Diversion Diversion 4.3.3 - the Router Ad-Blocker, released April 02 2023

[Mogsy]

Hi @thelonelycoder and happy new year to you!

I've started getting this error when using the pre defined large list:

downloading Large blocking list, 1 file(s)
using 192.168.1.2 as blocking IP

processing file 1 of 1
remote file newer: getting new file
https://dbl.oisd.nl/
Error: https://dbl.oisd.nl/
Error: is not a valid hosts file, using backup file
file is in domains only format
processing file 1 done

removing whitelisted domains in blocking list, sorting file

writing Large blocking list

updated Large blocking list from 1 valid hosts file(s),
819231 domains are now blocked by Diversion.

I've temporary switched to Medium.

Check this project out. He included 97% oisd in some of his list + others

GitHub - hagezi/dns-blocklists: DNS-Blocklists: For a better internet - keep the internet clean!

DNS-Blocklists: For a better internet - keep the internet clean! - hagezi/dns-blocklists

github.com

 

[sentinelvdx]

I don' t know but OISD is very fragile when it comes to updating it if you are using Skynet etc. I am using OISD basic or lite which is https://dbl.oisd.nl/basic/ and still can't get remote file sometimes. Try whitelisting oisd domain name if you edited any whitelist files in Diversion or Skynet.

After adding it into Diversion's whitelist it worked... weird, because I've never touched anything since a long time...
Thanks for the help!

I'll give a look at that project too

 

[reddy]

See:

Alternate blocking list - Diversion

diversion.ch

Thanks! I gave it a try and indeed it does work. A few thoughts/questions/feature ideas, though:

1. Alternate blocking lists allow to set two 'groups' of lists. What if I'd need more (e.g. separate kids, parents, IoT devices, guests, etc)?
2. How to actually set the "Global Redirection" option in router's web UI? The guide says "No filtering" (which is actually called "No redirection" in AX86U) but I've read somewhere else (don't recall where now) that the basic setup for Diversion should be "Router" to redirect all DNS requests to Diversion
3. Is there a simple way to copy the whole list of lists from the primary to the secondary list? I had 28 lists in the primary one and I wanted the same plus some extra on the secondary one (or rather the other way round), and I had to enter all those 28 URLs again.
4. Can we group filter lists into meaningful sets and assign them to given list? I mean create separate group of lists for ads, malware, phishing, porn, gambling, etc. and assign thouse groups instead individual URLs
5. What does "Enable Skynet fast switch" (b->1->4) function do? I do have Skynet installed.
6. How to force safe search in the primary set but not in the secondary one?

 

[SomeWhereOverTheRainBow]

Hi @thelonelycoder and happy new year to you!

I've started getting this error when using the pre defined large list:

downloading Large blocking list, 1 file(s)
 using 192.168.1.2 as blocking IP

 processing file 1 of 1
 remote file newer: getting new file
 https://dbl.oisd.nl/
 Error: https://dbl.oisd.nl/
 Error: is not a valid hosts file, using backup file
 file is in domains only format
 processing file 1 done

 removing whitelisted domains in blocking list, sorting file

 writing Large blocking list

 updated Large blocking list from 1 valid hosts file(s),
 819231 domains are now blocked by Diversion.

I've temporary switched to Medium.

Oisd had a period of time where the website went down. It is back up now.

 

[thelonelycoder]

After adding it into Diversion's whitelist it worked... weird, because I've never touched anything since a long time...
Thanks for the help!

Each domain is auto-added to the dynamic tmp_hardcoded_whitelist in /opt/share/diversion/list and these entries automatically are added to the shared-Diversion-whitelist in /jffs/addons/shared whitelists which Diversion and Skynet auto exchange.
This has been the case for a long time now in Diversion.

The above files are not user editable, they are dynamically auto-generated.

 

[SomeWhereOverTheRainBow]

Each domain is auto-added to the dynamic tmp_hardcoded_whitelist in /opt/share/diversion/list and these entries automatically are added to the shared-Diversion-whitelist in /jffs/addons/shared whitelists which Diversion and Skynet auto exchange.
This has been the case for a long time now in Diversion.

The above files are not user editable, they are dynamically auto-generated.

The magic of dynamic operations.

 

[heysoundude]

Check this project out. He included 97% oisd in some of his list + others

GitHub - hagezi/dns-blocklists: DNS-Blocklists: For a better internet - keep the internet clean!

DNS-Blocklists: For a better internet - keep the internet clean! - hagezi/dns-blocklists

github.com

from my brief scan of the README at that link, there seems to be a .conf file for unbound for many/all levels.
Have you tested it vs the conf that @Martineau gives us?

 

[Mogsy]

from my brief scan of the README at that link, there seems to be a .conf file for unbound for many/all levels.
Have you tested it vs the conf that @Martineau gives us?

TBH I have never run unbound before. RT-AX86S sitting in the cupboard. Should I give it a go? Will be free from Monday. Let me know what should I try

 

[heysoundude]

TBH I have never run unbound before. RT-AX86S sitting in the cupboard. Should I give it a go? Will be free from Monday. Let me know what should I try

for starters, I'd suggest Diversion and Unbound, but let Diversion handle the blocking so that Unbound is just your network's DNS.
After that, I'd say SkyNet is the next thing, from the network perspective, but from there it gets down to users and client devices: De-google and get off social media by Meta, no microsoft (which includes skype)...see how difficult it gets?

 

[Mogsy]

for starters, I'd suggest Diversion and Unbound, but let Diversion handle the blocking so that Unbound is just your network's DNS.
After that, I'd say SkyNet is the next thing, from the network perspective, but from there it gets down to users and client devices: De-google and get off social media by Meta, no microsoft (which includes skype)...see how difficult it gets?

I'll give it a go when I have free time this week

 

[Dean.viens]

is there anyway to add iphone games to diversion white list? the wife wants to play a game and now she cant since I installed diversion. I'm assuming its because of it.

 

[PeterR]

is there anyway to add iphone games to diversion white list? the wife wants to play a game and now she cant since I installed diversion. I'm assuming its because of it.

In diversion watch the log filtered by blocked domains for the device and add what could be those related to the game to the whitelist.

 

[chewy74]

I recently updated to 386.9 and everything was working fine for a few days. Then it randomly stopped working and I couldn't get internet to wifi or Lan. There was no isp outages and router was working fine. I tried power cycling both modem and router and nothing worked. I reset the router and started fresh and when I got to re-installing diversion, I lost internet connection again after the reboot.

Anyone experienced diversion blocking internet access? I haven't touched any settings since first install over a years ago. So I'm not sure what happened to cause this. I'm going to try and format my USB stick to see if that was the problem, but it's a fairly new stick... So I'm doubtful. Any suggestions would be appreciated. Thanks

 

[MatteoPV]

I'm using Diversiona on Asu AX82U but the advertising on various web pages is still there. I'm also using Unbound , where am I going wrong?

 

[JimbobJay]

I'm having a weird diversion issue, where devices on the lan are unable to access the PayPal 2FA page when logging in.
When troubleshooting, I narrowed it down to LAN, as same devices can login just fine on other wifi or over LTE.

I initially didn't think it was diversion, as when following the log, there was nothing being blocked when accessing the paypal page. I followed both specific IP's I was accessing PayPal from, as well as following the complete log.
Checked Skynet, nothing there either.

Decided to try diabling diversion. Immediately could get to the 2FA page and login successfully. After re-enabling it becomes broken again.

When using a computer browser, it is stuck on the 2FA page with a circle spinning and Processing, with the 2FA input visible behind but inaccessible.
When using a PayPal app on a phone, it just comes up with a blank white screen at the stage where you would enter the 2fa code after entering a password.

Can't figure this one out given that nothing appears to be being blocked by diversion when this happens.

 

[SomeWhereOverTheRainBow]

I'm having a weird diversion issue, where devices on the lan are unable to access the PayPal 2FA page when logging in.
When troubleshooting, I narrowed it down to LAN, as same devices can login just fine on other wifi or over LTE.

I initially didn't think it was diversion, as when following the log, there was nothing being blocked when accessing the paypal page. I followed both specific IP's I was accessing PayPal from, as well as following the complete log.
Checked Skynet, nothing there either.

Decided to try diabling diversion. Immediately could get to the 2FA page and login successfully. After re-enabling it becomes broken again.

When using a computer browser, it is stuck on the 2FA page with a circle spinning and Processing, with the 2FA input visible behind but inaccessible.
When using a PayPal app on a phone, it just comes up with a blank white screen at the stage where you would enter the 2fa code after entering a password.

Can't figure this one out given that nothing appears to be being blocked by diversion when this happens.

try whitelisting these domains

account-paypal.com.api.binance.com
account-paypal.com.dev.api.binance.com
account-paypal.com.eu.api.binance.com
account-paypal.com.us.api.binance.com
api-m.paypal.com
api.paypal.com
b.stats.paypal.com
business.paypal.com
c6.paypal.com
c.paypal.com
creditapply.paypal.com
developer.paypal.com
epl.paypal-communication.com
geo.paypalobjects.com.akadns.net
glb.paypal.com
history.paypal.com
images.paypal.com
mobile.paypal.com
paypal.boomkat.com
paypal.ca
paypal.cn
paypal.com
paypal.com.au
paypal.com.br
paypal-communication.com
paypal-community.com
paypal.co.uk
paypal-customerfeedback.com
paypal.de
paypal-dynamic-map.fastly.net
paypal.map.fastly.net
paypal.me
paypal-nakit.com
paypalobjects.com
paypal-topup.ee
pics.paypal.com
slc.stats.paypal.com
t.paypal.com
uk.paypal-qrc.com
www.glb.paypal.com
www.paypal.com
www.paypal.com.edgekey.net
www.paypalobjects.com

here is how I obtained them

curl -fsSL https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/Allowed.list | grep paypal

Whitelist each one of these individually. if you have skynet, one of these are probably being blocked by it. Diversion will share these with skynet and fix your problem.

 

[Elmer]

Is the diversion server down?

 

[MatteoPV]

Should I replace Diversion with Ad Guardian?

 

[Kingp1n]

Should I replace Diversion with Ad Guardian?

You would have to try it....just make sure you reboot when going back and forth between then. I used both but I came back to Diversion. Good luck!

 

[MatteoPV]

Tried AD Guardian and then reverted to Diversion. In both cases, the ad blocker works until you enter the VPN via vpnmgr. Yet I used the same configuration on Asus AC68U, it worked, now on Asus AX82U it didn't