dnsmasq[436]: failed to load names from /tmp/mnt/sda1/hosts.clean: No such file or directory
I believe you mix up the hosts file and the blacklist. My blacklist only has about 52 (manual) entries. The rest is handled by the hosts file.
It appears to be running according to your log: Nov 2 19:04:20 dnsmasq[853]: read /tmp/mnt/sda1/hosts.clean - 25248 addresses
are you saying that this working? how to test if this addresses realy blocked to create connection to my browser?
so, this addresses not open...this is correct? how to add more addresses or IP addresses to block? if i add address to hosts.clean file and reboot lost that address....
Yes, you seem to have a working adblocking. To manually add your own blacklist you will need to use the advanced method in post #1. But you'll have to remove all files from the standard method first, as described in the post.
It would be fairly easy to set up the dnsmasq entries. pgl.yoyo.org even supply their list in dnsmasq format already. The jffs writes are a non-issue, as has been discussed at length elsewhere in this forum. Performance using the current "large" host file is also not an issue, even on my N66U.
#!/bin/sh
sleep 10
cru a UpdateHosts "00 00 * * 5 service restart_dnsmasq"
# re-launch dnsmasq because dnsmasq came up before wan was ready
service restart_dnsmasqTook the idea of having everything set up using "address=/xxxx.xxx/0.0.0.0", your suggestion of using only those two sources and do not use any other script besides dnsmasq.postconf and got rid of the hosts file completely. Will see how it goes as for blocking ads...
#!/bin/sh
logger -t $(basename $0) "DNS Postconf Started!"
#Location of downloaded and working files
dir=/tmp/mnt/sda2/hosts
#IP to use to resolve hosts
DivertIP=10.99.99.99
#Set Timeout and Tries
tmout=30
tries=3
#Get Yoyo server list, ready in dnsmasq format using DivertIP
wget -qO- -T $tmout -t $tries "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq&showintro=0&startdate[day]=&startdate[month]=&startdate[year]=&mimetype=plaintext&useip="$DivertIP > $dir/yoyo.txt
if [[ $? -eq 0 ]]; then
#Download OK!
logger -t $(basename $0) "Yoyo download OK"
echo "Yoyo download OK"
#Save Backup
cp $dir/yoyo.txt $dir/yoyo_bkp.txt
else
logger -t $(basename $0) "Yoyo download FAILED"
echo "Yoyo download FAILED"
#Use Backup
cp $dir/yoyo_bkp.txt $dir/yoyo.txt
fi
#Get Malwaredomainlist hosts file, must be worked on
wget -q -T $tmout -t $tries -O $dir/mdl.txt "http://www.malwaredomainlist.com/hostslist/hosts.txt"
if [[ $? -eq 0 ]]; then
#Download OK!
logger -t $(basename $0) "Malwaredomainlist download OK"
echo "Malwaredomainlist download OK"
#Save Backup
cp $dir/mdl.txt $dir/mdl_bkp.txt
else
logger -t $(basename $0) "Malwaredomainlist download FAILED"
echo "Malwaredomainlist download FAILED"
#Use Backup
cp $dir/mdl_bkp.txt $dir/mdl.txt
fi
#Continue Processing of file
#Convert DOS->UNIX
sed -i 's/.$//' $dir/mdl.txt
#Remove all comments from file
sed -i 's/#.*//g' $dir/mdl.txt
#Remove al spaces from file
sed -i 's/\t//g' $dir/mdl.txt
#Remove all localhost entries
sed -i '/localhost/d' $dir/mdl.txt
#Changes the "127.0.0.1" at the beginning of each line with "address=/"
sed -i 's/^127.0.0.1 /address=\//g' $dir/mdl.txt
#Removes all lines not containing "address"
sed -i '/address/!d' $dir/mdl.txt
#adds "/$DivertIP" to the end of each line
sed -i 's/$/\/'$DivertIP'/' $dir/mdl.txt
#Remove non-printable chars
sed -i 's/[^a-zA-Z 0-9`~!@#$%^&*()_+\[\]\\{}|;'\'':",.\/<>?]//g' $dir/mdl.txt
#Move both files to a midway file
cat $dir/mdl.txt > $dir/midway.txt
cat $dir/yoyo.txt >> $dir/midway.txt
#Sort Midway file and remove duplicates
sort -u $dir/midway.txt
#Clean whitelist of white lines (can produce a blank end result otherwise)
grep -v '^$' $dir/whitelist.txt > $dir/whitelist_clean.txt
#Remove whitelisted entries from config file
cat $dir/whitelist_clean.txt | sed $'s/\r$//' | grep -vf - $dir/midway.txt > $dir/dnsmasq.conf.add
#Append our file to dnsmasq already created config
cat $dir/dnsmasq.conf.add >> /etc/dnsmasq.conf
logger -t $(basename $0) "DNS Postconf Completed!"iptables -t nat -A PREROUTING --dest 10.99.99.99 -p tcp -m multiport --dport 80,443 -j DNAT --to-dest 10.124.56.1:8080What do you get if you do an nslookup from your Windows PC?
nslookup cdn.flashtalking.comYour client PC was configured to go directly to Google's DNS servers and was therefore bypassing dnsmasq on the router (where the ad blocking takes place).
| Thread starter | Title | Forum | Replies | Date |
|---|---|---|---|---|
| D | How to restrict VPN network access to certain IP Range or Hosts for specific VPN client | Asuswrt-Merlin | 8 |
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!
