Diversion Diversion - the Router Ad-Blocker

[elorimer]

No, still does not work.

According to the client, the certificate is not correctly signed by the trusted CA. ???

Do I need to export to another OVPN file after installing pixelserv?

The only issue with openvpn and diversion/pixelserv I can recall is an IP/port conflict, which happens when people specify pixelserv's default port of 443 as the openvpn port. I doubt you have pixelserv listening on 1194. Absent that, I think there must be a problem with your ovpn setup. Is your server running?

 

[s3030150]

To correct this glitch, I have uploaded a Diversion hot-fix. Use 1233 in the Diversion UI to download all files, then test again if your local clienst show as blocked.
They should not.

perfect, not it does not block anything local ;-) thank you

 

[Sbfnu]

No, you don't need to.
What DDNS Server are you using in WAN / DDNS?

DDNS provider is dnsomatic.

OVPN client log states that certificate is invalid. Thus the connection is refused...

How to generate a new OVPN certificate?

 

[Sbfnu]

The only issue with openvpn and diversion/pixelserv I can recall is an IP/port conflict, which happens when people specify pixelserv's default port of 443 as the openvpn port. I doubt you have pixelserv listening on 1194. Absent that, I think there must be a problem with your ovpn setup. Is your server running?

Pixelserv is listering on 443.

How to trace down the problem and get my VPN running again?

 

[58chev]

How to generate a new OVPN certificate?

On the VPN Server - OpenVPN page, you should see Export OpenVPN configuration file Button.
Click on it and a new client file will be created.

 

[Sbfnu]

On the VPN Server - OpenVPN page, you should see Export OpenVPN configuration file Button.
Click on it and a new client file will be created.

And that file contains then the new certificate?

 

[thelonelycoder]

ThanX @thelonelycoder that fixed it.
Wonder why it did not take the IP when going through setup?

Did you enter it when it asked for it during the install and Diversion said that it's a valid IP address?
Could you post the install log in sf?

 

[thelonelycoder]

And that file contains then the new certificate?

Its the configuration file you import into the clients VPN Client.

 

[elorimer]

How to trace down the problem and get my VPN running again?

If you go to the VPN page, does it show that the server is running? If it is, then it might be on the client side. If not, then errors will show up in syslog.

 

[Sbfnu]

Its the configuration file you import into the clients VPN Client.

Indeed, that OVPN config file contains the certificate. Exported a new OVPN file, changed the DDNS entry therein, imported that into my client - and my VPN connection was running again Thank you!

But, since I am new to Diversion:
1. If I update the firmware of my Asus router, do I then have to reinstall Diversion and/or pixelserv?
2. Is it configurable what blocking files Diversion is using?
3. How to unblock a domain that Diversion is blocking?

 

[elorimer]

Indeed, that OVPN config file contains the certificate. Exported a new OVPN file, changed the DDNS entry therein, imported that into my client - and my VPN connection was running again Thank you!

But, since I am new to Diversion:
1. If I update the firmware of my Asus router, do I then have to reinstall Diversion and/or pixelserv?
2. Is it configurable what blocking files Diversion is using?
3. How to unblock a domain that Diversion is blocking?

1. No.
2. Yes
3. You can whitelist domains.
There is extensive help at the website: diversion.ch

 

[58chev]

Did you enter it when it asked for it during the install and Diversion said that it's a valid IP address?
Could you post the install log in sf?

I am pretty sure I entered the IP. As I had to reset my repeater router's IP off of .2

____________________________________________________

 /opt/share/diversion/log/Diversion-re-install.log has this content:

 START FILE, --- lines are not part of file
 ---------------------------------------------------
 Diversion re-install log Sun, 14 Oct 2018 21:26:19 -0400
 ____________________________________________________

   i  Checking router
   ✔  Asuswrt-Merlin
   ✔  dos2unix
   ✔  Netstat
   ✔  Compatible device(s)
   ✔  Internet
 ____________________________________________________

   ✖   DNS-based Filtering is enabled on this router
  This may or may not work with Diversion Disable it after installation if ad-blocking
  does not work and see if that helps.

   !  Press [Enter] to acknowledge
   i  Router check complete

   ✔  All clear to re-install Diversion 4.0.3

   i  Probing for Entware
   ✔  Entware is already installed

   i  Checking Diversion Standard files
   ✔  functions.div
   ✔  install.div
   ✔  post-conf.div
   ✔  post-mount.div
   ✔  rc.func.div
   ✔  rotate-logs.div
   ✔  S80pixelserv-tls
   ✔  theme.div
   ✔  update-bf.div
   ✔  write-config.div

   i  Checking white and blacklists
   ✔  Whitelist
   ✔  Blacklist
   ✔  Wildcard blacklist

   i  Probing for pixelserv-tls
   ✔  pixelserv-tls is already installed
   ✔  pixelserv-tls certificates found

   i  Checking /jffs/scripts entries
   ✔  dnsmasq.postconf
   ✔  post-mount
   ✔  services-stop

   i  Initializing Diversion

   ✔  Blocking file

   i  Checking cron jobs
   ✔  Blocking file update
   ✔  Rotate logs
   ✔  Ads counter

   i  Checking dnsmasq.conf entries
   ✔  Additional hosts
   ✔  Log facility

   ✔  Diversion Standard v4.0.3 re-install complete
 ---------------------------------------------------
 END FILE

  !  Press [Enter] to return

 

[thelonelycoder]

I am pretty sure I entered the IP. As I had to reset my repeater router's IP off of .2

____________________________________________________

 /opt/share/diversion/log/Diversion-re-install.log has this content:

 START FILE, --- lines are not part of file
 ---------------------------------------------------
 Diversion re-install log Sun, 14 Oct 2018 21:26:19 -0400
 ____________________________________________________

   i  Checking router
   ✔  Asuswrt-Merlin
   ✔  dos2unix
   ✔  Netstat
   ✔  Compatible device(s)
   ✔  Internet
 ____________________________________________________

   ✖   DNS-based Filtering is enabled on this router
  This may or may not work with Diversion Disable it after installation if ad-blocking
  does not work and see if that helps.

   !  Press [Enter] to acknowledge
   i  Router check complete

   ✔  All clear to re-install Diversion 4.0.3

   i  Probing for Entware
   ✔  Entware is already installed

   i  Checking Diversion Standard files
   ✔  functions.div
   ✔  install.div
   ✔  post-conf.div
   ✔  post-mount.div
   ✔  rc.func.div
   ✔  rotate-logs.div
   ✔  S80pixelserv-tls
   ✔  theme.div
   ✔  update-bf.div
   ✔  write-config.div

   i  Checking white and blacklists
   ✔  Whitelist
   ✔  Blacklist
   ✔  Wildcard blacklist

   i  Probing for pixelserv-tls
   ✔  pixelserv-tls is already installed
   ✔  pixelserv-tls certificates found

   i  Checking /jffs/scripts entries
   ✔  dnsmasq.postconf
   ✔  post-mount
   ✔  services-stop

   i  Initializing Diversion

   ✔  Blocking file

   i  Checking cron jobs
   ✔  Blocking file update
   ✔  Rotate logs
   ✔  Ads counter

   i  Checking dnsmasq.conf entries
   ✔  Additional hosts
   ✔  Log facility

   ✔  Diversion Standard v4.0.3 re-install complete
 ---------------------------------------------------
 END FILE

  !  Press [Enter] to return

OK, that helped. Additional tests will be included in Diversion 4.0.4 when re-installing or updating Diversion.

 

[Sbfnu]

1. No.
2. Yes
3. You can whitelist domains.
There is extensive help at the website: diversion.ch

Ohh, I thought the other way around - the website diversion.ch has basic information, while this forum enables users to get answers not adressed there

Actually, you are wrong: Often I find the old website ab-solution.info more informative than the newer diversion website, e.g for the installation process.

Also: How do I configure what blocking files Diversion is using?
https://diversion.ch/diversion/use/blocking-file-hosts-files.html just shows what hosts file Diversion is using but not how to replace that with your own blocking files.

So far, so good ;-) ?

 

[Sbfnu]

When the wife or someone else wants to visit THAT website and do stuff. And things don't work quite like they should on that site and you'd have to whitelist a lot or use a smaller blocking file. That's where fs comes to your help in Diversion, it fast switches between two blocking files. I made a deal with @Adamm andhe named his function wm - wife mode.
My part of the deal was auto-adding www and non-www domains when whitelisting.

How does "auto-switch Skynet wife mode when fs is enabled (in b, 1)" work?

 

[thelonelycoder]

Ohh, I thought the other way around - the website diversion.ch has basic information, while this forum enables users to get answers not adressed there

Actually, you are wrong: Often I find the old website ab-solution.info more informative than the newer diversion website, e.g for the installation process.

Also: How do I configure what blocking files Diversion is using?
https://diversion.ch/diversion/use/blocking-file-hosts-files.html just shows what hosts file Diversion is using but not how to replace that with your own blocking files.

So far, so good ;-) ?

I'm the (l)only coder for my projects. Adding content to a website takes time. Be patient.

And it's so simple to find out yourself. I suggest to venture into the b function and read what the options say.

 

[thelonelycoder]

How does "auto-switch Skynet wife mode when fs is enabled (in b, 1)" work?

When fs is enabled and Skynet is installed, you'll find the option to turn this on in b in a submenu.
Once enabled, you switch the blocking files with fs in the UI or simply with diversion fs.
It'll tell you what it did to Skynet.

You'll have to configure Skynet wife mode separately if Diversion is set to switch it.

 

[Sbfnu]

I'm the (l)only coder for my projects. Adding content to a website takes time. Be patient.

And it's so simple to find out yourself. I suggest to venture into the b function and read what the options say.

And I love your project! It is awesome!

Most of the information is available either at the ab-solution or diversion website. But sometimes, if you can't find it there, I would prefer to ask - here then. Am I wrong with that approach?

 

[Sbfnu]

When fs is enabled and Skynet is installed, you'll find the option to turn this on in b in a submenu.
Once enabled, you switch the blocking files with fs in the UI or simply with diversion fs.
It'll tell you what it did to Skynet.

You'll have to configure Skynet wife mode separately if Diversion is set to switch it.

So if I get it right, wife mode in Diversion only works if Skynet is installed and configured for wife mode?

 

[Adamm]

So if I get it right, wife mode in Diversion only works if Skynet is installed and configured for wife mode?

No, this feature is basically “toggle Skynets wife mode at the same time as ours”.

The features can be used independently between scripts or for convenience toggled at the same time. Kind of a two birds with one stone approach.