Diversion Diversion - the Router Ad-Blocker

[IngoPan]

Does Diversion also block those nasty "mining" scripts with standart block list? Thanks.

 

[L&LD]

I can't assign an reserve IP for pixelserv-tls. It say that "can’t assign reserve ip 192.168.0.2". I already do what the instruction say ip starting pool at 192.168.0.2, ending pool at 192.168.0.3.

If you set your IP pool from x.x.x.02 to x.x.x.03, you have DHCP active for only two devices.

Set your IP pool from x.x.x.51 to x.x.x.100.

Then you can set pixelserv-tls to x.x.x.02.

 

[amethyst]

If you set your IP pool from x.x.x.02 to x.x.x.03, you have DHCP active for only two devices.

Set your IP pool from x.x.x.51 to x.x.x.100.

Then you can set pixelserv-tls to x.x.x.02.

Yes, finally i can install it now. Thank you very much.

 

[thelonelycoder]

Please excuse the interruption. 2000 posts, 100 pages in this thread. Quite the accomplishment.

Over 100 pages of Q&A since the release of Diversion!

I'll let another Swiss express my emotion:

 

[thelonelycoder]

Does Diversion also block those nasty "mining" scripts with standart block list? Thanks.

Yes. The CoinBlockerLists (https://gitlab.com/ZeroDot1/CoinBlockerLists) are included in all four blocking lists.

 

[clarknova9]

Hi -

I'm unable to get pixelserv up and running. When I attempt to restart in diversion, I see the error below in the syslog.
I tried uninstalling/reinstalling both pixelserv and diversion without much luck. I did notice something strange. When I pull up the show pixelserv-tls info menu in diversion, it shows the pixelserv-tls version as 2.2.0-1, but the syslog with the error shows pixelserv-tls 2.21.

Any help would be greatly appreciated!

pixelserv-tls info:

Package: pixelserv-tls
Version: 2.2.0-1
Depends: libc, libssp, librt, libpthread, libopenssl, libpthread
Status: install user installed
Section: net
Architecture: aarch64-3.10
MD5Sum: d6e5553b453b96b6d93fe8226827c7f1
Size: 25331
Filename: pixelserv-tls_2.2.0-1_aarch64-3.10.ipk
Description: pixelserv-tls is a tiny bespoke webserver for adblock with HTTP/1.1 and HTTPS support
Installed-Time: 1549555743

Feb  7 14:22:09 Diversion: created br0:pixelserv-tls 192.168.1.13, from /opt/etc/init.d/S80pixelserv-tls
Feb  7 14:22:09 pixelserv-tls[24193]: pixelserv-tls 2.2.1 (compiled: Dec 29 2018 15:01:07 flags: tfo tls1_3) options: 192.168.1.13
Feb  7 14:22:09 kernel: pgd = ffffffc009d57000
Feb  7 14:22:09 kernel: [00000010] *pgd=000000001507a003, *pud=000000001507a003, *pmd=0000000000000000
Feb  7 14:22:09 kernel: CPU: 1 PID: 24193 Comm: pixelserv-tls Tainted: P           O    4.1.27 #2
Feb  7 14:22:09 kernel: Hardware name: Broadcom-v8A (DT)
Feb  7 14:22:09 kernel: task: ffffffc01279ea40 ti: ffffffc009de4000 task.ti: ffffffc009de4000
Feb  7 14:22:09 kernel: PC is at 0x407880
Feb  7 14:22:09 kernel: LR is at 0x407878
Feb  7 14:22:09 kernel: pc : [<0000000000407880>] lr : [<0000000000407878>] pstate: 60000000
Feb  7 14:22:09 kernel: sp : 0000007fe85c69d0
Feb  7 14:22:09 kernel: x29: 0000007fe85c69d0 x28: 0000000000000000
Feb  7 14:22:09 kernel: x27: 0000000000000000 x26: 0000000000000000
Feb  7 14:22:09 kernel: x25: 0000000000000000 x24: 0000000000000000
Feb  7 14:22:09 kernel: x23: 0000000000000000 x22: 0000000000000000
Feb  7 14:22:09 kernel: x21: 0000000000404344 x20: 0000000000000000
Feb  7 14:22:09 kernel: x19: 00000000005a58f0 x18: 0000000000000012
Feb  7 14:22:09 kernel: x17: 0000000000000008 x16: 0000007fab201490
Feb  7 14:22:09 kernel: x15: 0000000000000028 x14: 0000000000000002
Feb  7 14:22:09 kernel: x13: 00000000000000a0 x12: 0101010101010101
Feb  7 14:22:09 kernel: x11: 0000000000000008 x10: 0101010101010101
Feb  7 14:22:09 kernel: x9 : 0000000000000000 x8 : 0000000000000038
Feb  7 14:22:09 kernel: x7 : 0000000000080000 x6 : 0000000000000000
Feb  7 14:22:09 kernel: x5 : 0000000000000000 x4 : 00000000208fd5f4
Feb  7 14:22:09 kernel: x3 : 0000000000000000 x2 : 0000000000000000
Feb  7 14:22:09 kernel: x1 : 0000000000000001 x0 : 0000000000000000
Feb  7 14:22:20 Entware (aarch64-k3.10): Failed to start pixelserv-tls (Diversion) from /opt/bin/diversion

 

[thelonelycoder]

CPU: 1 PID: 24193 Comm: pixelserv-tls Tainted

Don't know what that means but this is the error.
Did you install the beta version through @kvic's website or amtm?
In both cases run the script/function again and select to reinstate the previous version. Then check again.

 

[EmeraldDeer]

Diversion: Request for Functionality
Would it be possible for Diversion to capture and report on the rate of SERVFAILs received by dnsmasq?

 

[Joe Doe]

Would it be possible to expand the blocking lists to block outgoing connections to analytics services/servers, such as hockeyapp.net or Firebase?

 

[Zonkd]

Would it be possible to expand the blocking lists to block outgoing connections to analytics services/servers, such as hockeyapp.net or Firebase?

You would need to submit them to the people maintaining the blocklists. Look them up. It’s easier to just blacklist them manually for yourself.

 

[Joe Doe]

You would need to submit them to the people maintaining the blocklists. Look them up. It’s easier to just blacklist them manually for yourself.

Thanks for the notice. Does anybody know whether such a list already exists? I googled a bit but couldn't find a blocking list dedicated to software/app analytics.

 

[cowboy]

I have few questions about the installation:

After enabling JFFS custom scripts and SSH on the router and connecting a USB (EXT4 Format) to my router, I have to connect via SSH. After successful connection I will be on the path

/tmp/home/root

Should I run from here the command

curl -Os https://diversion.ch/install && sh install

Will this install everything automatically to the right place ?

Could it happen that some devices won't work if I install Diversion ? I am using OpenDNS for all my devices on the network. Under LAN → DNSFilter I had to set my TV and Nintendo Switch to use the DNS of my provider (Set to No Filtering), cause otherwise these devices can't communicate with the internet at all. Can put a device to a Whitelist ?

 

[Zonkd]

Thanks for the notice. Does anybody know whether such a list already exists? I googled a bit but couldn't find a blocking list dedicated to software/app analytics.

Start there and check out his sources https://github.com/StevenBlack/hosts/blob/master/readme.md

 

[Zonkd]

I have few questions about the installation:

After enabling JFFS custom scripts and SSH on the router and connecting a USB (EXT4 Format) to my router, I have to connect via SSH. After successful connection I will be on the path

/tmp/home/root

Should I run from here the command

curl -Os https://diversion.ch/install && sh install

Will this install everything automatically to the right place ?

Could it happen that some devices won't work if I install Diversion ? I am using OpenDNS for all my devices on the network. Under LAN → DNSFilter I had to set my TV and Nintendo Switch to use the DNS of my provider (Set to No Filtering), cause otherwise these devices can't communicate with the internet at all. Can put a device to a Whitelist ?

You can just run the command, your present working directory doesn’t matter. May I suggest just installing amtm first and use that to handle all these common tasks for you from an interactive menu. It’s made by the developer of Diversion.

In WAN DNS section set the OpenDNS servers. Under DNS Filter set global mode to router. Manually set the other devices to no filter if necessary.

 

[Joe Doe]

Start there and check out his sources https://github.com/StevenBlack/hosts/blob/master/readme.md

After adding and processing 4 wildcard-blacklist entries (hockeyapp.net, answers.io, fabric.io and crashlytics.com) I lose my connection (Router GUI says "disconnected") and I cannot access any website from any device. Only removal or disabling these entries combined with a router hardware restart (off - 10 sec - on) solves the issue.

Is this a bug?

Asus 68U, 384.9 firmware, latest diversion build, "large" pre-defined blocking list

 

[martinr]

After adding and processing 4 wildcard-blacklist entries (hockeyapp.net, answers.io, fabric.io and crashylytics.com) I lose my connection (Router GUI says "disconnected") and I cannot access any website from any device. Only removal or disabling these entries combined with a router hardware restart (off - 10 sec - on) solves the issue.

Is this a bug?

Asus 68U, 384.9 firmware, latest diversion build, "large" pre-defined blocking list

How about finding the culprit? You could try by halves ie put the first 2 in and if it’s ok you know it’s one of the last 2. Or just try one at a time as they’re only 4.

However, it seems inconceivable that one of them is shutting down your connection; I just wonder if you’re doing something wrong. So I wonder if each one of the 4 appears to cause the WAN to be lost?

First thing: does the WAN return when all 4 are removed?

 

[Joe Doe]

How about finding the culprit? You could try by halves ie put the first 2 in and if it’s ok you know it’s one of the last 2. Or just try one at a time as they’re only 4.

However, it seems inconceivable that one of them is shutting down your connection; I just wonder if you’re doing something wrong. So I wonder if each one of the 4 appears to cause the WAN to be lost?

First thing: does the WAN return when all 4 are removed?

Once I add them one by one (add + process + exit) I don't experience the disconnection issue. Seems resolved Thanks

 

[thelonelycoder]

After adding and processing 4 wildcard-blacklist entries (hockeyapp.net, answers.io, fabric.io and crashlytics.com) I lose my connection (Router GUI says "disconnected") and I cannot access any website from any device. Only removal or disabling these entries combined with a router hardware restart (off - 10 sec - on) solves the issue.

Is this a bug?

Asus 68U, 384.9 firmware, latest diversion build, "large" pre-defined blocking list

If you added the domains through the Diversion UI then this would be (a very unlikely) bug.
BTW, adding those domains to the blacklist blocks access to those sites entirely. If you want to block ads on the website hockeyapp.net then you'd have to figure out what domain names are used to serve ads to your apps. DO NOT block the sites domain itself. This is not how Diversion or any other hosts based ad-blocker works.

 

[Joe Doe]

If you added the domains through the Diversion UI then this would be (a very unlikely) bug.
BTW, adding those domains to the blacklist blocks access to those sites entirely. If you want to block ads on the website hockeyapp.net then you'd have to figure out what domain names are used to serve ads to your apps. DO NOT block the sites domain itself. This is not how Diversion or any other hosts based ad-blocker works.

Yes, I used the Diversion UI.
I intended to block analytics services on my mobile devices (such as Crashlytics and Answers).

 

[thelonelycoder]

Yes, I used the Diversion UI.
I intended to block analytics services on my mobile devices (such as Crashlytics and Answers).

See here to see what's blocked already: https://www.snbforums.com/threads/diversion-the-router-ad-blocker.48538/page-93#post-459059