Diversion Diversion - the Router Ad-Blocker

[Hammer73]

It works as-is. Bare host lists were supported by Diversion somewhat recently.

I can confirm. Works like a charm!
List is endorsed by LE and used by, for instance, hospitals to protect their staff and patients. Obviously lot's of 'Covid' reading there!

 

[thelonelycoder]

Well, I've pushed another minor update for Diversion, still no version change

- Fix for the last entry in the blocking list not having a space at the end.
- Re-added omitted dot (.) escape line for the temporary whitelist, thanks @Dabombber for making me double check.
- Removes eventual orphaned blocking IP line from the blocking list, thanks @Dabombber for the observation

I hope this is it with the domain count and whitelist saga.

Note: Before doing any whitelisting with el before the blocking list update day, update the blocking list manually with bu.
The format has slightly changed for the desired count accuracy.

Use u to update.

 

[EmeraldDeer]

It works as-is. Bare host lists were supported by Diversion somewhat recently.

Cool

 downloading Custom blocking list, 2 file(s)
 using 192.168.50.2 as blocking IP, adding "::" as IPv6 blocking IP

 processing file 1 of 2
 no local file: getting new file
 https://blocklist.cyberthreatcoalition.org/vetted/domain.txt
######################################################################################################################################################################################################################################################### 100.0%
 file is in domains only format
 processing file 1 done

 processing file 2 of 2
 remote file newer: getting new file
 https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/gambling-porn/hosts
######################################################################################################################################################################################################################################################### 100.0%
 file is in hosts file format (IP-domain pair)
 processing file 2 done

 removing whitelisted domains in blocking list, sorting file

 writing Custom blocking list

 adding IPv6 blocking entries

 update Custom blocking list complete

 

[JaimeZX]

Okay, not sure if I never noticed this before or it's something new or __________. I searched (thread & Diversion FAQ) but didn't see anything. Pixelserv IP (192.168.x.3) not accessible by guest machines? Can't ping it, much less download the new ca.crt.

 

[thelonelycoder]

Okay, not sure if I never noticed this before or it's something new or __________. I searched (thread & Diversion FAQ) but didn't see anything. Pixelserv IP (192.168.x.3) not accessible by guest machines? Can't ping it, much less download the new ca.crt.

Try to restart it in ep, 4.

 

[dave14305]

Okay, not sure if I never noticed this before or it's something new or __________. I searched (thread & Diversion FAQ) but didn't see anything. Pixelserv IP (192.168.x.3) not accessible by guest machines? Can't ping it, much less download the new ca.crt.

Is your Guest Network set to disable Intranet access? The Pixelserv IP would be considered intranet.

 

[JaimeZX]

Is your Guest Network set to disable Intranet access? The Pixelserv IP would be considered intranet.

Hm. Yes. So that's interesting. I wouldn't want Guest machines to have access to other network resources, but Pixelserv would be useful. And a network printer... Otherwise what's the point of even having a Guest Network?

 

[dave14305]

Hm. Yes. So that's interesting. I wouldn't want Guest machines to have access to other network resources, but Pixelserv would be useful. And a network printer... Otherwise what's the point of even having a Guest Network?

Look into YazFi. https://www.snbforums.com/threads/y...-merlin-guest-wifi-inc-ssid-vpn-client.45924/

 

[minhgi]

Pi hole script to block youtube ads. I was planning to get raspberry pi and have that install. Cam across the post about new youtube ads script which gaining tract on. Can this be integrate into diversion.


https://discourse.pi-hole.net/t/youtube-script-seems-to-be-working-very-well/31316/68


Sent from my iPad using Tapatalk

 

[JaimeZX]

Look into YazFi. https://www.snbforums.com/threads/y...-merlin-guest-wifi-inc-ssid-vpn-client.45924/

Ah-HA! That's how I had it working before. Somehow I forgot about Yaz-Fi, and after I wiped and reinstalled I am waiting several days between re-enabling scripts...

 

[thelonelycoder]

Pi hole script to block youtube ads. I was planning to get raspberry pi and have that install. Cam across the post about new youtube ads script which gaining tract on. Can this be integrate into diversion.


https://discourse.pi-hole.net/t/youtube-script-seems-to-be-working-very-well/31316/68


Sent from my iPad using Tapatalk

Good find.
Folks: Looks like my quick and sloppy adaption is working. No YT ads.

 

[thelonelycoder]

Good find.
Folks: Looks like my quick and sloppy adaption is working. No YT ads.

Give me some time to make a beta version, all fully automated of course.

 

[minhgi]

Guess I have switched out the ax11000 for the ax88u. Appreciate getting it integrated with diversion.

Sent from my Pixel 2 XL using Tapatalk

 

[TonyK132]

In looking at my logs, I'm getting a number of these kinds of entries:

May 7 13:37:45 RT-AC86U-1BD0 pixelserv-tls[2868]: create_child_sslctx: cannot find or use /opt/var/cache/pixelserv/_.amazon.com
May 7 13:37:45 RT-AC86U-1BD0 pixelserv-tls[2868]: tls_clienthello_cb: fail to create sslctx or cache _.amazon.com
May 7 13:39:44 RT-AC86U-1BD0 pixelserv-tls[2868]: create_child_sslctx: cannot find or use /opt/var/cache/pixelserv/_.samsungcloudsolution.net
May 7 13:39:44 RT-AC86U-1BD0 pixelserv-tls[2868]: tls_clienthello_cb: fail to create sslctx or cache _.samsungcloudsolution.net

Is this an issue with Diversion?

 

[dave14305]

In looking at my logs, I'm getting a number of these kinds of entries:

May 7 13:37:45 RT-AC86U-1BD0 pixelserv-tls[2868]: create_child_sslctx: cannot find or use /opt/var/cache/pixelserv/_.amazon.com
May 7 13:37:45 RT-AC86U-1BD0 pixelserv-tls[2868]: tls_clienthello_cb: fail to create sslctx or cache _.amazon.com
May 7 13:39:44 RT-AC86U-1BD0 pixelserv-tls[2868]: create_child_sslctx: cannot find or use /opt/var/cache/pixelserv/_.samsungcloudsolution.net
May 7 13:39:44 RT-AC86U-1BD0 pixelserv-tls[2868]: tls_clienthello_cb: fail to create sslctx or cache _.samsungcloudsolution.net

Is this an issue with Diversion?

You may have a few or many corrupt certificates. You can either purge all the certificates from within Diversion ep, or check them individually with this command:

openssl x509 -text -noout -in /opt/var/cache/pixelserv/_.amazon.com

If this prints the cert contents, it's OK. If not delete it with the rm command.

If it's a ton of them, just purge them all within Diversion.

 

[HorseCalledHorse]

Give me some time to make a beta version, all fully automated of course.

That would be huge. I followed the links and checked out the reddit page and, while it's all a little over my head, it definitely seems to be giving people great results.

 

[distilled]

This is awesome! Google often do turn April showers golden, as any Android user who has battled triggering Safety Net can attest. Hopefully they are content enough with their ad delivery success rate that fighting fixes isn't worth their effort.

 

[jrmwvu04]

Give me some time to make a beta version, all fully automated of course.

I happen to have an aggressive YouTube user in my house, so if you’re interested in lots of field testing, feel free to pass it along.

 

[SomeWhereOverTheRainBow]

A new blocklist specifically around protecting from COVID-19 scams/malware. Anyone tried it yet? I've just added it for kicks, in lieu of a vaccine.

https://www.cyberthreatcoalition.org/blocklist

it looks to me like those may be in most of the common blocklist.. i guess the only difference is

| IOCs has been vetted by humans with love <3

 

[KGB7]

Hi everyone,

Question from a total non-techie (well, almost total): is there anything that either Diversion or SkyNet would be doing that would block my Desktop PC from connecting to my Echo Studio when listening via Spotify? All of a sudden I can't play Spotify through my Echo. I can play SiriusXM no problem. I'm guessing it's a temporary outage somewhere else, because I've been using Diversion and SkyNet for some time without any issues (see my signature below). Still, just checking...

Thanks,
Anton

Its May the 8th.
Spotify is working just fine for me on iPad streaming to HomePod.

Here is a list of domains needed for whitelisting for spotify as well

mobile-ap.spotify.com
apresolve.spotify.com
upgrade.scdn.com
market.spotify.com
spclient.wg.spotify.com
audio-ake.spotify.com.edgesuite.net

Thanks for the list incase I need it in the future.

At the moment, Spotify is working with out issues on iPad while streaming to HomePod.