Diversion Diversion - the Router Ad-Blocker

[DAVID LONG]

https://diversion.ch/faq-reader/how-to-exclude-a-client-from-ad-blocking.html

This ↑↑↑

 

[QuikSilver]

You can use DNSFilter in the LAN / DNSFilter tab. My recommendation is to set the Global mode to "Router" and then set your FireTV in the Client List to use any of the pre-defined DNS services or define your own by entering the DNS IP in Custom 1, 2 or 3 and selecting the Custom 1, 2 or 3 dropdown in the Client List.

Had to do that for my wife's iPhone while I figured out how to whitelist her favorite ad-supported App.

https://diversion.ch/faq-reader/how-to-exclude-a-client-from-ad-blocking.html

Thanks, I've narrowed it down to a few items that need to be whitelisted but will narrow it down some more once the family can stand me making constant changes.

 

[cowboy]

I installed the amtm and then Diversion.

But I don't see ads being blocked. Am I missing something ? Do I have to do something more ?

How can I test if it works ?

 

[dave14305]

I installed the amtm and then Diversion.

But I don't see ads being blocked. Am I missing something ? Do I have to do something more ?

How can I test if it works ?

You need to make sure your LAN devices are pointing to your router's IP for DNS (check LAN DHCP page). And check that DNSFilter is not overriding your devices queries to an external DNS service (LAN DNSFilter page).

 

[QuikSilver]

I installed the amtm and then Diversion.

But I don't see ads being blocked. Am I missing something ? Do I have to do something more ?

How can I test if it works ?

Can try going here like I did to see what ads populate.

https://pi-hole.net/pages-to-test-ad-blocking-performance/

 

[Blackbox]

Hey guys,

Is there a way to block domains that just contain a certain word or phrase, instead of the whole domain name? Let's say I want to block every domain that contains the word *telemetry* instead of writing the exact domain name.

Is that possible in diversion (similar to how it is possible in DNScrypt, which I cannot use since I use Stubby)?

 

[thelonelycoder]

I installed the amtm and then Diversion.

But I don't see ads being blocked. Am I missing something ? Do I have to do something more ?

How can I test if it works ?

Use ac to update the counter.

 

[thelonelycoder]

Hey guys,

Is there a way to block domains that just contain a certain word or phrase, instead of the whole domain name? Let's say I want to block every domain that contains the word *telemetry* instead of writing the exact domain name.

Is that possible in diversion (similar to how it is possible in DNScrypt, which I cannot use since I use Stubby)?

No.

 

[elorimer]

This must be obvious, so no wonder I haven't noticed this for months: The latest pixelserv-tls beta has a favicon (little blue "P"). When a page is sent by a blocking list to the pixelserv IP address, the favicon shows up (at least in Chrome).

Over the weekend the standard list seems to have added the Office 365 login page, and so Monday morning when I went to login I got -- nothing except the pixelserv favicon, and not the Office favicon. Which told me immediately I had to go to Diversion to whitelist login.microsoftonline.com.

Sweet!

 

[thelonelycoder]

This must be obvious, so no wonder I haven't noticed this for months: The latest pixelserv-tls beta has a favicon (little blue "P"). When a page is sent by a blocking list to the pixelserv IP address, the favicon shows up (at least in Chrome).

Over the weekend the standard list seems to have added the Office 365 login page, and so Monday morning when I went to login I got -- nothing except the pixelserv favicon, and not the Office favicon. Which told me immediately I had to go to Diversion to whitelist login.microsoftonline.com.

Sweet!

The favicon is shown in all major browsers.
And if you look at the ps stats page and add it to your bookmark.

 

[andresmorago]

hello guys

i woke up today and all access to office 365 services was down.
I ended up seeing that https://login.microsoftonline.com/ was being blocked by diversion. Is this normal? ive never modified my blacklists

i have diversion and skynet active. default lists

 found exact match in blocking list Custom

added to whitelist and problem is now solved

will appreciate any advice

thanks

 

[visortgw]

hello guys

i woke up today and all access to office 365 services was down.
I ended up seeing that https://login.microsoftonline.com/ was being blocked by diversion. Is this normal? ive never modified my blacklists

i have diversion and skynet active. default lists

 found exact match in blocking list Custom

added to whitelist and problem is now solved

will appreciate any advice

thanks

Read up a few posts in the thread: https://www.snbforums.com/threads/diversion-the-router-ad-blocker.48538/page-104#post-465481

 

[andresmorago]

Thanks
Sorry. Eyes failed this time

 

[cowboy]

In WAN DNS section set the OpenDNS servers. Under DNS Filter set global mode to router. Manually set the other devices to no filter if necessary.

Thanks.
I have OpenDNS account and have configured some custom filtering settings.
Now under Asuswrt Settings in WAN → WAN DNS Settings I set the DNS to OpenDNS

And in LAN → DNSFiltering I set the Global Filter to Router.

Now the Ad Blocking from Diversion is working.
But there is something weird about OpenDNS. One of my OpenDNS filters is pornography. Although it seems working as it is blocking pornographic sites (all which I tested), there is one site which is not blocked and that is Pornhub. Has someone any idea why ?

 

[elorimer]

Is this normal?

Normal in the sense that one day a site that you go to isn't loading? Yes, it happens. A byproduct of automatically importing someone's updated blocklist.

Normal in the sense that a million people started work today by not being able to log in? No. Someone messing with Microsoft.

 

[cowboy]

Ad Blocking from Diversion is working.
But there is something weird about OpenDNS. One of my OpenDNS filters is pornography. Although it seems working as it is blocking pornographic sites (all which I tested), there is one site which is not blocked and that is Pornhub. Has someone any idea why ?

It seems there was a long delay, but now it is working .

 

[cmkelley]

Normal in the sense that one day a site that you go to isn't loading? Yes, it happens. A byproduct of automatically importing someone's updated blocklist.

Normal in the sense that a million people started work today by not being able to log in? No. Someone messing with Microsoft.

Actually if I was say, and advertiser and losing money because of blocking lists, salting the block lists with legitimate sites to cause people to doubt the usefulness of blocking lists isn't an entirely bad plan.

 

[consorts]

I want to block every domain that contains the word *telemetry*

poke around the parental control screens under aiprotection - maybe one of them will help.

 

[Zonkd]

Diversion is great for tailing and generating top 10 stats but I want greater retention and to use my lan remote log server gui to more easily search, specifically for checking outbound IP blocks logged by Skynet against the logged dns queries.

I hope someone can answer, is there a way to use the ASUS Remote Log Server feature to send dnsmasq.log in addition to syslog?

 

[Zonkd]

Although it seems working as it is blocking pornographic sites (all which I tested), there is one site which is not blocked and that is Pornhub. Has someone any idea why ?

If you've been naughty visiting the site recently it will be in your browser dns cache and possibly system dns cache. First try clear the browser cache. If that doesn't work flush your computers dns cache at command line. Rebooting router also couldn't hurt.

I would suggest adding this hosts list in Diversion to compliment your OpenDNS filtering:


For Ads + Porn blocking:
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/porn/hosts

For just porn blocking:
https://raw.githubusercontent.com/Clefspeare13/pornhosts/master/0.0.0.0/hosts

Info:
https://github.com/StevenBlack/hosts/blob/master/alternates/porn/readme.me