AB-Solution - The Ad Blocking Solution

[Xentrk]

From a the research I did, I came across a lot of threads in the DD-WRT and Tomato forums about the issue. It seems the DNS leak is also a common problem among DD-WRT and Tomato firmware when using Policy Rules.

This thread was interesting. http://www.linksysinfo.org/index.php?threads/dns-leak.73296/

The fix was summarized here:

https://docs.google.com/document/d/14Bh3SEYSJqBvN9nU49Ep7CWsT_Gqv1N0QbCosFwf52w

I tired the solution but it did not work

 

[steelskinz]

I appreciate input in any way. Don't hold back on ideas.

AB-Solution is at a threshold at the moment.
Ad-blocking wise, there ia not much left to improve it. The routers limited recources are a hard stop for any ideas I have to make it more useful or granular in its capability.
V3.9x is as far as I can/will go with the code basis I built to install and manage the services AB-Solution offers.

I mentioned this on several occasions before: AB-Solution 4.0 will be a completely different app.
To give you a hint where this is going: I have a more or less working copy of Pi-Hole running on one of my Asus test routers.
This is to test the WebUI features I plan to implement and how much resources this will take.
My idea is to NOT fork Pi-Hole and port it to Asuswrt-Merlin but offer a similar experience in AB 4.x.
It is planned to have both the current terminalUI and a WebUI.

It is a bit off topic but did you try pi hole on chroot debian on the router to see how it reacts with the CPUs/RAM ?

https://www.hqt.ro/how-to-install-debian-jessie-arm/

Just an idea..

Seems that it's not working without testing with debian :

https://discourse.pi-hole.net/t/pihole-directly-on-routers-tomato-merlinwrt-dd-wrt-openwrt/1314/23
https://discourse.pi-hole.net/t/run-pihole-directly-on-asus-merlin-dd-wrt-router/182/13

 

[thelonelycoder]

It is a bit off topic but did you try pi hole on chroot debian on the router to see how it reacts with the CPUs/RAM ?

https://www.hqt.ro/how-to-install-debian-jessie-arm/

Just an idea..

Seems that it's not working without testing with debian :

https://discourse.pi-hole.net/t/pihole-directly-on-routers-tomato-merlinwrt-dd-wrt-openwrt/1314/23
https://discourse.pi-hole.net/t/run-pihole-directly-on-asus-merlin-dd-wrt-router/182/13

Too easy for me, so I modified the install script. I'm interested how well it works with the web interface.
Running it in debian would add another layer I have no intention of using for AB.

 

[steelskinz]

I know you won't go on Debian, it was just a suggestion to test it right away

 

[thelonelycoder]

And here's another reason why we use ad-blockers.
This shows hidden ads loading to gain fake clicks:
https://t.co/34sbsNkVuj

 

[clvk07]

Hi

A lot of web sites give me a certificate error on both windows and phones, what needs to be done to stop warnings? (the identity of this web site or the integrity of this connection can not be vefrfied)

 

[thelonelycoder]

Hi

A lot of web sites give me a certificate error on both windows and phones, what needs to be done to stop warnings? (the identity of this web site or the integrity of this connection can not be vefrfied)

Two ways: Ignore it by clicking Cancel or whatever the option is.
Or import the pixelserv-tls certificate into your browser.

 

[clvk07]

Two ways: Ignore it by clicking Cancel or whatever the option is.
Or import the pixelserv-tls certificate into your browser.

I imported rom/etc/ssl/certs/ca-certificates.crt into IE but still getting the message, is this the right/only file needed?

 

[thelonelycoder]

I imported rom/etc/ssl/certs/ca-certificates.crt into IE but still getting the message, is this the right/only file needed?

You need to import the pixelserv cert, not the one for the router:
/opt/var/cache/pixelserv/ca.crt

 

[MarCoMLXXV]

BTW @MarCoMLXXV, your signature needs adjustment:
with Pixelserv-TLS by @bigeyes0x0 installed.
Pixelserv-tls is by @mstombs and @kvic

I forgot to mention it, but realized yesterday (I think) that the changes I made at your request @thelonelycoder, were wrong (again, sigh). Can you check if it is correct now? I really do want give proper credits where credits are due...

 

[thelonelycoder]

I forgot to mention it, but realized yesterday (I think) that the changes I made at your request @thelonelycoder, were wrong (again, sigh). Can you check if it is correct now? I really do want give proper credits where credits are due...

That appears to be correct now.

 

[MarCoMLXXV]

That appears to be correct now.

Good morning beautiful Switzerland, thanks for checking. Much appreciated

 

[thelonelycoder]

Good morning beautiful Switzerland, thanks for checking. Much appreciated

And another lovely day here, 12° C, with clouds hovering just above the lower mountains, light drizzle and a weekend full of tasks waiting to be done.

 

[Xentrk]

I wanted to share this in case there are other college football fans that watch the games on the ESPN website and you are using AB-Solution.

I discovered software called playon.tv that you can load on your PC to record streaming media so you can watch later or when you are traveling and not connected to WIFI. I purchased it so I could record college football games that are on in the wee hours of the morning in my time zone so I could watch them later on Roku.

I was not able to record the ESPN channel on playon.tv server. I went to the espn.com/watch web site and was not able to play any videos. I searched the combined host file for espn and found these entries:

seavideo-ak.espn.go.com
adsatt.espn.go.com
adsatt.espn.starwave.com
espn-ak.starwave.com

I white listed the first one, seavideo-ak.espn.go.com and this allowed the videos to play. This also fixed the recording issue with playon.tv.

 

[Makaveli]

I wanted to share this in case there are other college football fans that watch the games on the ESPN website and you are using AB-Solution.

I discovered software called playon.tv that you can load on your PC to record streaming media so you can watch later or when you are traveling and not connected to WIFI. I purchased it so I could record college football games that are on in the wee hours of the morning in my time zone so I could watch them later on Roku.

I was not able to record the ESPN channel on playon.tv server. I went to the espn.com/watch web site and was not able to play any videos. I searched the combined host file for espn and found these entries:

seavideo-ak.espn.go.com
adsatt.espn.go.com
adsatt.espn.starwave.com
espn-ak.starwave.com

I white listed the first one, seavideo-ak.espn.go.com and this allowed the videos to play. This also fixed the recording issue with playon.tv.

I've been looking at your post and they have been great.

I'm thinking we should create a sub thread of this one just specifically on stuff like this.

So people can easily see what links should be white listed/Blacklisted and what sites affected?

What do you guys think?

 

[thelonelycoder]

I've been looking at your post and they have been great.

I'm thinking we should create a sub thread of this one just specifically on stuff like this.

So people can easily see what links should be white listed/Blacklisted and what sites affected?

What do you guys think?

I'm not sure this needs a separate thread.

Anyway, this is going to be part of AB4.0 with the ability to download and then enable/disable <specific>-whitelist.
I copy the posts here with solutions to whitelist into a file to compile these whitelists.

 

[Makaveli]

I'm not sure this needs a separate thread.

Anyway, this is going to be part of AB4.0 with the ability to download and then enable/disable <specific>-whitelist.
I copy the posts here with solutions to whitelist into a file to compile these whitelists.

I figured a seperate thread would be good since this one is 68 pages long. And a new one would be specific to Blacklist/Whitelist and easier/faster to read.

But it sounds like you got it covered in 4.0

 

[thelonelycoder]

I figured a seperate thread would be good since this one is 68 pages long

Is this really a problem? John's LTS thread is more than 325 pages with 6500 replies, the firmware gets continuously updated.

It's a mess for me to always start a new thread and update links in about 20 places.
That's why I decided to rename this thread to what it is now.
I'd like to keep things in one place if at all possible.

 

[Xentrk]

I've been looking at your post and they have been great.

I'm thinking we should create a sub thread of this one just specifically on stuff like this.

So people can easily see what links should be white listed/Blacklisted and what sites affected?

What do you guys think?

I first tried to use the follow the log file option to find the offending domain name. That did not reveal it to me. I also did a tail -f on the dnsmasq.log file. I was searching the web for reasons why espn video was being blocked on their website and came across a forum where someone mentioned their MVPS hosts file was blocking it. That is what clued me in to looking at the hosts file to search for espn. Rather than white listing all four domains, I decided to try one by one and was glad when the first one worked.

I use similar hosts file on pfBlockerNG on my pfSense appliance and was having issue there too. I have to go thru more steps to enable similar dnsmasq log file function for the DNS Resolver service to debug things like this. AB Solution makes it much easier.

 

[thelonelycoder]

I first tried to use the follow the log file option to find the offending domain name. That did not reveal it to me. I also did a tail -f on the dnsmasq.log file.

When using the f option "1. unfiltered log" you essentially run an unfiltered tail -f on the dnsmasq.log file:

    tail -F $abSolutionPath/$logsDir/dnsmasq.log | \
    while read line;do
        if echo "$line" | grep -q "is $custom_ipV4";then
            echo -e "$igreen$line$nc"
        else
            echo "$line"
        fi
    done

The extra code it to highlight blocked domains. Nothing gets omitted with option 1.