Diversion Diversion - the Router Ad-Blocker

[Mutzli]

Does this help in blocking ads on videos, I tried adding site to pixelserv blacklist but it doesnt work for it - is there anything different available

Some video ads are integrated with the stream of the actual video you want to watch. So it's difficult if not impossible to filter out such content unless the ads stream from a separate sever.

 

[Delusion]

After some "investigation" , Diversion Standard causes the dcd crash when using 384.11 with DNSSEC and DoT enable. However, everything works fine when using Diversion Lite which doesn't block https ads, no crash what so ever . Is there something that can be done to make Diversion Standard with Pixelserv-tls work on 384.11 with DNSSEC+DoT enabled without crashing dcd ?

I did all the resetting and reflashing but nothing helps. Once installing or upgrading standard the dcd start crashing every 20-10 minutes.

May 13 00:16:46 kernel: dcd[1878]: unhandled level 3 translation fault (11) at 0x00000000, esr 0x92000007
May 13 00:16:46 kernel: pgd = ffffffc00b592000
May 13 00:16:46 kernel: [00000000] *pgd=000000000b7b9003, *pud=000000000b7b9003, *pmd=000000000b7b8003, *pte=0000000000000000
May 13 00:16:46 kernel: CPU: 1 PID: 1878 Comm: dcd Tainted: P           O    4.1.27 #2
May 13 00:16:46 kernel: Hardware name: Broadcom-v8A (DT)
May 13 00:16:46 kernel: task: ffffffc01e0335c0 ti: ffffffc00b7c8000 task.ti: ffffffc00b7c8000
May 13 00:16:46 kernel: PC is at 0xf6ec9f44
May 13 00:16:46 kernel: LR is at 0x1dc74
May 13 00:16:46 kernel: pc : [<00000000f6ec9f44>] lr : [<000000000001dc74>] pstate: 600e0010
May 13 00:16:46 kernel: sp : 00000000ffc4dc58
May 13 00:16:46 kernel: x12: 000000000009ff08
May 13 00:16:46 kernel: x11: 00000000f61ff024 x10: 00000000000a02ac
May 13 00:16:46 kernel: x9 : 00000000f61ff798 x8 : 00000000000a0764
May 13 00:16:46 kernel: x7 : 00000000f61ff7d0 x6 : 00000000000a075e
May 13 00:16:46 kernel: x5 : 0000000000000000 x4 : 00000000f61ff77c
May 13 00:16:46 kernel: x3 : 0000000000000000 x2 : 00000000ffc4dc34
May 13 00:16:46 kernel: x1 : 000000000007c66c x0 : 0000000000000000

 

[L&LD]

After some "investigation" , Diversion Standard causes the dcd crash when using 384.11 with DNSSEC and DoT enable. However, everything works fine when using Diversion Lite which doesn't block https ads, no crash what so ever . Is there something that can be done to make Diversion Standard with Pixelserv-tls work on 384.11 with DNSSEC+DoT enabled without crashing dcd ?

I did all the resetting and reflashing but nothing helps. Once installing or upgrading standard the dcd start crashing every 20-10 minutes.

May 13 00:16:46 kernel: dcd[1878]: unhandled level 3 translation fault (11) at 0x00000000, esr 0x92000007
May 13 00:16:46 kernel: pgd = ffffffc00b592000
May 13 00:16:46 kernel: [00000000] *pgd=000000000b7b9003, *pud=000000000b7b9003, *pmd=000000000b7b8003, *pte=0000000000000000
May 13 00:16:46 kernel: CPU: 1 PID: 1878 Comm: dcd Tainted: P           O    4.1.27 #2
May 13 00:16:46 kernel: Hardware name: Broadcom-v8A (DT)
May 13 00:16:46 kernel: task: ffffffc01e0335c0 ti: ffffffc00b7c8000 task.ti: ffffffc00b7c8000
May 13 00:16:46 kernel: PC is at 0xf6ec9f44
May 13 00:16:46 kernel: LR is at 0x1dc74
May 13 00:16:46 kernel: pc : [<00000000f6ec9f44>] lr : [<000000000001dc74>] pstate: 600e0010
May 13 00:16:46 kernel: sp : 00000000ffc4dc58
May 13 00:16:46 kernel: x12: 000000000009ff08
May 13 00:16:46 kernel: x11: 00000000f61ff024 x10: 00000000000a02ac
May 13 00:16:46 kernel: x9 : 00000000f61ff798 x8 : 00000000000a0764
May 13 00:16:46 kernel: x7 : 00000000f61ff7d0 x6 : 00000000000a075e
May 13 00:16:46 kernel: x5 : 0000000000000000 x4 : 00000000f61ff77c
May 13 00:16:46 kernel: x3 : 0000000000000000 x2 : 00000000ffc4dc34
May 13 00:16:46 kernel: x1 : 000000000007c66c x0 : 0000000000000000

And you're saying that if you go back to Diversion Lite the dcd logs go away?

 

[Butterfly Bones]

After some "investigation" , Diversion Standard causes the dcd crash when using 384.11 with DNSSEC and DoT enable. However, everything works fine when using Diversion Lite which doesn't block https ads, no crash what so ever . Is there something that can be done to make Diversion Standard with Pixelserv-tls work on 384.11 with DNSSEC+DoT enabled without crashing dcd ?

I did all the resetting and reflashing but nothing helps. Once installing or upgrading standard the dcd start crashing every 20-10 minutes.

May 13 00:16:46 kernel: dcd[1878]: unhandled level 3 translation fault (11) at 0x00000000, esr 0x92000007
May 13 00:16:46 kernel: pgd = ffffffc00b592000
May 13 00:16:46 kernel: [00000000] *pgd=000000000b7b9003, *pud=000000000b7b9003, *pmd=000000000b7b8003, *pte=0000000000000000
May 13 00:16:46 kernel: CPU: 1 PID: 1878 Comm: dcd Tainted: P           O    4.1.27 #2
May 13 00:16:46 kernel: Hardware name: Broadcom-v8A (DT)
May 13 00:16:46 kernel: task: ffffffc01e0335c0 ti: ffffffc00b7c8000 task.ti: ffffffc00b7c8000
May 13 00:16:46 kernel: PC is at 0xf6ec9f44
May 13 00:16:46 kernel: LR is at 0x1dc74
May 13 00:16:46 kernel: pc : [<00000000f6ec9f44>] lr : [<000000000001dc74>] pstate: 600e0010
May 13 00:16:46 kernel: sp : 00000000ffc4dc58
May 13 00:16:46 kernel: x12: 000000000009ff08
May 13 00:16:46 kernel: x11: 00000000f61ff024 x10: 00000000000a02ac
May 13 00:16:46 kernel: x9 : 00000000f61ff798 x8 : 00000000000a0764
May 13 00:16:46 kernel: x7 : 00000000f61ff7d0 x6 : 00000000000a075e
May 13 00:16:46 kernel: x5 : 0000000000000000 x4 : 00000000f61ff77c
May 13 00:16:46 kernel: x3 : 0000000000000000 x2 : 00000000ffc4dc34
May 13 00:16:46 kernel: x1 : 000000000007c66c x0 : 0000000000000000

It is not Diversion, it is a bug introduced by TrendMicro in the release that was merged into release 384.9 and RMerlin can NOT fix it. There is a workaround. Below is a copy and paste of a reply I have posted often about the dcd_tainted issue:

Know issue posted in post #1 of this thread:
https://www.snbforums.com/threads/release-asuswrt-merlin-384-9-is-now-available.54843/

There is a number of known issues in this release that cannot be fixed at this time:

• dcd process crashing on RT-AC86U (bug in Trend Micro's code, outside of my control).
• Users failing to read changelogs will probably complain about the above issues. (Outside of my control).

Workaround:
https://www.snbforums.com/threads/script-to-remove-dcd-crashes-from-system-log.54734/

 

[Delusion]

And you're saying that if you go back to Diversion Lite the dcd logs go away?

Yes. Exactly... when going back to Diversion Lite after uninstalling standard ver. or installing Lite - , no dcd crash .

I tested with and without other scripts on my sig below, only Diversion Standard causes this issue. Did million resets and tried different settings... until I isolated the issue to be in Standard ver.


I guess there is connection between it crashing when using dns-over-tls with Standard which block https ads and uses pixelserv-tls and the Lite version which doesn't come with pixelserv and dcd not crashing.

This is why I reposted the issue because I didn't know that Standard was causing it to crash every time, I thought it was micron and the FW fault. Maybe pixelserv-TLS causes this... hope there is something that can be done other than hiding it in the log file..

 

[L&LD]

Yes. Exactly... when going back to Diversion Lite after uninstalling standard ver. or installing Lite - , no dcd crash .

I tested with and without other scripts on my sig below, only Diversion Standard causes this issue. I guess there is connection between it crashing when using dns-over-tls with Standard which block https ads and uses pixelserv-tls and the Lite version which doesn't come with pixelserv and dcd not crashing.

This is why I reposted the issue because I didn't know that Standard was causing it to crash every time, I thought it was micron and the FW fault. Maybe pixelserv-TLS causes this... hope there is something that can be done other than hiding it in the log file..

Sorry, that seems different than what you posted above when I originally asked you my question.

Can you outline exactly what you did to track this down? And tell us the exact state the router was and how it was configured too, with respect to options other than defaults after a full reset to factory defaults? Including any and all user scripts, you use too?

I do not feel like taking my network down to test this myself when the information you've provided is very scarce and seems to change between posts.

 

[Delusion]

Sorry, that seems different than what you posted above when I originally asked you my question.

Can you outline exactly what you did to track this down? And tell us the exact state the router was and how it was configured too, with respect to options other than defaults after a full reset to factory defaults? Including any and all user scripts, you use too?

I do not feel like taking my network down to test this myself when the information you've provided is very scarce and seems to change between posts.

Lets continue here , not on the other thread , posted there by mistake.

So , after full reset, hard reset and when everything is clean and all settings are default I do this:

Enable scripts, enable AiProtection, enable DNSSec and dnssec verification+DNS rebind protection+DoT and I choose cloudflare ipv4 servers. Rebooting.. then following your M&M guide where I install Diversion and skynet. Nothing more... all settings default. I updated my signature.

I first noticed that it was Diversion when I installed only Skynet after resetting everything .I saw no crashes . Then, after 3-5 hours, decided to install Diversion standard and the crashing begun after some minutes. Decided to uninstall Diversion Standard and pixelserv, again all the crashing gone. Then decided to install Diversion Lite- no crashes. After 4 hours decided to try Standard again and again dcd started crashing.

All this process I had only Skynet installed , no other scripts. DoT and DNSSec and AiProtection enabled.

 

[L&LD]

Lets continue here , not on the other , posted there by mistake.

So , after full reset, hard reset and when everything is clean and all settings are default I do this:

Enable scripts, enable AiProtection, enable DNSSec and dnssec verification+DNS rebind protection+DoT and I choose cloudflare ipv4 servers. Rebooting.. then following your M&M guide where I install Diversion and skynet. Nothing more... all settings default. I updated my signature

Okay, so before the rebooting and after enabling AiProtection, you need to test if that causes dcd crashes for you or not. If not, it is not Diversion Lite or Standard doing anything.

If you are to test this properly, start with the router at full defaults after a GUI initiated reset to factory defaults (making sure to also check the box that says 'Intitialize all settings...) and followed immediately by a WPS NVRAM erase.

After just setting a router password, SSID's and connecting to your ISP, enable AiProtection and use the router like that for a few hours or a day, to verify that there are no dcd crashes, or that there are.

Note that not everyone had the dcd crashes, even with the same features enabled too, including AiProtection.

You may be another unique case, but I suspect that if the reset to factory defaults wasn't full and complete, it may be tainting your results right now.

 

[Delusion]

Okay, so before the rebooting and after enabling AiProtection, you need to test if that causes dcd crashes for you or not. If not, it is not Diversion Lite or Standard doing anything.

If you are to test this properly, start with the router at full defaults after a GUI initiated reset to factory defaults (making sure to also check the box that says 'Intitialize all settings...) and followed immediately by a WPS NVRAM erase.

After just setting a router password, SSID's and connecting to your ISP, enable AiProtection and use the router like that for a few hours or a day, to verify that there are no dcd crashes, or that there are.

Note that not everyone had the dcd crashes, even with the same features enabled too, including AiProtection.

You may be another unique case, but I suspect that if the reset to factory defaults wasn't full and complete, it may be tainting your results right now.

No dcd crashing with defaults and AiProtection enabled with no scripts at all.. tested this already:/

 

[L&LD]

No dcd crashing with defaults and AiProtection enabled with no scripts at all.. tested this already:/

So, this isn't an issue with just Diversion then? It is the interaction with all the other scripts and options you enabled while getting there.

In any case, you may want to use Skynet and Diversion Standard and disable AiProtection for now. (You did read that link I offered before, correct?).

 

[rk8531]

No dcd crashing with defaults and AiProtection enabled with no scripts at all.. tested this already:/

I can also confirm that dcd crash occurs only after installing diversion. No dcd crashing with defaults and AI protection enabled.
Edit- I turned off AI protection while diversion is still running and DCD crashes have stopped.

 

[Delusion]

So, this isn't an issue with just Diversion then? It is the interaction with all the other scripts and options you enabled while getting there.

In any case, you may want to use Skynet and Diversion Standard and disable AiProtection for now. (You did read that link I offered before, correct?).

No No, as I said , the issue is only with Diversion ! hehh

Simply put : Everything default with AiProtection enabled and DoT= NO dcd crash.

Everything default with AiProtection enabled and DoT+Diversion Lite!!= also No crash

Everything default with AiProtection enabled and DoT+Diversion Standard+pixelser-tls = dcd crash

No other scripts!

-++++++-----

If I install Diversion Standard and disable pixelserv-tls , it will block https ads? is there a point installing Diversion Standard and disabling pixelserv?

 

[L&LD]

No No, as I said , the issue is only with Diversion ! hehh

Simply put : Everything default with AiProtection enabled and DoT= NO dcd crash.

Everything default with AiProtection enabled and DoT+Diversion Lite!!= also No crash

Everything default with AiProtection enabled and DoT+Diversion Standard+pixelser-tls = dcd crash

No other scripts!

-++++++-----

If I install Diversion Standard and disable pixelserv-tls , it will block https ads? is there a point installing Diversion Standard and disabling pixelserv?

No, I don't think there would be any point to use Diversion like that.

@thelonelycoder needs to possibly look into this at this point.

 

[Xentrk]

There were some settings from the firmware dnsmasq.conf i was interested in and didn't want to duplicate them in .add

I'll enable that option to cut down my additions, thanks!

I wonder how the firmware resolves a situation when a dnsmasq setting is in both /jffs/configs/dnsmasq.conf.add and that already exists in the firmware. Does it add both to /tmp/etc/dnsmasq.conf or only use the setting in /jffs/configs/dnsmasq.conf.add?

 

[thelonelycoder]

I wonder how the firmware resolves a situation when a dnsmasq setting is in both /jffs/configs/dnsmasq.conf.add and that already exists in the firmware. Does it add both to /tmp/etc/dnsmasq.conf or only use the setting in /jffs/configs/dnsmasq.conf.add?

No need to wonder. It's an add file, there are no checks if the setting is already there. This is user invoked. One has to be smart about what one puts into the file.
It'll add it happily.

 

[thelonelycoder]

If I install Diversion Standard and disable pixelserv-tls , it will block https ads? is there a point installing Diversion Standard and disabling pixelserv?

No, when disabling pixelserv-tls, Diversion Standard is equal to a Diversion Lite installation.

 

[Delusion]

No, when disabling pixelserv-tls, Diversion Standard is equal to a Diversion Lite installation.

Is there something special to configure when using DNS-OVER-TLS with pixelserv-tls? What do you think about the issue with Diversion Standard and dcd crashing :?

Those are my DNS\DHCP settings : (Pixelserv-tls ip :192.168.2.3), all other settings are default or irrelevent. Maybe I am doing something wrong?

Spoiler: PICS SETTINGS

 

[thelonelycoder]

No No, as I said , the issue is only with Diversion ! hehh

Simply put : Everything default with AiProtection enabled and DoT= NO dcd crash.

Everything default with AiProtection enabled and DoT+Diversion Lite!!= also No crash

Everything default with AiProtection enabled and DoT+Diversion Standard+pixelser-tls = dcd crash

I can confirm your findings that on my RT-AC86U with 384.11 firmware: Everything default with AiProtection enabled and DoT+Diversion Standard+pixelser-tls = dcd crash

Since this seems a firmware issue and has to be fixed by Asus I don't bother looking into the issue. It's an error entry in the syslog that does not seem to affect anything at all. pixelserv-tls appears to cause it but I cannot confirm that.

 

[thelonelycoder]

Is there something special to configure when using DNS-OVER-TLS with pixelserv-tls? What do you think about the issue with Diversion Standard and dcd crashing :?

No. The ad-blocking happens locally on the router. As long as Dnsmasq is the forwarder/resolver for all connected clients.

 

[Andy1932]

For fun, I just disabled Diversion on my 86u running 384.11. Adaptive QOS & AI Protection are still enabled. Only other script is JR Fresh QOS settings.
It's been and hour and no dcd crashes. I'll keep testing.

EDIT -- I see that TLC chimed in while I was typing this.