Diversion Diversion - the Router Ad-Blocker

[Sbfnu]

No, this feature is basically “toggle Skynets wife mode at the same time as ours”.

The features can be used independently between scripts or for convenience toggled at the same time. Kind of a two birds with one stone approach.

Hmm, ok.

How is Diversion's wife mode triggered then?

And how it is used?
For example, can my wife get different settings than me?

Can you please explain that in greater detail?

 

[Sbfnu]

Is there a way for Diversion and/or Asuswrt-Merlin to catch devices that use hard-coded DNS servers (such as Chromecast and Roku) and force them to go through Diversion?

 

[thelonelycoder]

Hmm, ok.

How is Diversion's wife mode triggered then?

And how it is used?
For example, can my wife get different settings than me?

Can you please explain that in greater detail?

diversion fs
Fast switch for blocking files.
Same in the UI, just enter fs.

 

[Sbfnu]

diversion fs
Fast switch for blocking files.
Same in the UI, just enter fs.

This is about enabling it in the Diversion UI.

But how to use it?
How I can configure that my wife uses different block lists than I do? Where is that configured?

 

[Skeptical.me]

Hi,

I update Diversion today, it appeared to update perfectly fine. However, I just checked through the Logs and saw this:

Oct 17 06:19:33 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.ntv.io
Oct 17 06:19:33 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.indexww.com
Oct 17 06:19:33 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.bkrtx.com
Oct 17 06:19:33 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.ntv.io
Oct 17 06:19:34 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.indexww.com
Oct 17 06:19:34 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.bkrtx.com
Oct 17 06:19:34 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagservices.com
Oct 17 06:19:34 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagservices.com
Oct 17 06:19:35 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagmanager.com
Oct 17 06:19:35 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagmanager.com
Oct 17 06:19:36 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googlesyndication.com
Oct 17 06:19:36 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googlesyndication.com
Oct 17 06:19:37 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.mgr.consensu.org
Oct 17 06:19:37 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.mgr.consensu.org
Oct 17 06:19:41 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.ntv.io
Oct 17 06:19:41 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.indexww.com
Oct 17 06:19:41 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.bkrtx.com
Oct 17 06:19:41 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.ntv.io
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.indexww.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.bkrtx.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagservices.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagservices.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagmanager.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagmanager.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.mgr.consensu.org
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.mgr.consensu.org
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googlesyndication.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googlesyndication.com
Oct 17 06:19:43 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.staticworld.net
Oct 17 06:19:43 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.staticworld.net
Oct 17 06:19:47 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.consensu.org
Oct 17 06:19:47 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.consensu.org

Not being overly experienced with Diversion, is this an issue that needs attention?

Thanks

 

[thelonelycoder]

This is about enabling it in the Diversion UI.

But how to use it?
How I can configure that my wife uses different block lists than I do? Where is that configured?

You both use the same, you just enable the mode when needed. And no, it is not possible what you think it does.
https://www.snbforums.com/threads/diversion-the-router-adblocker.48538/page-41#post-436872

 

[thelonelycoder]

Hi,

I update Diversion today, it appeared to update perfectly fine. However, I just checked through the Logs and saw this:

Oct 17 06:19:33 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.ntv.io
Oct 17 06:19:33 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.indexww.com
Oct 17 06:19:33 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.bkrtx.com
Oct 17 06:19:33 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.ntv.io
Oct 17 06:19:34 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.indexww.com
Oct 17 06:19:34 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.bkrtx.com
Oct 17 06:19:34 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagservices.com
Oct 17 06:19:34 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagservices.com
Oct 17 06:19:35 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagmanager.com
Oct 17 06:19:35 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagmanager.com
Oct 17 06:19:36 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googlesyndication.com
Oct 17 06:19:36 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googlesyndication.com
Oct 17 06:19:37 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.mgr.consensu.org
Oct 17 06:19:37 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.mgr.consensu.org
Oct 17 06:19:41 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.ntv.io
Oct 17 06:19:41 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.indexww.com
Oct 17 06:19:41 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.bkrtx.com
Oct 17 06:19:41 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.ntv.io
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.indexww.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.bkrtx.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagservices.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagservices.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagmanager.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googletagmanager.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.mgr.consensu.org
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.mgr.consensu.org
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googlesyndication.com
Oct 17 06:19:42 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.googlesyndication.com
Oct 17 06:19:43 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.staticworld.net
Oct 17 06:19:43 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.staticworld.net
Oct 17 06:19:47 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.consensu.org
Oct 17 06:19:47 pixelserv-tls[24064]: generate_cert: failed to open file for write: /opt/var/cache/pixelserv/_.consensu.org

Not being overly experienced with Diversion, is this an issue that needs attention?

Thanks

In ep, purge certificates. That should fix it.

 

[Skeptical.me]

In ep, purge certificates. That should fix it.

I just realized what I did. I did not realize that Diversion also had Entware. And earlier I installed Entware.

So, when I SSH'd into my 86U and type # Diversion .... nothing was there ... oops

I've just tried to re-install Diversion and I've run into an issue.

 Enter pixelserv-tls IP Address: 192.168.1.2

  ✔  192.168.1.2 is a valid IP address
  i  checking if 192.168.1.2 is available to use

  ✖  192.168.1.2 responded to ping
  !  nslookup info for 192.168.1.2:

Server:    127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain

Name:      192.168.1.2
Address 1: 192.168.1.2

  !  arp info for 192.168.1.2:

? (192.168.1.234) at dc:xx:e7:xx:06 [ether]  on br0
? (192.168.1.248) at 6c:xx:84:xx:ba:xx [ether]  on br0
XXXXXXXXXX (192.168.1.219) at 24:5e:be:1e:b6:8f [ether]  on br0

  !  Do not set pixelserv-tls IP to an IP that
     is not the pixelserv-tls IP
     This will not work!

 1. Confirm this is the pixelserv-tls IP address
 2. Select a different IP address

 Enter your selection [1-2]

Any advise is really appreciated.

EDIT: All good, I just used a different IP address

 

[XIII]

AdGuard introduces AdGuard Home, a network-wide ad-and-tracker blocking DNS server with a web interface:

https://adguard.com/en/blog/introducing-adguard-home/

Is this somewhat similar to what Diversion Pro will be?

 

[Asad Ali]

Is there a way for Diversion and/or Asuswrt-Merlin to catch devices that use hard-coded DNS servers (such as Chromecast and Roku) and force them to go through Diversion?

You can either use Static Routing or Scripting to force these rouge clients to always go through your router's DNS server.

For example Chromecast use hardcoded 8.8.8.8 or 8.8.4.4 as a DNS server and you can route these two addresses to your router DNS server.

 

[M@rco]

I just realized what I did. I did not realize that Diversion also had Entware. And earlier I installed Entware.

So, when I SSH'd into my 86U and type # Diversion .... nothing was there ... oops

I've just tried to re-install Diversion and I've run into an issue.

 Enter pixelserv-tls IP Address: 192.168.1.2

  ✔  192.168.1.2 is a valid IP address
  i  checking if 192.168.1.2 is available to use

  ✖  192.168.1.2 responded to ping
  !  nslookup info for 192.168.1.2:

Server:    127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain

Name:      192.168.1.2
Address 1: 192.168.1.2

  !  arp info for 192.168.1.2:

? (192.168.1.234) at dc:xx:e7:xx:06 [ether]  on br0
? (192.168.1.248) at 6c:xx:84:xx:ba:xx [ether]  on br0
XXXXXXXXXX (192.168.1.219) at 24:5e:be:1e:b6:8f [ether]  on br0

  !  Do not set pixelserv-tls IP to an IP that
     is not the pixelserv-tls IP
     This will not work!

 1. Confirm this is the pixelserv-tls IP address
 2. Select a different IP address

 Enter your selection [1-2]

Any advise is really appreciated.

Basically, it says that the installer found out 192.168.1.2 is being used, yet you have entered it to be the pixelserv IP. So, if this is the pixelserv IP, select 1. If not select 2.

It could be you run into a next issue, if there's still a process active from the 'previous' pixelserv. Not sure I can follow what you did prior to reinstalling Diversion, to be honest.

 

[Skeptical.me]

Basically, it says that the installer found out 192.168.1.2 is being used, yet you have entered it to be the pixelserv IP. So, if this is the pixelserv IP, select 1. If not select 2.

It could be you run into a next issue, if there's still a process active from the 'previous' pixelserv. Not sure I can follow what you did prior to reinstalling Diversion, to be honest.

All I did was install Entware (I did not realize it was installed with Diversion). It appears that by doing that Diversion was uninstalled as when I SSH'd into my 86U and typed # diversion the output indicated it did not exist. Then when I re-installed Diversion a message appeared that said "Diversion is not installed". Hope that makes sense.

 

[Sbfnu]

For example Chromecast use hardcoded 8.8.8.8 or 8.8.4.4 as a DNS server and you can route these two addresses to your router DNS server.

Exactly that is my question: How to make these devices that have hardcoded DNS servers such as 8.8.8.8 to Diversion?

Static routing configuration on these clients does not work because of their hardcoded DNS servers.

 

[Sbfnu]

You both use the same, you just enable the mode when needed. And no, it is not possible what you think it does.
https://www.snbforums.com/threads/diversion-the-router-adblocker.48538/page-41#post-436872

I see. So I have to manually enable wife mode in Diversion, and then all clients in my LAN are running in wife mode.

So no "wife mode only for my wife / non-wife-mode for me" mode of operation, correct?

 

[thelonelycoder]

AdGuard introduces AdGuard Home, a network-wide ad-and-tracker blocking DNS server with a web interface:

https://adguard.com/en/blog/introducing-adguard-home/

Is this somewhat similar to what Diversion Pro will be?

No, Pro does not mean it has a WebUI.
Looks good but lacks pixelserv-tls. I wonder how they block https ads.

 

[Asad Ali]

Exactly that is my question: How to make these devices that have hardcoded DNS servers such as 8.8.8.8 to Diversion?

Static routing configuration on these clients does not work because of their hardcoded DNS servers.

As I said earlier you need to route any traffic coming on 8.8.8.8 to your router IP that way 8.8.8.8 will become your routers DNS server for such devices.

 

[Skeptical.me]

No, Pro does not mean it has a WebUI.
Looks good but lacks pixelserv-tls. I wonder how they block https ads.

I wonder what it's price point is as well. If Diversion achieves the same thing why would you need it. Although, it's good that it's Open Source.

 

[thelonelycoder]

EDIT: All good, I just used a different IP address

Make sure that IP is in the reserved range. If not, just change it back to .2 and confirm it.

 

[Skeptical.me]

Make sure that IP is in the reserved range. If not, just change it back to .2 and confirm it.

Yes, it is in the reserved range. I made sure of that. It appears everything is working well.

 

[thelonelycoder]

I wonder what it's price point is as well. If Diversion achieves the same thing why would you need it. Although, it's good that it's Open Source.

Seems to be free. But I'm sure they do some data gathering for their own good.
I stick to my script. Here I know exactly what it's doing .

Certainly no phoning home in Diversion, exept he update check if enabled.. I would not want to know what you all use the internet for.

Btw @Skeptical.me Diversion is tolerant to preinstalled Entware. The Entware installer is not. So you best let Diversion do its thing and keep your fingers away from other stuff unless you know what you do.