Diversion Diversion - the Router Ad-Blocker v4.2.x (see new thread for 4.3.x)

[thelonelycoder]

I enabled it, and waiting for my family's screams as I beta test it on them... everything is still quiet on the homefront!

No interruptions so far with the six Apple devices here - or any of the other Linux and Windows boxes.

 

[^Tripper^]

Haven’t scanned my dnsmasq log yet, but all my Apple devices are working fine so far. Except Siri. She’s still as bitchy as ever.

 

[thelonelycoder]

Haven’t scanned my dnsmasq log yet, but all my Apple devices are working fine so far. Except Siri. She’s still as bitchy as ever.

Use this to see how many type 65 query were made. They stop right at the time tb is enabled.

Substitute aword with opt and bword with var
grep type=65 /aword/bword/log/dnsmasq.log | wc -l

Use this to see the last entry:
grep type=65 /aword/bword/log/dnsmasq.log

 

[nzwayne]

Appreciating all the enhancements to Diversion! Following this guide for Pixelserv CA certificate https://github.com/kvic-z/pixelserv...ificate#import-pixelserv-ca-on-client-devices
Running iOS 15.5 & iOS 15.6 (Beta6) on our iPhone 13's but after ca.crt certificate download via Safari or Firefox, it's not present to Enable in Trust Settings? The requested step...
==> Since iOS 10.3, a user-installed CA cert requires enabling trust explicitly.

• Go to Settings > General About > Certificate Trust Settings.
• Under Enable full trust for root certificates, turn on trust for Pixelserv CA.

 

[thelonelycoder]

Appreciating all the enhancements to Diversion! Following this guide for Pixelserv CA certificate https://github.com/kvic-z/pixelserv...ificate#import-pixelserv-ca-on-client-devices
Running iOS 15.5 & iOS 15.6 (Beta6) on our iPhone 13's but after ca.crt certificate download via Safari or Firefox, it's not present to Enable in Trust Settings? The requested step...
==> Since iOS 10.3, a user-installed CA cert requires enabling trust explicitly.

• Go to Settings > General About > Certificate Trust Settings.
• Under Enable full trust for root certificates, turn on trust for Pixelserv CA.

Steps to import the pixelserv-tls certificate in iOS devices.
1. Open http://pixelserv-tls IP/ca.crt in Safari.
2. Allow download of configuartion file in Safari.
3. Go to Settings / General / VPN & Device Management.
4. Click on Pixelserv CA and after reviewing content click Install in top right.
5. Go to Settings / General / About / Certificate Trust Settings and make sure it is on.

 

[nzwayne]

Steps to import the pixelserv-tls certificate in iOS devices.
1. Open http://pixelserv-tls IP/ca.crt in Safari.
2. Allow download of configuartion file in Safari.
3. Go to Settings / General / VPN & Device Management.
4. Click on Pixelserv CA and after reviewing content click Install in top right.
5. Go to Settings / General / About / Certificate Trust Settings and make sure it is on.

Bingo, all operational now, thank-you. Donation inbound as a general thank-you for this app and updates in recent days.

 

[thelonelycoder]

Bingo, all operational now, thank-you. Donation inbound as a general thank-you for this app and updates in recent days.

Thank you, received and much appreciated.

 

[Treadler]

No interruptions so far with the six Apple devices here - or any of the other Linux and Windows boxes.

5 x Apples here, no problems to report.

 

[Treadler]

Use this to see how many type 65 query were made. They stop right at the time tb is enabled.

Substitute aword with opt and bword with var
grep type=65 /aword/bword/log/dnsmasq.log | wc -l

Use this to see the last entry:
grep type=65 /aword/bword/log/dnsmasq.log

Hmmm.
What have I done wrong?
I have enabled type 65 blocking but the first grep gets me an ever increasing count, the second grep an ever increasing list up to the moment in real time. No stop?

 

[dave14305]

Hmmm.
What have I done wrong?
I have enabled type 65 blocking but the first grep gets me an ever increasing count, the second grep an ever increasing list up to the moment in real time. No stop?

Are there rules present in both protocols?

iptables-save  -c | grep 0000410001
ip6tables-save -c | grep 0000410001

 

[Viktor Jaep]

Hmmm.
What have I done wrong?
I have enabled type 65 blocking but the first grep gets me an ever increasing count, the second grep an ever increasing list up to the moment in real time. No stop?

Time to get the family to switch to Android!

 

[Treadler]

Are there rules present in both protocols?

iptables-save  -c | grep 0000410001
ip6tables-save -c | grep 0000410001

& there it is, nothing in IPv6.

 

[dave14305]

& there it is, nothing in IPv6.

Are all the current logs in dnsmasq.log from IPv6 clients?

 

[Treadler]

Are all the current logs in dnsmasq.log from IPv6 clients?

Yes, without exception.

 

[Treadler]

Use this to see how many type 65 query were made. They stop right at the time tb is enabled.

Substitute aword with opt and bword with var
grep type=65 /aword/bword/log/dnsmasq.log | wc -l

Use this to see the last entry:
grep type=65 /aword/bword/log/dnsmasq.log

Type 65 blocking doesn’t appear to be working via IPv6.
Disabled IPv6 on router, type 65 is no more………

 

[thelonelycoder]

Type 65 blocking doesn’t appear to be working via IPv6.
Disabled IPv6 on router, type 65 is no more………

The neighbors cat will never let me forget that.

 

[SomeWhereOverTheRainBow]

Diversion 4.3.1 is now available

What's new
- Adds option to block type 65 queries in tb using iptables.

Thanks for all the contributors in these threads - and surely elsewhere:

Unbound - Unbound makes diversion not work?

I have what is pretty much a standard AMTM install of diversion, skynet, yazfi, and some others on my ac86u (all fw and scripts up to date). It's been working fine using DOT for a while. I decided to give unbound a try today. After following the first page instructions, it seems a bunch of...

www.snbforums.com

Diversion - Seeing Ads (Mobile/Tablets)

Hi, I'm running RT-AC88U and for the last few months or so (March time) I'm getting ads mostly on devices including in-app ads used to always be blocked and worked fine. Like Instagram sponsored posts (stories) or just apps that require to watch an "advert" to download or pop-up ads like Vellum...

www.snbforums.com

Diversion not filtering Wifi

Hello, Very new here. Just installed Diversion lite. I can see it is working via ethernet but not blocking anything with Wifi? What am I doing wrong? My main upstream dns is Quad9 with forward DNS to upstream dns selected no

www.snbforums.com

iOS 14 and newer, as well as a growing number of apps or devices use the type 65 query.
Dnsmasq currently has no option to suppress or specifically handle these types of queries and therefore circumvent Diversion ad-blocking.

How to update Diversion
Use u or the WebUI function to update to this latest version.

Yea unfortunately the only way to dnsmasq the type 65 queries without the aid of the firewall is by query type per specific domain. Imagine a lot of domains using query type 65, this is why it was determined iptables are more sufficient.

 

[Treadler]

The neighbors cat will never let me forget that.

Cats are so judgemental.

 

[Jumpstarter]

Cats are so judgemental.

Who you tellin'

 

[Jumpstarter]

Anywayz, Does Diversion work on firmware as old as 380.70?