Diversion Diversion - the Router Ad-Blocker

[thelonelycoder]

I tried that, here is the result

 This is Diversion 4.1.8    coded by thelonelycoder
____________________________________________________

 Welcome to Diversion - the Router Ad-Blocker
____________________________________________________

 [Error]  has not passed the device test.

 Install Diversion now? [1=Yes e=Exit]

Go get another device, yours is dead. Of interest would be what the two log files fdl and dcl say.

 

[thelonelycoder]

@thelonelycoder
Before I give up on this I just want to confirm that getting the blank googleadservices.com page when clicking ad links after doing a Google search is normal Diversion behavior? Seems only my Pixel isn't affected.

It might, I don’t use google and if I do, these links are are of no interest to me.
Only way would be to whitelist it.

 

[Skeptical.me]

Makes me wonder whether your USB drive is bad. May want to consider trying a new one.


Sent from my iPhone using Tapatalk

Yeah, it was dead. That's the third in 2 years first on this AX88U and two on the AC86U. But it's okay I have a pile of USB Drives.

All working now ...

 

[Spiker]

That CA certificate generation is for the time before Apple introduced elevated requirements.
Use this to generate a valid CA certificate. Before you do that, delete all certs in /opt/var/cache/pixelserv/.
Then run this, adapting it to the outdated wiki page:

openssl genrsa -out ca.key 2048
openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"

That's the magic of making it work.
Thank you

 

[Skeptical.me]

This has happened to me before. I don’t remember the exact steps I followed to fix it as it has been a while. I do remember that it took me a while to figure it out on my own l, though.

I hate to suggest these to you as I see that you have several scripts installed but you can try the following options:

Option 1:

1. Unmount your USB drive from webui.

2. Reboot router

3. Insert USB and then install AMTM.

4. Reformat your USB (using the fd option) and then install the swap file first.

5. Now attempt to install Diversion and other scripts.

6. If everything works well by now, then simply enter:

/jffs/scripts/amtm

This will help bring up the AMTM menu the next time by simply typing: amtm.



Option 2:

1. Unmount your USB drive from webui.

2. Under the Administrative tab (System) of the webui, select to “reformat jffs...” when the router reboots. Note that this will impact other router and VPN settings, among others so make sure that you take care of all of these settings when the router comes up after a reboot before you proceed.

3. Reboot router. Make sure to allow the router some time between each step so it stabilizes.

4. Insert USB and then install AMTM.

5. Reformat your USB (using the fd option) and then install the swap file first.

6. Now attempt to install Diversion and other scripts.

7. After you are done enter:

/jffs/scripts/amtm


Hope this helps.

Marin




Sent from my iPhone using Tapatalk

Thanks for the help yesterday. At least it helped me identify the USB was dead. Everything appears to be working well now.

 

[a5m]

It might, I don’t use google and if I do, these links are are of no interest to me.
Only way would be to whitelist it.

Good to know, thanks.

Adding googleadservices.com worked initially on one machine but not another; both Win10. Tried www.googleadservices.com which didn't work on either. The blank page was googleadservices.com/pagead/ so tried pagead2.googleadservices.com which, again, worked on one but not another. Not sure what's going on. Will have to investigate further. but at least there's progress.

EDIT: Found another thread where someone solved a similar issue by updating the blocking list. Looks like that was my issue; I already had googleadservices.com on the Whitelist. I updated the blocking list but was still getting the blank page. I watched the log and www.googleadservices.com was being blocked, so added that to the Whitelist instead and deleted the other and all seems to be working fine now on all devices. Not sure if there's an issue with the 'Process Whitelist' function.

 

[TCoreX]

Hello here, too, I have to disturb something I am unsure about one thing. I have successfully installed the blocker. start address before the blocker was 192.168.1.2. during installation i was asked if i change 1.2 to 1.3, so i changed to 192.168.1.3. Installation successful, restart and still there is advertising. then I read you should put the router address in the DNS server. somehow it doesn't work that way. what am I doing wrong? please help.

 

[Treadler]

Hello here, too, I have to disturb something I am unsure about one thing. I have successfully installed the blocker. start address before the blocker was 192.168.1.2. during installation i was asked if i change 1.2 to 1.3, so i changed to 192.168.1.3. Installation successful, restart and still there is advertising. then I read you should put the router address in the DNS server. somehow it doesn't work that way. what am I doing wrong? please help.

View attachment 20968
View attachment 20969

Welcome to the forum!

My LAN dns are all blank. (Empty).
Advertise router ip = yes.

IP is changed to 192.168.1.3, to allow for pixelserv on 192.168.1.2.

 

[Skeptical.me]

I've added my own Hosts lists before but I can't see to remember where to add them. Since having to create a new USB drive for Diversion I need to re-add this https://pastebin.com/raw/JKRhykpV

Could someone point me in the right direction?

 

[Treadler]

I've added my own Hosts lists before but I can't see to remember where to add them. Since having to create a new USB drive for Diversion I need to re-add this https://pastebin.com/raw/JKRhykpV

Could someone point me in the right direction?

Diversion > b > 1, then 2.

 

[TCoreX]

Welcome to the forum!

My LAN dns are all blank. (Empty).
Advertise router ip = yes.

IP is changed to 192.168.1.3, to allow for pixelserv on 192.168.1.2.

thanks for the quick feedback will do this. hope it works.

 

[AurelM]

[...] start address before the blocker was 192.168.1.2. during installation i was asked if i change 1.2 to 1.3, so i changed to 192.168.1.3.[...]

You were asked to change the DHCP IP pool address range so that the 192.168.1.2 IP address would not be assigned by the DHCP server and instead be used by pixelserv-tls to generate responses for https requests.

[...]Installation successful, restart and still there is advertising. then I read you should put the router address in the DNS server. somehow it doesn't work that way. what am I doing wrong? please help.

The DNS server is your router, you should use it's address (192.168.1.1 according to your screenshots), but on the DHCP Server settings page you should use the settings that @Treadler said to (which should be the default ones).

You should also use DNS Filter to intercept all DNS requests and run them through Diversion (i.e.: requests from any client that's using it's own DNS entry instead of the one supplied by the DHCP server).
Go to LAN -> DNSFilter, turn Enable DNS-based Filtering to ON and Global Filter Mode to Router and hit Apply.

Unrelated to Diversion, you should also look into the DNS-over-TLS (DoT) privacy protocol.

 

[Chris_J]

Unrelated to Diversion, you should also look into the DNS-over-TLS (DoT) privacy protocol.

I've been considering setting this up also. I see that Unbound may be the way to go, but not sure if this can run in parallel with Diversion?

 

[AurelM]

I've been considering setting this up also.[...]

I am suggesting to use DNS-over-TLS (DoT) privacy protocol that's included in Asuswrt-Merlin firmware as from @TCoreX screenshots it's disabled (WAN - > DNS Privacy Protocol).

[...]I see that Unbound may be the way to go, but not sure if this can run in parallel with Diversion?

I don't know enough about Unbound, what it's doing and how it's doing it to really give a good answer, it would only be suppositions on my part to do so.

 

[TCoreX]

Have now gone through some settings, does that fit or do I have something else wrong?

 

[Treadler]

Have now gone through some settings, does that fit or do I have something else wrong?

View attachment 20971
View attachment 20972
View attachment 20973

Lookin’ good!

 

[dev_null]

Have now gone through some settings, does that fit or do I have something else wrong?

Make sure you reload with cache cleared (CTRL+R) or you may still see cache-saved adverts.

 

[Skeptical.me]

I seem to have run into an issue. I have the Large+ list blocking ads. There appears to be 1.351 Million domains blocked. But, for example, ads are showing on The New Yorker which I'm reading an article on, the ad is by https://adclick.g.doubleclick.net which is included in the blocking list. It's the same on other site as well with google ad, for example. I have also blocked Facebook but I'm able to open it in my browser.

I have no idea what could be causing this, any ideas? (I hope that's enough information)

found exact match in primary blocking list Custom
for adclick.g.doubleclick.net
found exact match in primary blocking list Custom
for adclick.g.doubleclick.net
found exact match in primary blocking list Custom
for adclick.g.doubleclick.net

 

[thelonelycoder]

I seem to have run into an issue. I have the Large+ list blocking ads. There appears to be 1.351 Million domains blocked. But, for example, ads are showing on The New Yorker which I'm reading an article on, the ad is by https://adclick.g.doubleclick.net which is included in the blocking list. It's the same on other site as well with google ad, for example. I have also blocked Facebook but I'm able to open it in my browser.

I have no idea what could be causing this, any ideas? (I hope that's enough information)

found exact match in primary blocking list Custom
for adclick.g.doubleclick.net
found exact match in primary blocking list Custom
for adclick.g.doubleclick.net
found exact match in primary blocking list Custom
for adclick.g.doubleclick.net

Not a single ad on that page. Make sure your cache is cleared.

 

[L&LD]

Yup! Not even one. And that is with the Standard Plus list for me, + Skynet.