AB-Solution - The Ad Blocking Solution

[Wutikorn]

In one of the conversations that we had during development of the AdsbeGone! blocklist, @thelonelycoder mentioned that some of the hosts lists maintainers were very active , and that the hosts lists themselves had grown significantly since he started the AB project. This of course is going to mean you will see RAM usage creep up as the amalgamated block lists grow larger as a result.... that said, i can't see a jump of 30Mb being attributable to AB alone.

After several reboots, now it's just about 10MB more on average, which is about the size of AdsbeGone.

I just had my ISP changed at the beginning, so I am not sure which extra services were running at the time.

 

[yikyi]

Is there a way to use AB-Solution together with dnscrypt and dnssec? AB-Solution and dnscrypt should work seamlessly together, but why does dnssec interfere with it?

 

[tomsk]

Is there a way to use AB-Solution together with dnscrypt and dnssec? AB-Solution and dnscrypt should work seamlessly together, but why does dnssec interfere with it?

AB-solution will work quite happily with DNScrypt. You may find you are connecting to dnscrypt resolvers that are not dnssec enabled.....
https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv
check the dnssec validation column to see if your resolver is supported

 

[yikyi]

I acutally chose a dnssec enabled dnscrypt resolver during set-up. But when setting up AB-Solution it reminded me to disable the dns-based filtering. So I assumed it wan't me to deactived dnssec, doesn't it?

 

[tomsk]

I acutally chose a dnssec enabled dnscrypt resolver during set-up. But when setting up AB-Solution it reminded me to disable the dns-based filtering. So I assumed it wan't me to deactived dnssec, doesn't it?

No, the setup was just asking you to make sure you aren't doing dns filtering by redirecting dns queries away from dnsmasq, or adblocking doesn't work. Dnsmasq willl simply pass the query to the dnscrypt-proxy and then upstream to the dnscrypt resolver.

 

[yikyi]

Oh, I see. Thanks for clarification.

 

[thelonelycoder]

I acutally chose a dnssec enabled dnscrypt resolver during set-up. But when setting up AB-Solution it reminded me to disable the dns-based filtering. So I assumed it wan't me to deactived dnssec, doesn't it?

As @tomsk mentions, dns based filtering works with AB, if done right.
You are correct by saying AB warns that this will not work during install. I'll change the info text for that part to be more of a info to do it the right way.

 

[jack901]

yes I had a dns and had dnssec checked upon install it wiped out the dns ip on the dhcp server settings and placed them under wan. dnssec is still checked under dhcp server but when I tail f I get validation result is INSECURE.
so how do I get it to be secure now?
thanks

As @tomsk mentions, dns based filtering works with AB, if done right.
You are correct by saying AB warns that this will not work during install. I'll change the info text for that part to be more of a info to do it the right way.

 

[halex4u]

I upgraded the AB-Solution to the lastest version. Everything went well.

But now AB-SOLUTION is not blocking ads. I have DNSCRYPT installed and I have a yellow warning:

"Dnsmasq entry detected,
redirecting hosts to 127.0.0.1
Be aware that log file entries with '127.0.0.1'
are from another script, not AB-Solution".

I would appreciate any solution.
Thanks!

Sent from my ONEPLUS A3003 using Tapatalk

 

[thelonelycoder]

I upgraded the AB-Solution to the lastest version. Everything went well.

But now AB-SOLUTION is not blocking ads. I have DNSCRYPT installed and I have a yellow warning:

"Dnsmasq entry detected,
redirecting hosts to 127.0.0.1
Be aware that log file entries with '127.0.0.1'
are from another script, not AB-Solution".

I would appreciate any solution.
Thanks!

Sent from my ONEPLUS A3003 using Tapatalk

Did you install Dnscrypt after updating or before?
If it was installed before the update and you did not change anything dnscrypt wise, then post your setup script for it.
If you installed dnscrypt after updating AB, then please ask in the scripts maintainers thread why things don't work well with AB.

AB tries to do everything to work nicely together with other scripts, but in the end I can only hope the other script maintainers do as good a job as I do.
The helpful warning is there to give you a hint where to look.

 

[Beherit]

Quick question: When I try to whitelist the domain tradedoubler.com, I get no exact match but a list of more than 10 subdomains such as swrap.tradedoubler.com, tar.tradedoubler.com etc.

To whitelist them all, is it enough to add tradedoubler.com to the list or do I have to add each and single one of them individually? Or do I use a wildcard and add *.tradedoubler.com?

 

[thelonelycoder]

Quick question: When I try to whitelist the domain tradedoubler.com, I get no exact match but a list of more than 10 subdomains such as swrap.tradedoubler.com, tar.tradedoubler.com etc.

To whitelist them all, is it enough to add tradedoubler.com to the list or do I have to add each and single one of them individually? Or do I use a wildcard and add *.tradedoubler.com?

You have to each add them as a separate entry.
The wildcard * DOES NOT WORK in white- and blacklist.

 

[halex4u]

Did you install Dnscrypt after updating or before?
If it was installed before the update and you did not change anything dnscrypt wise, then post your setup script for it.
If you installed dnscrypt after updating AB, then please ask in the scripts maintainers thread why things don't work well with AB.

AB tries to do everything to work nicely together with other scripts, but in the end I can only hope the other script maintainers do as good a job as I do.
The helpful warning is there to give you a hint where to look.

The Dnscrypt was installed before AB-Solution upgrade and it was working fine with the previous version of AB-Solution. I changed nothing after upgrade.

This is what I have in Dnsmasq: http://pastebin.com/HhWEQ3K5

This is the script from jffs/script that I run it from WAN-START : http://pastebin.com/BTg45E1u


Thank you

 

[thelonelycoder]

The Dnscrypt was installed before AB-Solution upgrade and it was working fine with the previous version of AB-Solution. I changed nothing after upgrade.

This is what I have in Dnsmasq: http://pastebin.com/HhWEQ3K5

This is the script from jffs/script that I run it from WAN-START : http://pastebin.com/BTg45E1u


Thank you

Paste the full content of dnsmasq.conf

 

[halex4u]

The Dnscrypt was installed before AB-Solution upgrade and it was working fine with the previous version of AB-Solution. I changed nothing after upgrade.

This is what I have in Dnsmasq: http://pastebin.com/HhWEQ3K5

This is the script from jffs/script that I run it from WAN-START : http://pastebin.com/BTg45E1u


Thank you

Here you go:
- dnsmasq.conf.add : http://pastebin.com/TJZFmMcH
- dnsmasq.conf: http://pastebin.com/s1rn1nT0

Regards!

 

[thelonelycoder]

Here you go:
- dnsmasq.conf.add : http://pastebin.com/TJZFmMcH
- dnsmasq.conf: http://pastebin.com/s1rn1nT0

Regards!

For some reason dnsmasq.conf misses the entry for the blocking file.

addn-hosts=/tmp/mnt/ASUS/adblocking/blocking_file

Before you do anything, copy complete output of /tmp/mnt/ASUS/adblocking/scripts/ab_dnsmasq_postconf.sh

Then turn ad-blocking off [a] and back on again. See if the entry is in dnsmasq.conf and ab_dnsmasq_postconf.sh
Post both if they differ or still miss the blocking_file entry.
Else, your file is likely missing. Run (b) select same blocking file again, then let it run the update.
Then check again.
It'll be working now.

 

[thelonelycoder]

And @halex4u, you failed to mention the error message AB displays when that entry is missing:
checking dnsmasq.conf
file found
/etc/dnsmasq.conf is missing content
logging state looks good

Errors found.
Read the check's output for clues.

 

[tomsk]

Interesting information to check before trying to figure out why your dnssec isn't working
https://ianix.com/pub/dnssec-outages.html it's a pro DNScurve site but interesting nevertheless

 

[halex4u]

And @halex4u, you failed to mention the error message AB displays when that entry is missing:
checking dnsmasq.conf
file found
/etc/dnsmasq.conf is missing content
logging state looks good

Errors found.
Read the check's output for clues.

This is the error message AB dispalys: http://pastebin.com/gtNrmyWr

This is copy complete output of /tmp/mnt/ASUS/adblocking/scripts/ab_dnsmasq_postconf.sh: http://pastebin.com/QxqznAeA

This is entry in ab_dnsmasq.postconf.sh after I turned of the AB-solution: http://pastebin.com/viJ8RiAK

This is dnsmasq.conf after I turned of the AB-solution: http://pastebin.com/QAm30SF4

After turning on/off AB-solution nothing has changed.

 

[thelonelycoder]

This is the error message AB dispalys: http://pastebin.com/gtNrmyWr

This is copy complete output of /tmp/mnt/ASUS/adblocking/scripts/ab_dnsmasq_postconf.sh: http://pastebin.com/QxqznAeA

This is entry in ab_dnsmasq.postconf.sh after I turned of the AB-solution: http://pastebin.com/viJ8RiAK

This is dnsmasq.conf after I turned of the AB-solution: http://pastebin.com/QAm30SF4

After turning on/off AB-solution nothing has changed.

The problem you have is that you need to add at least ONE empty line after the last bit of code in every script you have that adds to dnsmasq.conf
In fact it is good practice to do it with every script.
This is evident with this line:

#conf-file=/jffs/configs/dnsmasq.win10.conflog-facility=/tmp/mnt/ASUS/adblocking/logs/dnsmasq.log

This is two lines in one. AB does this automatically to files it generates, but hand coded ones by users are out of AB's reach.
Donation link is on my Website.
Thanks