Diversion Diversion 5.1.3 - the Router Ad-Blocker, May 09, 2024

[Ravenbak]

Hello,
Diversion block internet to all clients ? i can only connect via SSH to stop and restart Diversion and back to normal
am using custom list

https://nsfw.oisd.nl/dnsmasq2

https://small.oisd.nl/dnsmasq2

this is what i found in log

Jun 22 20:16:16 rc_service: watchdog 2414:notify_rc start_dnsmasq
Jun 22 20:16:16 custom_script: Running /jffs/scripts/service-event (args: start dnsmasq)
Jun 22 20:16:16 custom_script: Running /jffs/scripts/dnsmasq.postconf (args: /etc/dnsmasq.conf)
Jun 22 20:16:16 Diversion: restarted Dnsmasq to apply settings
Jun 22 20:16:17 dnsmasq[24645]: Name or service not known at line 323787 of /opt/share/diversion/list/blockinglist.conf
Jun 22 20:16:17 dnsmasq[24645]: FAILED to start up
Jun 22 20:16:47 rc_service: watchdog 2414:notify_rc start_dnsmasq
Jun 22 20:16:47 custom_script: Running /jffs/scripts/service-event (args: start dnsmasq)
Jun 22 20:16:47 custom_script: Running /jffs/scripts/dnsmasq.postconf (args: /etc/dnsmasq.conf)
Jun 22 20:16:47 Diversion: restarted Dnsmasq to apply settings
Jun 22 20:16:48 dnsmasq[24839]: Name or service not known at line 323787 of /opt/share/diversion/list/blockinglist.conf
Jun 22 20:16:48 dnsmasq[24839]: FAILED to start up

 

[dave14305]

Jun 22 20:16:17 dnsmasq[24645]: Name or service not known at line 323787 of /opt/share/diversion/list/blockinglist.conf

What’s on line 323787?

sed -n "323782,323792p" /opt/share/diversion/list/blockinglist.conf

 

[Ravenbak]

What’s on line 323787?

sed -n "323782,323792p" /opt/share/diversion/list/blockinglist.conf

asus@RT-AX86U_Pro-E3F8:/tmp/home/root# sed -n "323782,323792p" /opt/share/diversion/list/blockinglist.conf
local=/sex-lines-phone-sex.co.uk/
local=/sex-lines-sex-chat.co.uk/
local=/sex-lines-uk.co.uk/
local=/sex-lines-xxx.co.uk/
local=/sex-lines.co.uk/
local=/sex-lingerie.com/
local=/sex-linia.pl/
local=/sex-linie.pl/
local=/sex-link-sexy-pic.blogspot.com/
local=/sex-link.be/
local=/sex-link.cz/
asus@RT-AX86U_Pro-E3F8:/tmp/home/root#

 

[bluzfanmr1]

Hi,
Thanks for replying. Yes, I mean a VPN server. Do you mean Diversion advanced settings or Wireguard VPN settings? I guess you mean Wireguard VPN advanced settings, because I dont see any "Diversion" advanced settings or "Allow DNS" setting. But I don't see any advanced settings uder Wireguard VPN settings either. I'm using Asuswrt-Merlin and my VPN provider is Surfshark. It requires to set their servers IPs on the "DNS Server" setting. I've tried changing this setting to my router IP and then redirecting all DNS queries from the Dnsmasq server to those IPs. I don't know how Wireguard works, but this does not work because, when I do this, the IP belong to other servers, not to my VPN provider, and when I check for DNS leaks, it warns me that those servers are not Surfshark's. So, I don't know how to set it the right way.

You are showing the VPN client tab, not the VPN server tab. I thought you were trying to connect to your VPN server.

 

[dave14305]

asus@RT-AX86U_Pro-E3F8:/tmp/home/root# sed -n "323782,323792p" /opt/share/diversion/list/blockinglist.conf

How about this syntax check command?

dnsmasq --test --conf-file=/opt/share/diversion/list/blockinglist.conf

If this runs OK, you may just have too many entries from the NSFW list.

 

[Ravenbak]

How about this syntax check command?

dnsmasq --test --conf-file=/opt/share/diversion/list/blockinglist.conf

If this runs OK, you may just have too many entries from the NSFW list.

ASUSWRT-Merlin RT-AX86U_PRO 3004.388.8_alpha1-g2302a1be67 Mon Jun 17 14:20:21 UTC 2024
asus@RT-AX86U_Pro-E3F8:/tmp/home/root# dnsmasq --test --conf-file=/opt/share/div
ersion/list/blockinglist.conf
dnsmasq: syntax check OK.
asus@RT-AX86U_Pro-E3F8:/tmp/home/root#

 

[Ravenbak]

thanks,

Now i have multiple Diversion Tab

 

[thelonelycoder]

thanks,

Now i have multiple Diversion Tab

This is alpha firmware, right?

 

[Ravenbak]

This is alpha firmware, right?

Yes

 

[Boji]

Everything but one browser I use goes through the router/diversion, one browser uses DoH for quick diagnostics/debugging, typically to determine if something is being blocked by the router.

Somehow diversion is intercepting third party DoH DNS requests related to diversion block list. For example... live.thunderbird.net is blocked by diversion... so I want to bypass diversion and use waterfox's native DoH to bypass diversion... but it is intercepted by diversion & its blocked. Every other DNS request doesn't appear in tailing dnsmasq... all that appears is in diversions blocklist. I disabled "Prevent client auto DoH", still the problem persists. Any ideas?

 

[thelonelycoder]

Yes

I see.

 

[thelonelycoder]

Everything but one browser I use goes through the router/diversion, one browser uses DoH for quick diagnostics/debugging, typically to determine if something is being blocked by the router.

Somehow diversion is intercepting third party DoH DNS requests related to diversion block list. For example... live.thunderbird.net is blocked by diversion... so I want to bypass diversion and use waterfox's native DoH to bypass diversion... but it is intercepted by diversion & its blocked. Every other DNS request doesn't appear in tailing dnsmasq... all that appears is in diversions blocklist. I disabled "Prevent client auto DoH", still the problem persists. Any ideas?

What blocking list are you using? Post URLs if customized.

 

[Boji]

What blocking list are you using? Post URLs if customized.

Same problem after disabling DNS redirector, here is the list:

https://big.oisd.nl/dnsmasq2
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/dnsmasq/pro.txt
https://raw.githubusercontent.com/rugabunda/hosts-blocklist/master/hosts
https://hostfiles.frogeye.fr/firstparty-trackers.txt

#Abpvn, ABP Android Blocklist Vietnam; ~23,000 (2024-02-24)
https://abpvn.com/android/abpvn.txt

#Super Small lists (ios)
https://raw.githubusercontent.com/r-a-y/mobile-hosts/master/AdguardMobileAds.txt
https://raw.githubusercontent.com/r-a-y/mobile-hosts/master/AdguardMobileSpyware.txt

#~11,000
https://someonewhocares.org/hosts/zero/hosts

#2184, chinese ads
#https://github.com/jdlingyu/ad-wars/blob/master/sha_ad_hosts
https://raw.githubusercontent.com/jdlingyu/ad-wars/master/sha_ad_hosts

(updated)

I'm using max protection / nextdns in Waterfox G6

Update:

Using nextdns app on ios effectively bypasses diversion/dnscrypt for live.thunderbird.net, this is using a vpn profile on ios 12.5.7; same with dns profile on ios 16.7.8. Problem is on windows desktop. I tried flushing dns.

here is a quick link https://live.thunderbird.net/thunde...ion=91.3.0&channel=release&oldversion=78.14.0

 

[thelonelycoder]

live.thunderbird.net is blocked by diversion...

Not blocked in any of your lists.
And drop that list, it is NOT compatible with Dnsmasq: https://raw.githubusercontent.com/jdlingyu/ad-wars/master/sha_ad_hosts

 

[Boji]

Not blocked in any of your lists.
And drop that list, it is NOT compatible with Dnsmasq: https://raw.githubusercontent.com/jdlingyu/ad-wars/master/sha_ad_hosts

It is in my own diversion denylist. How is diversion blocklist intercepting third party DoH in Waterfox G6?

Dropped https://raw.githubusercontent.com/jdlingyu/ad-wars/master/sha_ad_hosts

 

[thelonelycoder]

It is in my own diversion denylist. How is diversion blocklist intercepting third party DoH in Waterfox G6?

Dropped https://raw.githubusercontent.com/jdlingyu/ad-wars/master/sha_ad_hosts

View attachment 59713

That's a false positive, the blocked subdomain in both files is incoming-telemetry.thunderbird.net which does not block your original domain.

 

[Ubimo]

Hello
Can someone please help me to whitelist the videostream of www.servustv.com?
I cannot figure out the domains to whitelist to get the videostream working again.
I already tried standard, small and minimal predefined lists. The videostream is still getting blocked.
I already looked at the blocked domains during loading the website. It looks like ads are getting delivered through doubleclick.net and/or googlesyndication.com and this blocks the whole stream.
Thanks in advance.

 

[thelonelycoder]

Hello
Can someone please help me to whitelist the videostream of www.servustv.com?
I cannot figure out the domains to whitelist to get the videostream working again.
I already tried standard, small and minimal predefined lists. The videostream is still getting blocked.
I already looked at the blocked domains during loading the website. It looks like ads are getting delivered through doubleclick.net and/or googlesyndication.com and this blocks the whole stream.
Thanks in advance.

Try to allowlist in the following order:
s.opoxv.com
region1.google-analytics.com
securepubads.g.doubleclick.net

 

[Ubimo]

@thelonelycoder
BRAVO!
Thanks a lot, that did the trick.
Best wishes to you!

 

[KGB7]

Bugs?

What would you call it if not bugs?
I don't use any custom lists or settings, everything is vanilla and I get internet interruptions on several devices and websites either load slow or incorrectly at times.

No other custom scripts are running, no custom scripts/settings in the router. Its as vanilla as it gets.