R7800 Router Level Ad-Blocking On Voxel 72SF

[Tom Brough]

Whilst I used to run ad-blocking on older voxel firmwares I can't seem to get it to function on the new firmwares, despite following the same @kamoj Guide, it always ends up telling me that DNScrypt isn't running but is enabled, and my internet connection doesn't work... I assume there's been a change in DNScrypt layout so does anyone know an up-to-date guide for ad-blocking on the newer firmware versions??

 

[Tom Brough]

 

[kamoj]

Please check log-file:

cat /var/log/dnscrypt-proxy-2.log

 

[Tom Brough]

Photo above shows that... Fatal error, can't find blacklist.txt even though the other picture shows it downloading it... I copy and pasted your guide and it used to work on firmware 67 but doing the same steps kills 72 install....

 

[Tom Brough]

Would a pi-hole server be a better option??

 

[kamoj]

I'll have another look at it today, to check that my add-on is still working...

Run this to see if dnscrypt2 will restart:

touch /etc/blacklist.txt
/etc/init.d/dnscrypt-proxy-2 stop
/etc/init.d/dnscrypt-proxy-2 start
tail /var/log/dnscrypt-proxy-2.log

Also please run this when you have the problem:

find / -type f -name blacklist.txt -exec ls -al {} 2>/dev/null \;

 

[Tom Brough]

I will try that later when I'm home... I've already tried the stop start code before, it's also in a picture above but it didn't work.

But like I said I'll try all the code in one hit and see what it does.

 

[Tom Brough]

@kamoj

Reinstalled the ad blocking set up, copy and pasted your code to rule out typos... Still doesn't work and kills the internet connection completely.

Log error is as before in one of the pictures I posted, fatal error with regarding the blacklist.

Running that next batch of code still doesn't fix the internet connectivity, DNS crypt still reports as not running but enabled and I can't access the internet.

/etc/init.d/dnscrypt-proxy-2 stop

Gets the internet working again, but starting dnscrypt kills it, so currently it's stopped.

The screenshot attached shows the result of these lines of code, I've tried rebooting etc but the only way I can get internet access now is to leave DNS crypt off, so something has changed in these newer updates.

 

[kamoj]

I'm sorry for your problem.
Is there a special reason to why you don't follow my advice, and give proper command and output?

When internet is "killed" can you use ping to ip-address, eg ping 8.8.8.8 or not?
If so internet is not dead. If that work and: ping google.com is not working you have a dns problem.

I think you should start by restoring the original .toml file:

\cp -p /rom/etc/dnscrypt-proxy-2.toml   /etc/dnscrypt-proxy-2.toml

PS
I'm running 2.0.28 that came with Voxel 72SF. It's working for me, as did 70SF.
I have not tried my old advice for blacklist, since I'm testing out my add-on - that is working fine if I don't forget the "touch"...
Have a nice weekend!

@kamoj

Reinstalled the ad blocking set up, copy and pasted your code to rule out typos... Still doesn't work and kills the internet connection completely.

Log error is as before in one of the pictures I posted, fatal error with regarding the blacklist.

Running that next batch of code still doesn't fix the internet connectivity, DNS crypt still reports as not running but enabled and I can't access the internet.

/etc/init.d/dnscrypt-proxy-2 stop

Gets the internet working again, but starting dnscrypt kills it, so currently it's stopped.

The screenshot attached shows the result of these lines of code, I've tried rebooting etc but the only way I can get internet access now is to leave DNS crypt off, so something has changed in these newer updates.

 

[Tom Brough]

I'm sorry for your problem.
Is there a special reason to why you don't follow my advice, and give proper command and output?

Sorry @kamoj I don't really know what you mean, I'm not good at this kind of stuff, which is why I'm waiting for your add on, so it's a box ticking job to set up.

I restarted DNScrypt and lost internet again, I tried ping 8.8.8.8 and it works, I tried ping google.com and it works but using the internet via chrome or apps etc doesn't load.

To get internet activity again I have to stop dnscrypt via telnet.

I've just tried restoring the .toml file and now started dnscrypt and it's working again.

So something in the ad-blocking set up breaks dnscrypt from working. I think my dnscrypt is .31 but I'm now factory resetting and reinstalling .72 so I will try again, and post the results.

 

[Tom Brough]

Code:
touch /etc/blacklist.txt
/etc/init.d/dnscrypt-proxy-2 stop
/etc/init.d/dnscrypt-proxy-2 start
tail /var/log/dnscrypt-proxy-2.log

This command returns me...

[2019-11-09 16:37:45] [NOTICE] Source [public-resolvers.md] loaded
[2019-11-09 16:37:45] [NOTICE] Firefox workaround initialized
[2019-11-09 16:37:45] [NOTICE] Loading the set of blocking rules from [blacklist.txt]
[2019-11-09 16:37:45] [FATAL] open blacklist.txt: no such file or directory
[2019-11-09 16:39:26] [NOTICE] dnscrypt-proxy 2.0.31
[2019-11-09 16:39:26] [NOTICE] Network connectivity detected
[2019-11-09 16:39:26] [NOTICE] Source [public-resolvers.md] loaded
[2019-11-09 16:39:26] [NOTICE] Firefox workaround initialized
[2019-11-09 16:39:26] [NOTICE] Loading the set of blocking rules from [blacklist.txt]
[2019-11-09 16:39:26] [FATAL] open blacklist.txt: no such file or directory

 

[Tom Brough]

Code:
find / -type f -name blacklist.txt

This command gives me this...

root@NetgearR7800:/$ find / -type f -name blacklist.txt
/etc/blacklist.txt
/overlay/etc/blacklist.txt
find: /proc/7316: No such file or directory
find: /proc/7319: No such file or directory
find: /proc/7322: No such file or directory
find: /proc/7325: No such file or directory
find: /proc/7333: No such file or directory
find: /proc/7356: No such file or directory
find: /proc/7359: No such file or directory
find: /proc/7362: No such file or directory
find: /proc/7365: No such file or directory
find: /proc/7368: No such file or directory find: /proc/7371: No such file or directory
find: /proc/7374: No such file or directory
find: /proc/7377: No such file or directory
find: /proc/7380: No such file or directory

 

[Tom Brough]

Internet connectivity is lost and the dnscrypt info on the debug menu says

DNSCrypt v2 is not running, but is enabled

 

[kamoj]

Can you please read again and issue the whole command I suggested?
(I mean, if you ask for help or advice, you should follow those given to you.)

find / -type f -name blacklist.txt -exec ls -al {} 2>/dev/null \;

Also very helpful if you issue these commands and try again:

touch /etc/ip-blacklist.txt
grep -E "blacklist_file|blacklist.txt" /etc/dnscrypt-proxy-2.toml
hexdump -C /etc/blacklist.txt | grep -Ec "0d  0a|0d 0a"

PS
Never give up!

This command gives me this...

root@NetgearR7800:/$ find / -type f -name blacklist.txt
/etc/blacklist.txt
/overlay/etc/blacklist.txt
find: /proc/7316: No such file or directory
find: /proc/7319: No such file or directory
find: /proc/7322: No such file or directory
find: /proc/7325: No such file or directory
find: /proc/7333: No such file or directory
find: /proc/7356: No such file or directory
find: /proc/7359: No such file or directory
find: /proc/7362: No such file or directory
find: /proc/7365: No such file or directory
find: /proc/7368: No such file or directory find: /proc/7371: No such file or directory
find: /proc/7374: No such file or directory
find: /proc/7377: No such file or directory
find: /proc/7380: No such file or directory

 

[Tom Brough]

find / -type f -name blacklist.txt -exec ls -al {} 2>/dev/null \;

The quote hides some of the command so I didn't see it, but running it gives this reply.

root@NetgearR7800:/$ find / -type f -name blacklist.txt -exec ls -al {} 2>/dev/null \;
-rw-r--r-- 1 root root 242535 Nov 9 17:08 /etc/blacklist.txt
-rw-r--r-- 1 root root 242535 Nov 9 17:08 /overlay/etc/blacklist.txt

 

[Tom Brough]

touch /etc/ip-blacklist.txt
grep -E "blacklist_file|blacklist.txt" /etc/dnscrypt-proxy-2.toml
hexdump -C /etc/blacklist.txt | grep -Ec "0d 0a|0d 0a"

This doesn't seem to do much??

root@NetgearR7800:/$ touch /etc/ip-blacklist.txt
root@NetgearR7800:/$ grep -E "blacklist_file|blacklist.txt" /etc/dnscrypt-proxy-2.toml
blacklist_file = 'blacklist.txt'
# blacklist_file = 'ip-blacklist.txt'
root@NetgearR7800:/$ hexdump -C /etc/blacklist.txt | grep -Ec "0d 0a|0d 0a"
0
root@NetgearR7800:/$

Internet still doesn't work and dnscrypt says not running but enabled.

 

[Tom Brough]

@kamoj

Forgot to say thanks for all this time and effort.

 

[Tom Brough]

Did you get the chance to try yesterday @kamoj

 

[kamoj]

Yes, I found your problem , and I updated https://www.snbforums.com/threads/h...ile-with-dnscrypt-proxy-v2.49803/#post-446156
In short: The newer dnscrypt2 version need the whole path to the blacklist file.
So in the .toml file this change must be done:
from: blacklist_file = 'blacklist.txt'
to: blacklist_file = '/etc/blacklist.txt'

Did you get the chance to try yesterday @kamoj

 

[Tom Brough]

Thanks @kamoj