 does no longer merit the allowlist:

thisuser@GT-AX6000:/tmp/home/root# dnsmasq --version
Dnsmasq version 2.93-test2  Copyright (c) 2000-2025 Simon Kelley
Compile time options: IPv6 GNU-getopt no-RTC no-DBus no-UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset no-nftset no-auth DNSSEC no-ID loop-detect no-inotify no-dumpfile

So this same dnsmasq version broken on 7_2 works on 102.8 alpha?

 

[thelonelycoder]

So this same dnsmasq version broken on 7_2 works on 102.8 alpha?

I'm not sure this works, but an md5sum on /usr/sbin/dnsmasq on the versions 3006.102.7_2 and 3004.388.12_alpha1-gb95b75253 shows a mismatch.

 

[dave14305]

I'm not sure this works, but an md5sum on /usr/sbin/dnsmasq on the versions 3006.102.7_2 and 3004.388.12_alpha1-gb95b75253 shows a mismatch.

Is the GT-AX6000 on the alpha yet? Is the bug gone on that one?

 

[thelonelycoder]

Is the GT-AX6000 on the alpha yet? Is the bug gone on that one?

I‘m not going to run alpha versions on my main router. All I‘m saying is that the md5sum are different.

 

[dave14305]

I‘m not going to run alpha versions on my main router. All I‘m saying is that the md5sum are different.

OK, thanks. I'll leave it to the alpha testers to report their findings.

 

[dave14305]

I was able to setup a 3006 router and test on 102.7_2 and 102.8_alpha and I got the same negative results. So did this work correctly on 388 alpha?
102.8_alpha1:

ASUSWRT-Merlin RT-AX86U_PRO 3006.102.8_alpha1-gcbc0e79254 Wed Apr  8 01:07:56 UTC 2026

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# grep smetrics\.foxn /opt/share/diversion/list/*.conf
/opt/share/diversion/list/allowlist.conf:server=/smetrics.foxnews.com/#
/opt/share/diversion/list/blockinglist.conf:local=/smetrics.foxnews.com/

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# dig smetrics.foxnews.com @127.0.0.1

; <<>> DiG 9.20.18 <<>> smetrics.foxnews.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62255
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;smetrics.foxnews.com.          IN      A

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Thu Apr 09 12:39:24 EDT 2026
;; MSG SIZE  rcvd: 49

Apr  9 12:34:40 dnsmasq[6031]: using standard nameservers for smetrics.foxnews.com
Apr  9 12:39:24 dnsmasq[6031]: query[A] smetrics.foxnews.com from 127.0.0.1
Apr  9 12:39:24 dnsmasq[6031]: config smetrics.foxnews.com is NXDOMAIN

102.7_2:

ASUSWRT-Merlin RT-AX86U_PRO 3006.102.7_2 Tue Mar 24 20:26:02 UTC 2026
rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# grep smetrics\.foxn /opt/share/diversion/list/*.conf
/opt/share/diversion/list/allowlist.conf:server=/smetrics.foxnews.com/#
/opt/share/diversion/list/blockinglist.conf:local=/smetrics.foxnews.com/

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# dig smetrics.foxnews.com @127.0.0.1

; <<>> DiG 9.20.18 <<>> smetrics.foxnews.com @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;smetrics.foxnews.com.          IN      A

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Thu Apr 09 13:17:08 EDT 2026
;; MSG SIZE  rcvd: 49

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# grep smetrics\.fox /opt/var/log/dnsmasq.log
Apr  9 13:16:16 dnsmasq[3738]: using standard nameservers for smetrics.foxnews.com
Apr  9 13:17:08 dnsmasq[3738]: query[A] smetrics.foxnews.com from 127.0.0.1
Apr  9 13:17:08 dnsmasq[3738]: config smetrics.foxnews.com is NXDOMAIN

Going back to 102.6 and it is working:

ASUSWRT-Merlin RT-AX86U_PRO 3006.102.6_0 Tue Nov 25 15:54:09 UTC 2025

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# grep smetrics\.foxnews /opt/share/diversion/list/*.conf
/opt/share/diversion/list/allowlist.conf:server=/smetrics.foxnews.com/#
/opt/share/diversion/list/blockinglist.conf:local=/smetrics.foxnews.com/

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# dig smetrics.foxnews.com. @127.0.0.1

; <<>> DiG 9.20.18 <<>> smetrics.foxnews.com. @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25619
;; flags: qr rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;smetrics.foxnews.com.          IN      A

;; ANSWER SECTION:
smetrics.foxnews.com.   7027    IN      CNAME   foxnews.com.ssl.d1.sc.omtrdc.net.
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.38.116
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.39.25
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.39.87
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.39.214
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.39.146
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.38.61
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.39.145
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.39.254
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.38.38
foxnews.com.ssl.d1.sc.omtrdc.net. 173 IN A      63.140.38.59

;; Query time: 23 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Thu Apr 09 13:42:05 EDT 2026
;; MSG SIZE  rcvd: 255

rtradmin@RT-AX86U_Pro-C420:/tmp/home/root# grep smetrics.foxnews.com /opt/var/log/dnsmasq.log
Apr  9 13:36:34 dnsmasq[7369]: using standard nameservers for smetrics.foxnews.com
Apr  9 13:42:05 dnsmasq[7369]: query[A] smetrics.foxnews.com from 127.0.0.1
Apr  9 13:42:05 dnsmasq[7369]: cached smetrics.foxnews.com is <CNAME>
Apr  9 13:42:05 dnsmasq[7369]: forwarded smetrics.foxnews.com to 192.168.1.1
Apr  9 13:42:05 dnsmasq[7369]: reply smetrics.foxnews.com is <CNAME>