Diversion Diversion - the Router Ad-Blocker

[elorimer]

Please excuse the interruption. 2000 posts, 100 pages in this thread. Quite the accomplishment.

 

[elorimer]

Earlier in this thread a similar problem with a 443 conflict was resolved by reinstalling Diversion: Diversion - the Router Ad-Blocker

Perhaps AICloud? Owncloud? PHP?

 

[wizin]

So the conflict is with lighttpd. What do you use it for?

Earlier in this thread a similar problem with a 443 conflict was resolved by reinstalling Diversion: Diversion - the Router Ad-Blocker

Perhaps AICloud? Owncloud? PHP?

Found the culprit

 

[martinr]

Earlier in this thread a similar problem with a 443 conflict was resolved by reinstalling Diversion: Diversion - the Router Ad-Blocker

Perhaps AICloud? Owncloud? PHP?

If the GUI login is set to be via https, would that also cause a similar conflict with Port 443? I don’t recall seeing anything about turning off https access if using pixelserv-tls.

 

[dave14305]

If the GUI login is set to be via https, would that also cause a similar conflict with Port 443? I don’t recall seeing anything about turning off https access if using pixelserv-tls.

By default the GUI https listens on 8443, IIRC, because AiCloud has 443. I changed AiCloud to 7443 even though it’s disabled and set my GUI to 443, but it’s only listening on the .1 interface so no conflict.

 

[martinr]

By default the GUI https listens on 8443, IIRC, because AiCloud has 443. I changed AiCloud to 7443 even though it’s disabled and set my GUI to 443, but it’s only listening on the .1 interface so no conflict.

Of course! It listens on 8443! I think the phrase is brain fart. Many thanks, Dave.

 

[elorimer]

By default the GUI https listens on 8443, IIRC, because AiCloud has 443. I changed AiCloud to 7443 even though it’s disabled and set my GUI to 443, but it’s only listening on the .1 interface so no conflict.

Might you educate me a bit? I see how your ports are separated, but that is why you have no conflict, not because it is only on the LAN interface. If pixelserv is on port 443, then it will conflict with the webgui set to 443, yes? Both are binding only to the LAN side interface.

@wizin has a conflict between pixelserv on 443 (binding internally) and smart access, which must be binding on both. (@martinr and I share the experience with openvpn binding on both by default.)

In order that I keep to the thread (if only barely), @wizin will want to use Diversion to set pixelserv's cli option to a port not used by smart access. Or do as you did and move AICloud off 443.

 

[dave14305]

Might you educate me a bit? I see how your ports are separated, but that is why you have no conflict, not because it is only on the LAN interface. If pixelserv is on port 443, then it will conflict with the webgui set to 443, yes? Both are binding only to the LAN side interface.

@wizin has a conflict between pixelserv on 443 (binding internally) and smart access, which must be binding on both. (@martinr and I share the experience with openvpn binding on both by default.)

In order that I keep to the thread (if only barely), @wizin will want to use Diversion to set pixelserv's cli option to a port not used by smart access.

Pixelserv will only listen on its dedicated IP (e.g. .2). GUI should only listen on .1, even if it’s 443. When an application listens on all interfaces (0.0.0.0), then you have a problem.

Pixelserv is of no use listening on any port besides 443 because most https ads are targeting port 443, and Diversion is only redirecting the IP and not the port. Any application listening on 0.0.0.0:443 is a problem and should be reconfigured to only listen on a specific interface for Pixelserv to work properly.

This is what my router looks like for port 443:

netstat -anltp | grep 443
tcp        0      0 192.168.1.1:443         0.0.0.0:*               LISTEN      1068/httpd
tcp        0      0 192.168.1.2:443         0.0.0.0:*               LISTEN      684/pixelserv-tls

 

[wizin]

This was educational, so in hindisght, - if I were to use Smart Cloud, how do I change its port? f

 

[dave14305]

This was educational, so in hindisght, - if I were to use Smart Cloud, how do I change its port? f

On the Settings tab in AiCloud there is port setting.

 

[wizin]

On the Settings tab in AiCloud there is port setting.

woops, that was easy..thanx however I recall that someone mentioned that the cloud feature is a security risk. I might be mistaken, do you have any thoughts

 

[dave14305]

woops, that was easy..thanx however I recall that someone mentioned that the cloud feature is a security risk. I might be mistaken, do you have any thoughts

At best, this is a neglected feature from Asus as far as up-to-date security goes. I would rather trust a company whose primary business is cloud storage to give it a fighting chance of being secure. I don’t have anything open to the outside on my router, but my needs are simple.

 

[Blackbox]

Hey guys,

Is there a way to block domains that just contain a certain word or phrase, instead of the whole domain name? Let's say I want to block every domain that contains the word *telemetry* instead of writing the exact domain name.

Is that possible in diversion (similar to how it is possible in DNScrypt, which I cannot use since I use Stubby)?

 

[amethyst]

Anyone please explain to me what is happening here? I try to format my usb 2.0 and this error show up

Edit update: i alreay enale jffs custom script at administration, tab system.

Someone had the same problem in this topic and i try his/her methods but it not work. What he do is open asus webUI, tab on the usb device and choose remove at safely remove drive. I do it and when asus applying change it show under the usb device as unmount. I went back to the ssh terminal and try to format the usb to ext 3, no journaling and it not work. I try it again with ext 3, enable journaling and it still not work. I try again with ext 2, and it still not work. Still showing the same error in the picture.

 

[Zonkd]

Anyone please explain to me what is happening here? I try to format my usb 2.0 and this error show up

Edit update: i alreay enale jffs custom script at administration, tab system.

Someone had the same problem in this topic and i try his/her methods but it not work. What he do is open asus webUI, tab on the usb device and choose remove at safely remove drive. I do it and when asus applying change it show under the usb device as unmount. I went back to the ssh terminal and try to format the usb to ext 3, no journaling and it not work. I try it again with ext 3, enable journaling and it still not work. I try again with ext 2, and it still not work. Still showing the same error in the picture.

Read here: https://github.com/RMerl/asuswrt-merlin/wiki/Disk-formatting#device-or-resource-is-busy

• please note disks unmounted via web GUI cannot be found when running the fdformat disk function in the automatic disk formatting script. You first would need to reboot the router to remount the disk.

The developer of AMTM is working to fix this whole problem. The disk is busy because something is using it. You could try to manually stop any processes/scripts which are utilising the disk so that it can be unmounted.

Lucky you someone in the AMTM thread just mentioned how to do this:
https://www.snbforums.com/threads/a...erlin-terminal-menu.42415/page-26#post-464438

Find out what scripts you installed. Use ps to find their process ID, then kill them. Do so at your own risk.

 

[amethyst]

Read here: https://github.com/RMerl/asuswrt-merlin/wiki/Disk-formatting#device-or-resource-is-busy




The developer of AMTM is working to fix this whole problem. The disk is busy because something is using it. You could try to manually stop any processes/scripts which are utilising the disk so that it can be unmounted.

Lucky you someone in the AMTM thread just mentioned how to do this:
https://www.snbforums.com/threads/a...erlin-terminal-menu.42415/page-26#post-464438

Find out what scripts you installed. Use ps to find their process ID, then kill them. Do so at your own risk.

My usb is empty, first plug in asus router ac86u. I’m not running any scripts in it.

 

[Zonkd]

My usb is empty, first plug in asus router ac86u. I’m not running any scripts in it.

You using Windows PC? Before plugging into router use PC to format it FAT32 first. Reboot the router then plug in the USB and try again.

Read the disk formatting guide wiki especially the requirements and limitations sections.

The fd feature in AMTM is brand new just released. I still recommend using AMTM fd if you can. You could try doing it manually if you’re confident.

 

[amethyst]

You using Windows PC? Before plugging into router use PC to format it FAT32 first. Reboot the router then plug in the USB and try again.

Read the disk formatting guide wiki especially the requirements and limitations sections.

The fd feature in AMTM is brand new just released. I still recommend using AMTM fd if you can. You could try doing it manually if you’re confident.

I just do what you said. Format the usb into fat32, restart the router. Plug it in and try to format it to ext 3. It’s not work. Still have that error i mention above.

 

[Zonkd]

I just do what you said. Format the usb into fat32, restart the router. Plug it in and try to format it to ext 3. It’s not work. Still have that error i mention above.

That is unusual. Maybe AMTM has a bug.

Have you try using the step by step guide to format manually without AMTM?

https://github.com/RMerl/asuswrt-merlin/wiki/Disk-formatting#manual-step-by-step-instructions

Do that. See how far you get. Post your terminal output for us to read and check for mistakes.

 

[amethyst]

That is unusual. Maybe AMTM has a bug.

Have you try using the step by step guide to format manually without AMTM?

https://github.com/RMerl/asuswrt-merlin/wiki/Disk-formatting#manual-step-by-step-instructions

Do that. See how far you get. Post your terminal output for us to read and check for mistakes.

Thanks you. Download minitool partition and format my usb into ext 4. But when i install the standard version of diversion. I can't assign an reserve IP for pixelserv-tls. It say that "can’t assign reserve ip 192.168.0.2". I already do what the instruction say ip starting pool at 192.168.0.2, ending pool at 192.168.0.3.