Diversion Diversion - the Router Ad-Blocker

[QuikSilver]

It’s not possible. Facebook delivers its ads on the same domain as everything else.

Thanks that's what I figured...sneaky lil boogers.

 

[Skeptical.me]

Hi,

I added https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/social/hosts to the hosts lists in b and made sure the hosts files were updated. However, none of the Social Media sites are being blocked. The file has definitely been added, enabled, and updated (I had 10 hosts files, now I have 11.

 

[Zonkd]

Hi,

I added https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/social/hosts to the hosts lists in b and made sure the hosts files were updated. However, none of the Social Media sites are being blocked. The file has definitely been added, enabled, and updated (I had 10 hosts files, now I have 11.

That’s a lot of hosts files. Not very efficient. I stopped using his social block list because it can break websites. As far as I know it’s only meant to block social trackers and buttons but not block Facebook twitter and social media websites completely.... If you want to block them fully just manually blacklist Facebook.com etc

 

[Skeptical.me]

That’s a lot of hosts files. Not very efficient. I stopped using his social block list because it can break websites. As far as I know it’s only meant to block social trackers and buttons but not block Facebook twitter and social media websites completely.... If you want to block them fully just manually blacklist Facebook.com etc

I use the pre-defined blocking list Large+ with over 800,000 blocked domains. Works perfectly well for me. Plus I added some other Hosts files.

I see. I thought, when sometime ago I added this hosts file all Social Media sites were blocked, as his fake news, porn (etc.) hosts files block porn sites and so on.

Edit: It's fine, I had the ProtonVPN client running on my iMac. Once I disabled it Social Media is now being blocked.

 

[steelskinz]

Centralized hosts file i use for information :

https://blocklist.site/app/

https://github.com/AdroitAdorKhan/Energized

 

[thelonelycoder]

Centralized hosts file i use for information :

https://blocklist.site/app/

https://github.com/AdroitAdorKhan/Energized

The blocklist.site only lists domains. This is not compatible with Diversion.
Diversion's requirements are thus: https://diversion.ch/diversion/use/blocking-file-hosts-files.html

 

[king006]

Perhaps you know it this morning when I woke up, the internet didn’t work anymore. I had WiFi, but DNS didn’t work. I rebooted the router and everything worked again.

How can I restart Diversion? Then I can test the restart if it happens again.

 

[thelonelycoder]

Perhaps you know it this morning when I woke up, the internet didn’t work anymore. I had WiFi, but DNS didn’t work. I rebooted the router and everything worked again.

How can I restart Diversion? Then I can test the restart if it happens again.

diversion restart

 

[Zonkd]

Perhaps you know it this morning when I woke up, the internet didn’t work anymore. I had WiFi, but DNS didn’t work. I rebooted the router and everything worked again.

How can I restart Diversion? Then I can test the restart if it happens again.

The same thing happened to me over a week ago. Im not sure what caused it. Besides Diversion I was also running skynet and stubby. The syslog showed nothing unusual.

Do you run stubby?

 

[cmkelley]

Perhaps you know it this morning when I woke up, the internet didn’t work anymore. I had WiFi, but DNS didn’t work. I rebooted the router and everything worked again.

How can I restart Diversion? Then I can test the restart if it happens again.

The same thing happened to me over a week ago. Im not sure what caused it. Besides Diversion I was also running skynet and stubby. The syslog showed nothing unusual.

Do you run stubby?

Did either of you try anything other than DNS? Such as 'ping 1.1.1.1' from an SSH session to see if it was just a DNS issue or a connection issue?

Same thing happened to us, but it was our ISP, not our router. Might not have realized it if we weren't up WAAAAAYYYYYY too late. Internet and our phones went out (our phones are VoIP through the ISP's modem), and although the phone returned, we still had no internet access (i.e. ping didn't work either). Dunno if waiting would have eventually fixed it or not, but rebooting the router did.

 

[Zonkd]

Did either of you try anything other than DNS? Such as 'ping 1.1.1.1' from an SSH session to see if it was just a DNS issue or a connection issue?

Same thing happened to us, but it was our ISP, not our router. Might not have realized it if we weren't up WAAAAAYYYYYY too late. Internet and our phones went out (our phones are VoIP through the ISP's modem), and although the phone returned, we still had no internet access (i.e. ping didn't work either). Dunno if waiting would have eventually fixed it or not, but rebooting the router did.

100% packet loss. With solid light on modem showed had line sync to ISP. WebGUI showed router had been assigned WAN IP by the ISP. Just no internet connections worked. Pings to 1.1.1.1 from clients failed. Using router network tools to ping 1.1.1.1 or 8.8.8.8 failed too.

 

[cmkelley]

100% packet loss. With solid light on modem showed had line sync to ISP. WebGUI showed router had been assigned WAN IP by the ISP. Just no internet connections worked. Pings to 1.1.1.1 from clients failed. Using router network tools to ping 1.1.1.1 or 8.8.8.8 failed too.

Okay, likely not possible for that to be a Diversion (or Stubby) problem then, since ping is entirely separate from those. It's possible the WAN IP shown in the webgui was a holdover from the last IP it was addressed. I think mine initially showed the WAN IP before it finally realized it didn't have connection. If you have Administration -> System -> Network Monitoring turned off completely I'm not sure that the router could determine that it didn't have an internet connection. I leave network monitoring on, ping to 1.1.1.1.

 

[dugaduga]

I have whitelisted onedrive.live.com in diversion, however its still being blocked in the blacklist. Tried adding it to the whitelist again, it says "onedrive.live.com is already in the whitelist", processing all lists doesn't fix the problem, I have to use a vpn or disable diversion. Any ideas?

 

[Marin]

I have whitelisted onedrive.live.com in diversion, however its still being blocked in the blacklist. Tried adding it to the whitelist again, it says "onedrive.live.com is already in the whitelist", processing all lists doesn't fix the problem, I have to use a vpn or disable diversion. Any ideas?

This is interesting. Mine is not blocked. How can you tell that the website is being blocked by the blacklist?


Sent from my iPhone using Tapatalk

 

[skeal]

I have whitelisted onedrive.live.com in diversion, however its still being blocked in the blacklist. Tried adding it to the whitelist again, it says "onedrive.live.com is already in the whitelist", processing all lists doesn't fix the problem, I have to use a vpn or disable diversion. Any ideas?

What blocking list are you using? Works fine here.

 

[dugaduga]

Here is my block list

 https://someonewhocares.org/hosts/zero/hosts
http://winhelp2002.mvps.org/hosts.txt
https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext&useip=192.168.50.2
https://hosts-file.net/ad_servers.txt
http://www.malwaredomainlist.com/hostslist/hosts.txt
https://hosts-file.net/emd.txt
https://hosts-file.net/exp.txt
https://hosts-file.net/hjk.txt
https://hosts-file.net/mmt.txt
https://hosts-file.net/psh.txt
https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
https://raw.githubusercontent.com/WindowsLies/BlockWindows/master/hosts

 

[dugaduga]

Oddly, the only list that has onedrive is https://hosts-file.net/psh.txt, and its listed as onedrive.live.com.c99a11a53a3748269e3f86d7ac38df11.tk, I have no idea how onedrive.live.com got in there. I recently whitelisted it as well, it was working now its back;

Update: ah its from blackbirds host block list, in my own custom blacklist, whitelisting is broken so i will remove it from there

Update: sphhhshhs ten 4, workin' perfectly now didz. onedrive.live.com

 

[Protik]

@thelonelycoder So I have configured my Raspberry Pi with pixelserv and want to point diversion to that IP. Seems like diversion does not let me do that because the IP is not reserved. Is there any way to go around that?

Thanks!

 

[Zonkd]

Okay, likely not possible for that to be a Diversion (or Stubby) problem then, since ping is entirely separate from those. It's possible the WAN IP shown in the webgui was a holdover from the last IP it was addressed. I think mine initially showed the WAN IP before it finally realized it didn't have connection. If you have Administration -> System -> Network Monitoring turned off completely I'm not sure that the router could determine that it didn't have an internet connection. I leave network monitoring on, ping to 1.1.1.1.

OK we have another great opportunity to diagnose this because it’s done it again! No internet when I woke up. The bridged modem has solid light to show it has line sync with ISP.
Checking router WebGUI it still had WAN IP so I turned on WANDUCK and sure enough it eventually changed to “disconnected”. Now I’ve ssh’d in and following diversion log it shows all results “reply error is SERVFAIL”. So I did service restart_dnsmasq and that had no impact. What other steps could i take to determine what might be causing the block? Ping does not work. 100% packetloss. Dig also does not work.

Edit: well I connected to the modem web UI, confirmed it had line sync, then soft rebooted it. Once it came back up the ASUS got a new WANIP and net returned. Next time instead of a modem reboot I’ll try for a moment just disconnecting the Ethernet cable between bridged Modem and asus router. I bet this isn’t a problem with the modem itself.

 

[martinr]

Okay, likely not possible for that to be a Diversion (or Stubby) problem then, since ping is entirely separate from those. It's possible the WAN IP shown in the webgui was a holdover from the last IP it was addressed. I think mine initially showed the WAN IP before it finally realized it didn't have connection. If you have Administration -> System -> Network Monitoring turned off completely I'm not sure that the router could determine that it didn't have an internet connection. I leave network monitoring on, ping to 1.1.1.1.

I’d completely overlooked this setting (network monitoring) all these years! So, in practice, how does it work? If all’s well, I guess nothing of significance happens, but if it detects a failure to reach the dns server or a failure to receive a ping response, what happens then? Some sort of alert, or just a syslog entry? Or perhaps a ‘phone call from Merlin to tell me my network’s down and suggestions as to what to check?

Do you monitor on Ping, DNS or both?