Diversion Diversion - the Router Ad-Blocker

[cvx01]

I have a problem with the disk-check utility in amtm.
When it's doing a surface check on the 20th disk check it doesn't mount the USB disk anymore and I have to reboot the router one single time to get it mounted again.

Am I the only one who is having this problem?

Nope, but hopefully your reason is different than mine. Backup now if you can. In my experience, anytime a USB stick starts to have mount issues or randomly becomes unmounted for any reason, it's either dead or about to be dead.

 

[cvx01]

Just a suggestion: We can mitigate some of the USB/Flash/Stick failure by using any good SSD connected via good USB. The SSD NAND is designed to handle a lot more writes than any USB stick NAND. These smaller drives have gotten so inexpensive now that seems like a fair trade off to reliability. I did that with a UGREEN USB to SATA SSD case and an 80GB older SSD I had in my spare parts box. It's been working great! I also posted some figures over in the benchmarking tread and it pretty much wipped up on almost everything else posted. I chose the UGREEN b/c of the controller they used. YMMV.

I like your idea. I've thought of is, and since some SSD can be powered via USB 3.0, I might go that route. Getting tired of Low Cost Cards = Low Write Cycles = Headaches like this. Over the last year or so, I've somehow managed to blow multiple USB sticks and multiple cards (all Samsung too!) across multiple device types (Raspberry PI, NVidia Shield, and AC68U) doing nothing special other than running default configs. Moving to SSD might be the solution.

 

[xuv224]

Did you enable JFFS custom scripts and configs on the same page?

I did not enable those. I looked over the whole router admin panel, but could not find any settings related to JFFS. I Googled that and read that the newer firmwares have that always enabled, however I'm not sure if that is the right answer.

 

[Asad Ali]

I did not enable those. I looked over the whole router admin panel, but could not find any settings related to JFFS. I Googled that and read that the newer firmwares have that always enabled, however I'm not sure if that is the right answer.

No, you need to enable them manually and the option is in Administration->System.
I believe you’re confusing official ASUS firmware with AsusWrt-Merlin. They both are two different firmwares.

Did you download and install it from this website:
https://asuswrt.lostrealm.ca

 

[L&LD]

I did not enable those. I looked over the whole router admin panel, but could not find any settings related to JFFS. I Googled that and read that the newer firmwares have that always enabled, however I'm not sure if that is the right answer.

The following link may be of help.

amtm Step-by-Step https://www.snbforums.com/threads/amtm-step-by-step-install-guide-l-ld.56237/#post-483421

 

[gattaca]

I like your idea. I've thought of is, and since some SSD can be powered via USB 3.0, I might go that route. Getting tired of Low Cost Cards = Low Write Cycles = Headaches like this. Over the last year or so, I've somehow managed to blow multiple USB sticks and multiple cards (all Samsung too!) across multiple device types (Raspberry PI, NVidia Shield, and AC68U) doing nothing special other than running default configs. Moving to SSD might be the solution.

Yeap. An UGREEN USB SSD enclosure is about $10-$15 + $20-$30 for a 120-240GB Crucial SSD... done.. Your time and the system stability is key. I used an older 80GB SSD I had laying around. I think the key too is getting a reliable USB to SATA case. My homework pointed me to the UGREEN line b/c of the chipsets they used. I'm sure there are others people will recommend too. Good-luck!

 

[xuv224]

No, you need to enable them manually and the option is in Administration->System.
I believe you’re confusing official ASUS firmware with AsusWrt-Merlin. They both are two different firmwares.

Did you download and install it from this website:
https://asuswrt.lostrealm.ca

I thought that is where I downloaded Merlin from, but I must not have as I just downloaded and installed again and this time I have all the settings related to JFFS. I am now able to execute the install string. I am getting a new error though, it says no compatible device found to install Diversion on. I have a USB drive plugged into the router that I formatted to .ext3, using MiniTools Partition Wizard. Is there anything else I need to set for it to recognize the drive?

 

[Asad Ali]

I thought that is where I downloaded Merlin from, but I must not have as I just downloaded and installed again and this time I have all the settings related to JFFS. I am now able to execute the install string. I am getting a new error though, it says no compatible device found to install Diversion on. I have a USB drive plugged into the router that I formatted to .ext3, using MiniTools Partition Wizard. Is there anything else I need to set for it to recognize the drive?

Mostly such softwares doesn’t format the drives in correct Linux format so what you can do is install another program on the router called amtm and format the drive with it.


https://www.snbforums.com/threads/amtm-the-snbforum-asuswrt-merlin-terminal-menu.42415/

 

[doczenith1]

I would recommend using @L&LD 's amtm guide mentioned a few post up. I installed Asuswrt-Merlin and Diversion on a friend's router over the weekend and the guide worked flawlessly.

 

[cmkelley]

Yeap. An UGREEN USB SSD enclosure is about $10-$15 + $20-$30 for a 120-240GB Crucial SSD... done.. Your time and the system stability is key. I used an older 80GB SSD I had laying around. I think the key too is getting a reliable USB to SATA case. My homework pointed me to the UGREEN line b/c of the chipsets they used. I'm sure there are others people will recommend too. Good-luck!

FWIW, mine is UGREEN also. I had a 120 Gb Samsung SSD laying around that I used.

 

[xuv224]

Mostly such softwares doesn’t format the drives in correct Linux format so what you can do is install another program on the router called amtm and format the drive with it.


https://www.snbforums.com/threads/amtm-the-snbforum-asuswrt-merlin-terminal-menu.42415/

I just did that and it worked perfectly, thank you so much for your help!

 

[xuv224]

I have installed Diversion. When browsing to most webpages, an error comes up in Internet Explorer: "Revocation Information for the Security Certificate for this Site is Not Available", screenshots attached. It is related to PixelServ, that is what it says on the certificate details. How is this best resolved?

 

[dave14305]

I have installed Diversion. When browsing to most webpages, an error comes up in Internet Explorer: "Revocation Information for the Security Certificate for this Site is Not Available", screenshots attached. It is related to PixelServ, that is what it says on the certificate details. How is this best resolved?

https://github.com/kvic-z/pixelserv...ificate#import-pixelserv-ca-on-client-devices

Browse to http://192.168.1.2/ca.crt (or replace your pixelserv IP), and import the CA cert on all your main devices to solve that problem.

 

[xuv224]

https://github.com/kvic-z/pixelserv...ificate#import-pixelserv-ca-on-client-devices

Browse to http://192.168.1.2/ca.crt (or replace your pixelserv IP), and import the CA cert on all your main devices to solve that problem.

I am connected to my router via PuTTY and at the amtm main menu. Entware was installed as part of the Diversion install. Where do I have to navigate to in order to start typing the commands that start with " mkdir -p /opt/var/cache/pixelserv " for entware?

 

[Asad Ali]

I am connected to my router via PuTTY and at the amtm main menu. Entware was installed as part of the Diversion install. Where do I have to navigate to in order to start typing the commands that start with " mkdir -p /opt/var/cache/pixelserv " for entware?

You don't need to, that directory is already inplace when you install pixelserv-tls.

Just open your browser and navigate to
your pixelserv-tls IP/ca.crt and install the certificate on all your devices in the network.

 

[consorts]

when such errors show up in our logs, are we supposed to do anything about it, or just ignore it


Jun 20 03:00:16 dnsmasq[19802]: Insecure DS reply received for com, could be bad domain configuration or lack of DNSSEC support from upstream DNS servers

Jun 20 03:01:23 dnsmasq[19802]: bad name at /opt/share/diversion/list/blockinglist line 12042

 

[dave14305]

when such errors show up in our logs, are we supposed to do anything about it, or just ignore it


Jun 20 03:00:16 dnsmasq[19802]: Insecure DS reply received for com, could be bad domain configuration or lack of DNSSEC support from upstream DNS servers

Jun 20 03:01:23 dnsmasq[19802]: bad name at /opt/share/diversion/list/blockinglist line 12042

Run

sed -n ‘12042p’ /opt/share/diversion/list/blockinglist

and examine the hostnames or post the output here for review.

 

[consorts]

examine the hostnames or post the output here for review.

would simply uninstalling skynet and diversion
then reinstalling them - just fix the blockinglist?
i only have a few whitelist entries to type back in.

 

[dave14305]

would simply uninstalling skynet and diversion
then reinstalling them - just fix the blockinglist?
i only have a few whitelist entries to type back in.

No, since the blocking lists are external to them.

 

[consorts]

Line: 12042/26521 (using WinSCP's editor)

192.168.1.2 secre2018.000webhostapp.com secrecy4u.com secret-gk.info secret-hotes.blogspot.com secret-pos.blogspot.com secret.hiveon.net secret.whoami.la secret.xn--oogle-wmc.com secret.É¢oogle.com secretariaextension.unt.edu.ar secretaryhire.com secretbeta.bitcoin.com secretchatbyfb.tk secretcircle.co.za secretdroid.xyz secretenhancers.com secretgoldguide.com secrethotgames.com secretivecub.com secretlanguage.co

i assume the .co (instead of .com) domain is the problem?

here are all the unique lines that generated "bad" blockinglist errors since my last reboot;

Jun 16 05:39:28 dnsmasq[7425]: bad name at /opt/share/diversion/list/blockinglist line 2241
Jun 16 05:39:29 dnsmasq[7425]: bad name at /opt/share/diversion/list/blockinglist line 12027
Jun 16 05:39:31 dnsmasq[7425]: bad name at /opt/share/diversion/list/blockinglist line 19726

Jun 19 12:33:43 dnsmasq[1105]: bad name at /opt/share/diversion/list/blockinglist line 12026
Jun 19 12:33:49 dnsmasq[1105]: bad address at /opt/share/diversion/list/blockinglist line 26499

Jun 20 03:01:21 dnsmasq[19802]: bad name at /opt/share/diversion/list/blockinglist line 2243
Jun 20 03:01:23 dnsmasq[19802]: bad name at /opt/share/diversion/list/blockinglist line 12042
Jun 20 03:01:25 dnsmasq[19802]: bad name at /opt/share/diversion/list/blockinglist line 19746