Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Oh well..default greed, next choice more greed...then more greed. Last one is max greed. Non-trivial number of ppl on this forum don't know what they're doing or judge what they're getting. Pls do keep me posted on the diagnosis. If it's a real issue from pixelserv-tls, it shall be an...
  2. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Are you sure it's pixelserv-tls? You can set log LEVEL to 4 and monitor what domains & URLs are blocked i.e. redirected to pixelserv-tls. $ wget -qO - http://<pixelserv ip>/log=4 $ tail -f /tmp/syslog.log | grep pixelserv-tls | grep <windows pc IP> Then try your windows update or browse...
  3. K

    Diversion Diversion - the Router Ad-Blocker

    ASUSWRT (and for clarify also ASUSWRT-Merlin) provides bare minimum functionality for scripting. Entware solves the problem and provides a rich set of tools. By this day & night, I wonder if Diversion can run without some of the tools from Entware (my guess.. I didn't check). Apparently you can...
  4. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Take a break from the forum then..it'll heal itself eventually. Btw, your stats look far better than some as a starter that I've seen. It indicates a clean & neat LAN environment perhaps.
  5. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    More and more browsers support TLS 1.3 final indeed. Including today's iOS 12.1 release. Support for Safari & Chrome (v70) appear relying on iOS that requires an Apple Profile to enable unfortunately.
  6. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    This issue has been raised by a few people in this and other threads. I answered a few times before. If you scroll back a few pages, you'll see the latest. If you scroll back a month or two, you should see another one. In a nutshell, the issue is not caused by pixelserv-tls. You've a few...
  7. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    DNS in general has been working reliably well for many years. Perhaps that's why people do not see the urge adding DNSSEC. With blacklisted domains in DNS servers, you don't need that many add-ons (uBlock Origin, AdGuard and what else..?) duplicating the same effort. I have uBlock Origin but...
  8. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Nice. Don't forget to turn on the flag "security.tls.enable_0rtt_data" for faster speed on the growing number of TLS 1.3 sites.
  9. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Cloudflare does well at marketing. Don't get carried away with some of its spins. People grown up with Google could smell something in the air. lol
  10. K

    Configuring syslog-ng with merlin firmware

    My conf still begins with "@version 3.9" and everything created inside back then still work as-is in v3.16 The bigger problem for Entware when you have more than a few services installed is dealing with config related files overwritten on every upgrade. People have to come up with their own...
  11. K

    Vulnerability found in libssh/OpenSSH

    OpenSSH tangos with OpenSSL libraries only.
  12. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Apple will drop support for TLS 1.0 & 1.1 by March 2020. Firefox, Chrome and Edge will do the same around the same time. https://webkit.org/blog/8462/deprecation-of-legacy-tls-1-0-and-1-1-versions/
  13. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    This should not get buried and lost.. A script to enable on the fly and present pixelserv-tls log (for whitelisting domain, privacy breach inspection, and etc): https://www.snbforums.com/threads/diversion-the-router-adblocker.48538/page-30#post-434213 I should emphasise that pixelserv-tls...
  14. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    I believe the SSL Lab page only tests DRAFT versions of TLS 1.3. Also TLS 1.3 support in Firefox & Chrome has nothing to do with the Apple system-wide default flag.. So now with a few people have tried it on Mac. Seems like Apple indeed has TLS 1.3 final version built in Mojave (& iOS 12..) but...
  15. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Good to see the issue get resolved with peer 2 peer support w/o my involvement :)
  16. K

    USB GPS instead of NTP

    After ~36 hours, my server finally scores a perfect 20 on ntppool project's dashboard. Locally the system clock (connected to GPS) is well within an offset ~200ns from the "true" time. Sync'ing across the Pacific ocean, the LA monitor station registers an offset within ~1ms most of the time...
  17. K

    USB GPS instead of NTP

    My stratum 1 NTP server has gone public. It's among top of the league in Rasp Pi/SBC server world from data I've seen online so far. It's also ntppool project but the zone data is not right and I'm in the process of getting it corrected. Also by design it's IPv6 only. If your machines are in...
  18. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Spot on! @elorimer. One stone two falcons..
  19. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    For ARM routers, people have a choice of a "static" or "dynamic" binary of pixelserv-tls 2.2.0 when you install using my script. Here is the story. For router users on this forum, you aren't going to get the new OpenSSL 1.1.1 library from anywhere anytime soon on your routers. TLS 1.3 requires...
Top