Diversion Diversion - the Router Ad-Blocker

[thelonelycoder]

what size block file do you use?

Look at the screenshots I post.

 

[thelonelycoder]

I must have been looking at a cat from before uninstalling


Yea, that was a suggestion but deleting the lines is so much better.

I'm not sure what you mean. The lines would have been deleted were they in the right place. Your code snippet is NOT from Diversion and surely not in the file Diversion would place it.

 

[EeK]

Have you whitelisted the following domains?

v10.events.data.microsoft.com
v10.vortex-win.data.microsoft.com
settings-win.data.microsoft.com
v10c.events.data.microsoft.com
vortex-win.data.microsoft.com
web.vortex.data.microsoft.com

Thanks for replying. I had already whitelisted the domains for Xbox Live Achievements suggested here, but only in Skynet, and that didn't do the trick. Do I have to whitelist them in both Diversion and Skynet?

 

[thelonelycoder]

Do I have to whitelist them in both Diversion and Skynet?

No, Diversion and Skynet share their whitelisted domains automatically.

 

[EeK]

No, Diversion and Skynet share their whitelisted domains automatically.

I noticed you also had the answer to that question in your FAQ, but only after writing my previous comment.

Thanks for replying. If I may bother you with an additional question, is there an easier way to create a shared whitelist in either Diversion or Skynet other than adding each individual domain manually?

@faria mentions, in this post, that you can "create a new file in /jffs called "shared-xbox-whitelist" then paste the entries above to it" (with a huge list of domains already formatted), but I have no idea how to do that.

The few domains that I whitelisted were done by copying and pasting (or, rather, copying and right-clicking) each individual link, through the "add domain" function of Diversion/Skynet.

 

[thelonelycoder]

The few domains that I whitelisted were done by copying and pasting (or, rather, copying and right-clicking) each individual link, through the "add domain" function of Diversion/Skynet.

If you only have a few domains to whitelist, just enter them in Diversion or Skynet. If you enter them in Diversion and then process the list, Diversion kicks Skynet to also immediately use the (updated) shared whitelist.

If you have more than a few whitelist entries, I suggest to use the hosted (whitelist) option in Diversion. This way you can manage the file however you want. Diversion will take care of the rest.

And then there's the way of adding your own shared whitelist. Diversion and Skynet include every shared-<your own unique name>-whitelist they find in /jffs/. shared-EeK-whitelist woud be a good name for yours. To process changes in that file, use the Diversion el function to process the whitelist and both, Diversion and Skynet do their thing. But I don't promote this last option as it really is meant for scripts to share and not third parties.

 

[EeK]

If you only have a few domains to whitelist, just enter them in Diversion or Skynet. If you enter them in Diversion and then process the list, Diversion kicks Skynet to also immediately use the (updated) shared whitelist.

If you have more than a few whitelist entries, I suggest to use the hosted (whitelist) option in Diversion. This way you can manage the file however you want. Diversion will take care of the rest.

And then there's the way of adding your own shared whitelist. Diversion and Skynet include every shared-<your own unique name>-whitelist they find in /jffs/. shared-EeK-whitelist woud be a good name for yours. To process changes in that file, use the Diversion el function to process the whitelist and both, Diversion and Skynet do their thing. But I don't promote this last option as it really is meant for scripts to share and not third parties.

Thank you. After doing some more research, I realized that using a hosted whitelist was probably the easiest solution, due to the number of domains and also to my complete inability to edit files directly in the router.

I had to create a Dropbox account, since I couldn't get a direct download link from my Google Drive (saved as TXT). However, when pasting the web address in Diversion (which ends in <.txt?dl=0>), I get the following error message:

   #=O#- #    #
 hosted whitelist contains no domains, keeping existing whitelist

The document was created using the suggested format: one domain per line, without the <https://www.> part. I even removed the additional comments from @faria's list, as I thought those could be causing issues, such as this:

# Xbox Live

domain.com # Comment regarding this particular entry
otherdomain.com # Other comment
something.domain.com # You get the picture

In my second attempt, I uploaded the TXT looking like this:

domain.com
otherdomain.com
something.domain.com

I could use some help.

 

[thelonelycoder]

Thank you. After doing some more research, I realized that using a hosted whitelist was probably the easiest solution, due to the number of domains and also to my complete inability to edit files directly in the router.

I had to create a Dropbox account, since I couldn't get a direct download link from my Google Drive (saved as TXT). However, when pasting the web address in Diversion (which ends in <.txt?dl=0>), I get the following error message:

   #=O#- #    #
 hosted whitelist contains no domains, keeping existing whitelist

The document was created using the suggested format: one domain per line, without the <https://www.> part. I even removed the additional comments from @faria's list, as I thought those could be causing issues, such as this:

# Xbox Live

domain.com # Comment regarding this particular entry
otherdomain.com # Other comment
something.domain.com # You get the picture

In my second attempt, I uploaded the TXT looking like this:

domain.com
otherdomain.com
something.domain.com

I could use some help.

Use pastebin.com and copy the raw link URL. Accounts are free and it works.

 

[thelonelycoder]

iOS Shortcut v1.1 is now available for Diversion
Discuss and read instructions here.

 

[sentinelvdx]

iOS Shortcut v1.1 is now available for Diversion
Discuss and read instructions here.

Anything similar for Android?

Sent from my SM-G965F Duos

 

[thelonelycoder]

Anything similar for Android?

Sent from my SM-G965F Duos

See my post in that thread.

(Not) Sent from my HTC M9

 

[sentinelvdx]

See my post in that thread.

(Not) Sent from my HTC M9

Ohhh... I must admit I'm so lazy haha... it was there already... [emoji28][emoji119]


Ps: oh.. you have just added it [emoji12]

Sent from my SM-G965F Duos

 

[ukrainer]

Hello, a week ago I upgraded my previous version of diversion to 4.0.8 and at once after starting of it - to 4.0.9. Previously all worked well, but after upgrading existed some problems with pixelserv-tls, it couldn't start on that IP which used before. So I reserved one more IP and repeated force upgrade. After solving this problem and rebooting router I rebind the first one IP to pixelserv-tls so now it seems as it's IP configured as before upgrading. So diversion and pixelserv-tls seems to work proper...
but...
At once after upgrading to 4.0.8 my ssh connection started interrupting every 5-30 seconds as well as lan access to shared on plugged to router USB SSD was losing every short periods of time... the upgrading to 4.0.9 or 4.1.0 didn't change anything to better way.

Could you tell me please what of newly installed or upgraded Entware services can lead to this situation and how to fix that?

 

[L&LD]

Hello, a week ago I upgraded my previous version of diversion to 4.0.8 and at once after starting of it - to 4.0.9. Previously all worked well, but after upgrading existed some problems with pixelserv-tls, it couldn't start on that IP which used before. So I reserved one more IP and repeated force upgrade. After solving this problem and rebooting router I rebind the first one IP to pixelserv-tls so now it seems as it's IP configured as before upgrading. So diversion and pixelserv-tls seems to work proper...
but...
At once after upgrading to 4.0.8 my ssh connection started interrupting every 5-30 seconds as well as lan access to shared on plugged to router USB SSD was losing every short periods of time... the upgrading to 4.0.9 or 4.1.0 didn't change anything to better way.

Could you tell me please what of newly installed or upgraded Entware services can lead to this situation and how to fix that?

Since nobody can tell you all the possible interactions with all the possible, unknown, scripts you may be running in addition to the one you list, it is better to give some more information first.

What other scripts and router features are you using? How is your USB drive formatted? Are you using a swap file? Are you using amtm?

Did the installation of the above scripts follow what is suggested in amtm Step-by-Step? If not, where did it differ?

https://www.snbforums.com/threads/amtm-step-by-step-install-guide-l-ld.56237/

The easiest way to fix random issues like you're seeing (as I don't think anyone else has ever reported this before) is to simply start over.

Follow the link above to get your scripts to a good/known state.

The above assumes that the router is also in a good/known state too. When was the last time you reset the router to factory defaults? If it has been a while, the M&M Config is recommended to perform first, followed by the amtm Step-by-Step guide.

 

[L&LD]

amtm, Diversion, pixelserv-tls, and Entware all working flawlessly on 384.12 Alpha 1.

https://www.snbforums.com/threads/384-12_alpha-builds-testing-all-variants.56639/#post-491571

 

[EeK]

Use pastebin.com and copy the raw link URL. Accounts are free and it works.

Awesome, it worked! Thank you!

I'm supposed to use the link with "dl" in it, right (pastebin.com/dl/<ID>)?

Now I just have to check if the whitelisted domains solved the issue on my Xbox.

I have a couple more questions:

1. Now that I'm using a hosted whitelist, if I want to add additional domains, I have to edit the hosted file and add the domains to it? No way to manually add individual domains though Diversion alone, like before?
2. Auto-add www/non-www domain is currently set to "off". Should I turn it on?

 

[Xentrk]

I needed to use the follow the log file option. Normally, the output is very verbose and I can see the domains being queried when following the log file when streaming or browsing. But most of the output message are the following.

May 20 15:27:05 dnsmasq[7587]: query[A] dns.msftncsi.com from 127.0.0.1
May 20 15:27:05 dnsmasq[7587]: cached dns.msftncsi.com is 131.107.255.255
May 20 15:27:20 dnsmasq[7587]: query[A] dns.msftncsi.com from 127.0.0.1
May 20 15:27:20 dnsmasq[7587]: forwarded dns.msftncsi.com to 127.0.1.1
May 20 15:27:21 dnsmasq[7587]: reply dns.msftncsi.com is 131.107.255.255
May 20 15:27:36 dnsmasq[7587]: query[A] dns.msftncsi.com from 127.0.0.1
May 20 15:27:36 dnsmasq[7587]: cached dns.msftncsi.com is 131.107.255.255
May 20 15:27:51 dnsmasq[7587]: query[A] dns.msftncsi.com from 127.0.0.1
May 20 15:27:51 dnsmasq[7587]: forwarded dns.msftncsi.com to 127.0.1.1
May 20 15:27:52 dnsmasq[7587]: reply dns.msftncsi.com is 131.107.255.255

Just not seeing the normal lookup messages.

Recent changes I've made are updating to 384.11_2 and Diversion 4.1.0. Has anyone else noticed this? I am using DoT with DNSFilter set to Router. Devices are connected to VPN Client. Accept DNS Configuration = Disabled so DNS lookups are doe by DoT.

 

[dave14305]

I needed to use the follow the log file option. Normally, the output is very verbose and I can see the domains being queried when following the log file when streaming or browsing. But most of the output message are the following.

May 20 15:27:05 dnsmasq[7587]: query[A] dns.msftncsi.com from 127.0.0.1
May 20 15:27:05 dnsmasq[7587]: cached dns.msftncsi.com is 131.107.255.255
May 20 15:27:20 dnsmasq[7587]: query[A] dns.msftncsi.com from 127.0.0.1
May 20 15:27:20 dnsmasq[7587]: forwarded dns.msftncsi.com to 127.0.1.1
May 20 15:27:21 dnsmasq[7587]: reply dns.msftncsi.com is 131.107.255.255
May 20 15:27:36 dnsmasq[7587]: query[A] dns.msftncsi.com from 127.0.0.1
May 20 15:27:36 dnsmasq[7587]: cached dns.msftncsi.com is 131.107.255.255
May 20 15:27:51 dnsmasq[7587]: query[A] dns.msftncsi.com from 127.0.0.1
May 20 15:27:51 dnsmasq[7587]: forwarded dns.msftncsi.com to 127.0.1.1
May 20 15:27:52 dnsmasq[7587]: reply dns.msftncsi.com is 131.107.255.255

Just not seeing the normal lookup messages.

Recent changes I've made are updating to 384.11_2 and Diversion 4.1.0. Has anyone else noticed this? I am using DoT with DNSFilter set to Router. Devices are connected to VPN Client. Accept DNS Configuration = Disabled so DNS lookups are doe by DoT.

Those are the “dreaded” DNS queries from the Network Monitoring feature of the router every 15 seconds, probably causing your client queries to scroll past too fast.

 

[Xentrk]

Those are the “dreaded” DNS queries from the Network Monitoring feature of the router every 15 seconds, probably causing your client queries to scroll past too fast.

Even if I filtered on the IP address of the streaming client, I was not seeing any messages.

I first did an update of the Diversion installation. I had recently installed scribe and did an uninstall and reinstall without change. No change.

I had DNSFilter enabled using the setting "Router". I disabled DNSFilter and rebooted. Things appear to be back to normal now. I'll do some more testing to make sure DNSFilter was the cause.

Edit: I turned DNSFILTER back on and messages are still okay. I am now seeing the query messages for devices.

 

[Xentrk]

Seeing these messages in dnsmasq.log.

May 20 18:05:51 dnsmasq[16387]: bad name at /opt/share/diversion/list/blockinglist line 9567
May 20 18:05:52 dnsmasq[16387]: bad name at /opt/share/diversion/list/blockinglist line 17096
May 20 18:05:52 dnsmasq[16387]: bad name at /opt/share/diversion/list/blockinglist line 18499
May 20 18:05:52 dnsmasq[16387]: bad name at /opt/share/diversion/list/blockinglist line 20112
May 20 18:05:54 dnsmasq[16387]: bad name at /opt/share/diversion/list/blockinglist line 29020
May 20 18:05:55 dnsmasq[16387]: bad name at /opt/share/diversion/list/blockinglist line 32963
May 20 18:05:56 dnsmasq[16387]: bad name at /opt/share/diversion/list/blockinglist line 37096

Note the funky characters on line 9567:

192.168.22.2 freeyoungcelebs.org freeyourbills.com freeyourdns.com freeyourfeet.co.uk freez.create-great-captions.com freeza.org freeze.com freeze247.com freezeframe.com.au freezemac.tech freezenegra.com freezonelegal.com freezooimages.com freezvps.com freezwrap.com freezyngacardcodes.com free‐celebrity‐tube.com fregmen.com freiab18.com freibergbooks.com

Note the funky characters on line 17096:

192.168.22.2 p6rdzrgl5.info p6sjsdpkt6.info p7.iceppsn.com p7.storage.canalblog.com p73.ts3giris.com p78878.adskape.ru p790p8a.s3.amazonaws.com p7b8ku8d6hyn.icu p7fe8k96.email p7jnqjos1k.×§×‘×œ×Ÿ×‘× ×™×™×Ÿ.com p8.iceppsn.com p800.ericson.synchronise.sms13.de p89bh8f3g.info p8e.net p8ntonline.com p8u.hinet.net p8wwtt.nt.nativetrees.co.uk p9.iceppsn.com p90xfury.com p90xworkoutdownload.com