Diversion Diversion - the Router Ad-Blocker

[jrmwvu04]

That's

service reboot

I'll need to check the source code to see the exact difference between the two or if they follow the same algorithm but I've been using "service start_reboot" from a long time without any USB related issues.

At the risk of derailing this thread, is there any place to get a good overview of what all “service” can manipulate and how? I remember wanting to know that and not finding it, long ago.

 

[a5m]

So I'm running into the 'googleadservices' being blocked and leaving a blank page situation when clicking an ad link with my Dad's iPhone. I've done some research and this is normal as Diversion is doing its job, but staying on a blank page is an issue. I tried replicating this with my Windows 10 PC and the same thing happened, but not on my Pixel 2 XL. I'm sure being a Google phone has something to do with it.

Short of either whitelisting googleadservices or disabling Diversion altogether, is there another option? If it was just me on the network I'd deal with it, but I want it as seamless as possible for my parents and family.

 

[jadog]

So I'm having additional issues. When attempting to install Diversion, it is showing 23+ hours to install. Obviously it is failing to download the required files. I'm able to ping www.google.com from putty, so any thoughts as to why this might be happening?

Update - so now it finally moved on after showing a Read error.

Maybe that's the issue? I purchased 4 usb drives together and am now wondering if maybe one of them has a bad block?? Has anybody else experienced this?

 

[PeterR]

You have a problem connecting to bin.entware.net can you access the site from a web browser? bin.entware.net is accessible for me.

 

[Spiker]

@thelonelycoder
thanks for the info.
pixelserv-tls_2.3.1-1_mipselsf.ipk works

I have now recreated the certificate according to the wiki:
https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate

I only use the pgl.yoyo.org list right now.
It works quite well so far. Also with iPad. I tried a few addresses from the list and certificates are generated. The call under https is error-free.

But subdomains of doubleclick.net are problematic (Validated from Google Trust Services):

https://adclick.g.doubleclick.net
https://pubads.g.doubleclick.net

(Tested on https://www.heise.de/)

Advertising continues to be displayed here.
Whereby https://doubleclick.net and https://g.doubleclick.net are working.

Is the Pixelserv-tls here tricked by Google, is this known ?

 

[jadog]

You have a problem connecting to bin.entware.net can you access the site from a web browser? bin.entware.net is accessible for me.

I can reach bin.entware.net without a problem in a browser. I can also ping it from within Putty. The install eventually finished although I'm not sure what the "Sementation fault" means. Here are the screenshots from the install.

 

[RMerlin]

At the risk of derailing this thread, is there any place to get a good overview of what all “service” can manipulate and how? I remember wanting to know that and not finding it, long ago.

No, because these are primarily intended for internal use by the firmware, not by end-users. They may change at any time, so the only resource is the firmware source code itself.

 

[thelonelycoder]

I can reach bin.entware.net without a problem in a browser. I can also ping it from within Putty. The install eventually finished although I'm not sure what the "Sementation fault" means. Here are the screenshots from the install.

Have you created a swap file before the Diversion install?
In any case, wipe the /jffs/ partition (in the WebUI) and reformat the usb device (with amtm), this does not look good.
Then start again by first creating a swap file, size does not really matter but as a guideline create the same size as the routers RAM, visible on the Network Map page.

 

[thelonelycoder]

@thelonelycoder
thanks for the info.
pixelserv-tls_2.3.1-1_mipselsf.ipk works

I have now recreated the certificate according to the wiki:
https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate

I only use the pgl.yoyo.org list right now.
It works quite well so far. Also with iPad. I tried a few addresses from the list and certificates are generated. The call under https is error-free.

But subdomains of doubleclick.net are problematic (Validated from Google Trust Services):

https://adclick.g.doubleclick.net
https://pubads.g.doubleclick.net

(Tested on https://www.heise.de/)

Advertising continues to be displayed here.
Whereby https://doubleclick.net and https://g.doubleclick.net are working.

Is the Pixelserv-tls here tricked by Google, is this known ?

That CA certificate generation is for the time before Apple introduced elevated requirements.
Use this to generate a valid CA certificate. Before you do that, delete all certs in /opt/var/cache/pixelserv/.
Then run this, adapting it to the outdated wiki page:

openssl genrsa -out ca.key 2048
openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"

Diversion uses an openssl config file for the defaults. You can curl it from my server with:

curl -Os https://diversion.ch/diversion/4.1/file/div-openssl.cnf

And then reference the location of it with something like this:

openssl genrsa -out ca.key 2048
openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA" -config /tmp/div-openssl.cnf

Then restart pixelserv-tls for it to use the new ca.crt.

 

[Skeptical.me]

After updating Merlin I've experienced some issue with AMTM/Diversion.

This issue has persisted even after a reboot, or re-flash.

The USB is plugged in Diversion seems to be working when I check if ads are being blocked. But when I type

$ amtm

or

$ diversion

into the terminal I get the following output

admin@RT-AX88U-E390:/tmp/home/root# amtm
-sh: amtm: not found

I'm just looking for some guidance for what to do.

Thanks guys.

 

[L&LD]

Does typing the below work?

/jffs/scripts/amtm

 

[thelonelycoder]

After updating Merlin I've experienced some issue with AMTM/Diversion.

This issue has persisted even after a reboot, or re-flash.

The USB is plugged in Diversion seems to be working when I check if ads are being blocked. But when I type

$ amtm

or

$ diversion

into the terminal I get the following output

admin@RT-AX88U-E390:/tmp/home/root# amtm
-sh: amtm: not found

I'm just looking for some guidance for what to do.

Thanks guys.

Your /opt/ partition likely is not mounted. Run the Diversion install command again to see what it finds.

 

[a5m]

@thelonelycoder
Before I give up on this I just want to confirm that getting the blank googleadservices.com page when clicking ad links after doing a Google search is normal Diversion behavior? Seems only my Pixel isn't affected.

 

[Skeptical.me]

Does typing the below work?

/jffs/scripts/amtm

This is what I see .... note that number 1 Diversion is not showing ...

 

[Skeptical.me]

Your /opt/ partition likely is not mounted. Run the Diversion install command again to see what it finds.

I tried that, here is the result

 This is Diversion 4.1.8    coded by thelonelycoder
____________________________________________________

 Welcome to Diversion - the Router Ad-Blocker
____________________________________________________

 [Error]  has not passed the device test.

 Install Diversion now? [1=Yes e=Exit]

 

[adampk17]

@thelonelycoder
Before I give up on this I just want to confirm that getting the blank googleadservices.com page when clicking ad links after doing a Google search is normal Diversion behavior? Seems only my Pixel isn't affected.

This is a question I’m interested in hearing some input in to as well.

 

[Marin]

I tried that, here is the result

 This is Diversion 4.1.8    coded by thelonelycoder
____________________________________________________

 Welcome to Diversion - the Router Ad-Blocker
____________________________________________________

 [Error]  has not passed the device test.

 Install Diversion now? [1=Yes e=Exit]

This has happened to me before. I don’t remember the exact steps I followed to fix it as it has been a while. I do remember that it took me a while to figure it out on my own l, though.

I hate to suggest these to you as I see that you have several scripts installed but you can try the following options:

Option 1:

1. Unmount your USB drive from webui.

2. Reboot router

3. Insert USB and then install AMTM.

4. Reformat your USB (using the fd option) and then install the swap file first.

5. Now attempt to install Diversion and other scripts.

6. If everything works well by now, then simply enter:

/jffs/scripts/amtm

This will help bring up the AMTM menu the next time by simply typing: amtm.



Option 2:

1. Unmount your USB drive from webui.

2. Under the Administrative tab (System) of the webui, select to “reformat jffs...” when the router reboots. Note that this will impact other router and VPN settings, among others so make sure that you take care of all of these settings when the router comes up after a reboot before you proceed.

3. Reboot router. Make sure to allow the router some time between each step so it stabilizes.

4. Insert USB and then install AMTM.

5. Reformat your USB (using the fd option) and then install the swap file first.

6. Now attempt to install Diversion and other scripts.

7. After you are done enter:

/jffs/scripts/amtm


Hope this helps.

Marin




Sent from my iPhone using Tapatalk

 

[Skeptical.me]

This has happened to me before. I don’t remember the exact steps I followed to fix it as it has been a while. I do remember that it took me a while to figure it out on my own l, though.

I hate to suggest these to you as I see that you have several scripts installed but you can try the following options:

Option 1:

1. Unmount your USB drive from webui.

2. Reboot router

3. Insert USB and then install AMTM.

4. Reformat your USB (using the fd option) and then install the swap file first.

5. Now attempt to install Diversion and other scripts.

6. If everything works well by now, then simply enter:

/jffs/scripts/amtm

This will help bring up the AMTM menu the next time by simply typing: amtm.



Option 2:

1. Unmount your USB drive from webui.

2. Under the Administrative tab (System) of the webui, select to “reformat jffs...” when the router reboots. Note that this will impact other router and VPN settings, among others so make sure that you take care of all of these settings when the router comes up after a reboot before you proceed.

3. Reboot router. Make sure to allow the router some time between each step so it stabilizes.

4. Insert USB and then install AMTM.

5. Reformat your USB (using the fd option) and then install the swap file first.

6. Now attempt to install Diversion and other scripts.

7. After you are done enter:

/jffs/scripts/amtm


Hope this helps.

Marin




Sent from my iPhone using Tapatalk

Thanks for this. Unfortunately even after I formatted the USB drive and after rebooting I get the following error trying to install Diversion:

mkdir: can't create directory '/tmp/mnt/AMTM/rw_test': Read-only file system
  ✖   has not passed the device test.
     Check if device is read and writable

My command line skills are lacking as I haven't been using terminal much at all. Sorry about this. And thanks for the help.

 

[Marin]

Thanks for this. Unfortunately even after I formatted the USB drive and after rebooting I get the following error trying to install Diversion:

mkdir: can't create directory '/tmp/mnt/AMTM/rw_test': Read-only file system
  [emoji808]   has not passed the device test.
     Check if device is read and writable

My command line skills are lacking as I haven't been using terminal much at all. Sorry about this. And thanks for the help.

Makes me wonder whether your USB drive is bad. May want to consider trying a new one.


Sent from my iPhone using Tapatalk

 

[^Tripper^]

Thanks for this. Unfortunately even after I formatted the USB drive and after rebooting I get the following error trying to install Diversion:

mkdir: can't create directory '/tmp/mnt/AMTM/rw_test': Read-only file system
  ✖   has not passed the device test.
     Check if device is read and writable

My command line skills are lacking as I haven't been using terminal much at all. Sorry about this. And thanks for the help.

Seems like a dying USB. Have you tried with another?