Diversion Diversion - the Router Ad-Blocker

[XIII]

Do you have more than one USB device plugged into your router?

Have you given your USB device(s) volume names rather than using the default (e.g. sda1)?

A single USB flash drive which is called "usb" instead of "sda1".

Did it offer you to install from a previous install?

The first time it did, but then I deleted the backup (I once manually made) in /jffs, so the second time it did not.

The second time might have been after my router reboot, but I can't remember whether I rebooted just before the first occurrence as well.

 

[jrmwvu04]

The second time might have been after my router reboot, but I can't remember whether I rebooted just before the first occurrence as well.

How are you initiating these reboots

 

[L&LD]

@XIII do you also 'Format the JFFS partition on next boot' and then proceed to reboot the router 3 times in the next 15 to 20 minutes while waiting 5 to 10 minutes before rebooting (via the GUI), before re-installing amtm, formatting the USB drive, setting up a swap file and then installing Diversion?

 

[XIII]

@XIII do you also 'Format the JFFS partition on next boot' and then proceed to reboot the router 3 times in the next 15 to 20 minutes while waiting 5 to 10 minutes before rebooting (via the GUI), before re-installing amtm, formatting the USB drive, setting up a swap file and then installing Diversion?

No. I did a clean install a couple of days before Diversion got uninstalled the first time.

Both amtm and SkyNet were still installed after the reboot, so I doubt /jffs has been formatted during that boot.

 

[XIII]

How are you initiating these reboots

I’m not sure...

I think I logged in using ssh and typed reboot.

 

[heysoundude]

Use Wireguard on your phone. The downside is that you can't run it on Merlin fw, but if you can run WG on a server or Rpi, etc, than just set configure, download the official app (I only use Android) and usr it always when you are out of hine wifi. It drains literarry a minimum battery and blazing fast. Previously I used OpenVPN, but it was way slower and drained way more the battery. WG is amazing. And you get adblocking, DoT, and encryption too on phone. Yes, maybe it is not ready for corporate use, but until now I didn't see any serious security threat identified. Especially not if you use it for everyday phone use.

Um, you might want to go and have a look at this thread:
[Experimental] WireGuard for RT-AC86U/AX88U
https://r.tapatalk.com/shareLink/to...86U-AX88U.46164/&share_type=t&link_source=app

You can have a client connection on your router to a VPN provider that’s got WireGuard servers, a server connection for your router to connect with clients/devices on your network, and I believe there are some who are doing both. Alongside of Merlin, diversion, skynet, pixelserv, Jack Yaz’s scripts, Stubby/DoT, FreshJR’s QoS... Zippitydoodah.

The guy who invented Linux made a case for WireGuard to be included in an impending kernel release of Linux, so it is gaining acceptance and use or will be soon. That means in a decade or less, Asus might be using that kernel to run the hardware they make/release at that time. Here’s an opportunity for you to jump out a wee bit ahead of the curve and test the alpha if you have current hardware.


Sent from my iPhone using Tapatalk

 

[Sonyrolfy]

Diversion to good or whitelisting not working?

A Dutch news site: www.telegraaf.nl I have it whitelisted in Diversion standard, but I do not receive a cookie or see ads when visiting the site on all devices. I whitelisted the site in diversion and Skynet. I have no ad blockers installed. Off course, I can enable DNS filter with a custom dns for some devices but that defeats the purpose. The site uses a lot of tracking and whatsoever advertising stuff. Did I forgot something?

 

[thelonelycoder]

Diversion to good or whitelisting not working?

A Dutch news site: www.telegraaf.nl I have it whitelisted in Diversion standard, but I do not receive a cookie or see ads when visiting the site on all devices. I whitelisted the site in diversion and Skynet. I have no ad blockers installed. Off course, I can enable DNS filter with a custom dns for some devices but that defeats the purpose. The site uses a lot of tracking and whatsoever advertising stuff. Did I forgot something?

Diversion works by blocking ad domains. www.telegraaf.nl is not a blocked domain, whitelisting it does nothing. You'll have to find the domains that are blocked with f.
From where I am, these domains are blocked from that website:

8522212.fls.doubleclick.net
adservice.google.com
aswpsdkus.com
cdn.cxense.com
cdn.onthe.io
code3.adtlgc.com
gstaticadssl.l.google.com
sb.scorecardresearch.com
securepubads.g.doubleclick.net
static.hotjar.com
stats.g.doubleclick.net
widgets.getsitecontrol.com

Note that Diversion works globally and not on a per site basis. If you whitelist one of the above domains, it is whitelisted for your entire LAN behind the router.

 

[Sonyrolfy]

Diversion works by blocking ad domains. www.telegraaf.nl is not a blocked domain, whitelisting it does nothing. You'll have to find the domains that are blocked with f.
From where I am, these domains are blocked from that website:

8522212.fls.doubleclick.net
adservice.google.com
aswpsdkus.com
cdn.cxense.com
cdn.onthe.io
code3.adtlgc.com
gstaticadssl.l.google.com
sb.scorecardresearch.com
securepubads.g.doubleclick.net
static.hotjar.com
stats.g.doubleclick.net
widgets.getsitecontrol.com

Note that Diversion works globally and not on a per site basis. If you whitelist one of the above domains, it is whitelisted for your entire LAN behind the router.

Clearly, I wasn’t aware to simply add a website to the whitelist. By the look at the extraction of websites you show are used by other websites as well. So now, I have to think about the idea of installing this at my parents’ they definitely want to see the vids on their devices and tablets. Thanks for your quick reply!!

 

[thelonelycoder]

Clearly, I wasn’t aware to simply add a website to the whitelist. By the look at the extraction of websites you show are used by other websites as well. So now, I have to think about the idea of installing this at my parents’ they definitely want to see the vids on their devices and tablets. Thanks for your quick reply!!

Use a very small blocking list, this would do for them and likely not block wanted content at all.
Start with https://pgl.yoyo.org/adservers/serv...&showintro=0&mimetype=plaintext&useip=0.0.0.0

 

[Sonyrolfy]

Use a very small blocking list, this would do for them and likely not block wanted content at all.
Start with https://pgl.yoyo.org/adservers/serv...&showintro=0&mimetype=plaintext&useip=0.0.0.0

Thats great! i just have to figure out how i import this list against the standard list, never done that.

I got it, 1. Change composition Standard to 1: small.


Thanks!

 

[thelonelycoder]

Thats great! i just have to figure out how i import this list against the standard list, never done that.

Thanks!

b, 1, 2

 

[Sonyrolfy]

b, 1, 2

!

 

[Sonyrolfy]

b, 1, 2

Working like a charm!

 

[Spiker]

Hi,

I have an Asus RT-N66U router with "Fresh Tomato" firmware
I run the pixelserv-tls - 2.0.1-1 with an old entware version.
Works fine but unfortunately not with Apple devices.

I found a new version somewhere but it seems without TLS 1.3
This version seems not to be the current version of kvic-z.

root@spiker:/opt/bin# pixelserv-tls -help
pixelserv-tls 2.3.1 (compiled: Dec 25 2019 14:40:55 flags: no_tls1_3)

On Github I can't find a mipsel Version for Asus.
https://github.com/kvic-z/pixelserv-tls/releases/tag/v2.3.1

Is the 2.3.1 already available for Asus Merlin (Diversion) and
how do I get the bin without setup Merlin Firmware?

Best Regards

 

[thelonelycoder]

Hi,

I have an Asus RT-N66U router with "Fresh Tomato" firmware
I run the pixelserv-tls - 2.0.1-1 with an old entware version.
Works fine but unfortunately not with Apple devices.

I found a new version somewhere but it seems without TLS 1.3
This version seems not to be the current version of kvic-z.

root@spiker:/opt/bin# pixelserv-tls -help
pixelserv-tls 2.3.1 (compiled: Dec 25 2019 14:40:55 flags: no_tls1_3)

On Github I can't find a mipsel Version for Asus.
https://github.com/kvic-z/pixelserv-tls/releases/tag/v2.3.1

Is the 2.3.1 already available for Asus Merlin (Diversion) and
how do I get the bin without setup Merlin Firmware?

Best Regards

The original author did not provide MIPSE binaries, use the unofficial official version, I tested them all.
See which one of the two works, likely the mipselsf.ipk.
https://github.com/jackyaz/pixelserv-tls/releases

 

[jrmwvu04]

I’m not sure...

I think I logged in using ssh and typed reboot.

I do that too. I can’t say for sure but it appears to me that rebooting that way doesn’t wait for the disk to unmount cleanly sometimes and every now and again I get file system errors. It’s a decent and fairly new stick, so it’s not that. I’ve never seen it happen when I reboot via GUI but I’m too lazy to do that 95% of the time so it’s hard to say.

 

[Asad Ali]

I do that too. I can’t say for sure but it appears to me that rebooting that way doesn’t wait for the disk to unmount cleanly sometimes and every now and again I get file system errors. It’s a decent and fairly new stick, so it’s not that. I’ve never seen it happen when I reboot via GUI but I’m too lazy to do that 95% of the time so it’s hard to say.

Just use "service start_reboot" it uses the same reboot algorithm which the Web UI follows.

 

[thelonelycoder]

Just use "service start_reboot" it uses the same reboot algorithm which the Web UI follows.

That's

service reboot

 

[Asad Ali]

That's

service reboot

I'll need to check the source code to see the exact difference between the two or if they follow the same algorithm but I've been using "service start_reboot" from a long time without any USB related issues.