Diversion Diversion - the Router Ad-Blocker

[snixel]

Probably been asked before, but I just noticed diversion is now installed in the location of entware. I still have a ext4 partition called 'ab-solution' from before the name change, but it seems this is no longer being used.
Can I safely remove this partition or is there still a way to move diversion to a seperate partition?

 

[thelonelycoder]

Probably been asked before, but I just noticed diversion is now installed in the location of entware. I still have a ext4 partition called 'ab-solution' from before the name change, but it seems this is no longer being used.
Can I safely remove this partition or is there still a way to move diversion to a seperate partition?

Diversion only installs into Entware to make use of the environment path.
The partition containing the entware folder is the only one used. If your ab-solution partition is empty or only contains unused folders/files then you can savely delete it.

 

[snixel]

Thanks decoderman!

 

[Torson]

Hi, I have an RT-AC68U happily running along with Diversion, Skynet and NTPMerlin, all 3, maintained up-to-date through amtm. Thank you for all the work that goes into that and great communication.

Over the past month or so, after a router reboot (I just put on Merlin's alpha 4) diversion comes up disabled, no jffs scripts run and the router is 'Disconnected'. All it takes is launching Diversion and enabling it (it comes up disabled) and after that everything seems to fall in place. However, I still need another reboot, since the scripts do not run.

Has anyone else seen this behaviour?

Thank you!

 

[Lynoad]

Hi, since update to v4.0.9 on my RT-AC87 running Merlin v384.10, all my dnsmasq queries are returning "dnsmasq[pid]: config error is REFUSED". The connections aren't blocked fortunately; routing appears to work. But I don't understand the context/meaning of the errmsg. I'm thinking it has to do with DNSSEC which I had enabled prior to the Diversion update, without this error.

 

[Marin]

I am trying to get the alternated blocking file set up for the first time. I followed the directions on diversion.ch. I turned on DNS Filter and set it to "No filtering", added my alternate blocking file IP xxx.xxx.xx.3 under Custom DNS 1 (which I set up when in Diversion), then manually added each device I wanted to use Custom 1, they could not connect to the internet. As soon as I turn off DNS Filter, they connect just fine. Any ideas what I am doing wrong? Thank you.

Was able to get this to work...Changed WAN DNS settings to "No" and entered my router's IP there (under DNS 1). Then followed alternate blocking file steps through DNS Filter and everything works as expected. Not sure if the Fast Switch in Skynet is related to that of Diversion but will post this in Skynet's thread.

 

[PC_Arcade]

I'm not sure if this has been answered before, but I have a question. I want to add all the domains listed here to a hosted whitelist : https://docs.google.com/document/d/...puMO6BvLk9qRGsIDLIIVgwbACXrlcruRr9aygRJmn/pub

I don't seem to be able to use that link, is there a way of manually adding them all except typing them all in one by one?

Thanks in advance for any help!

 

[thelonelycoder]

I'm not sure if this has been answered before, but I have a question. I want to add all the domains listed here to a hosted whitelist : https://docs.google.com/document/d/...puMO6BvLk9qRGsIDLIIVgwbACXrlcruRr9aygRJmn/pub

I don't seem to be able to use that link, is there a way of manually adding them all except typing them all in one by one?

Thanks in advance for any help!

The document you're linking to is in the web format. All Diversion sees is HTML and CSS code sprinkled with some domains.
Use pastebin to host it and select the raw link to paste as hosted list URL.

 

[PC_Arcade]

D'OH Of course, that's my stupid question of the day (so far!)

Thank you! and thanks for not treating that with the contempt it deserved!!

 

[Ro berto]

Is it normal to get this message when exiting the "follow dnsmasq.log"?

  ✖  Dnsmasq entry detected,
     redirecting hosts to 127.0.0.1
  !  Be aware that log file entries with '127.0.0.1'
     are from another script, not Diversion

 

[Lynoad]

Are these in the blocking file? I don't see anything in the winhelp hosts file that would do that, nor in any other common hosts file.
Can you post the list of hosts files you are using in b, 1. Change composition, 2. Customize hosts list

Here's my Customizable hosts list

 1: https://someonewhocares.org/hosts/zero/hosts
 2: http://winhelp2002.mvps.org/hosts.txt
 3: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext&useip=0.0.0.0
 4: https://hosts-file.net/ad_servers.txt
 5: https://hosts-file.net/grm.txt
 6: http://www.malwaredomainlist.com/hostslist/hosts.txt
 7: https://adaway.org/hosts.txt
 8: https://dbl.oisd.nl/

 

[dave14305]

Is it normal to get this message when exiting the "follow dnsmasq.log"?

  ✖  Dnsmasq entry detected,
     redirecting hosts to 127.0.0.1
  !  Be aware that log file entries with '127.0.0.1'
     are from another script, not Diversion

It is probably the result of having Stubby installed and dnsmasq logging the forwarding of requests to 127.0.0.1 (Stubby). I wouldn’t worry.

 

[thelonelycoder]

Here's my Customizable hosts list

 1: https://someonewhocares.org/hosts/zero/hosts
 2: http://winhelp2002.mvps.org/hosts.txt
 3: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext&useip=0.0.0.0
 4: https://hosts-file.net/ad_servers.txt
 5: https://hosts-file.net/grm.txt
 6: http://www.malwaredomainlist.com/hostslist/hosts.txt
 7: https://adaway.org/hosts.txt
 8: https://dbl.oisd.nl/

There you have them, right at the head of the dbl.oisd.nl hosts list, your *.info TLD entries.

 

[Lynoad]

Looks like the old dns.msftncsi.com probing is back, even if the setting is disabled in Administration/Network Monitoring.
This glitch has to be fixed by Asus.

You would see repeated entries in the dnsmasq.log file for:

query[A] dns.msftncsi.com from 127.0.0.1

This is nothing new, good old AB-Solution even had an option to disable this. Diversion does not and I hope I will not have to add it.

[ ... ]

Edit: Looks like this will do just fine:

nvram set dns_probe=0;nvram set dns_probe_content=;nvram commit

To reset to default use:

nvram set dns_probe=0;nvram set dns_probe_content='131.107.255.255 112.4.20.71 fd3e:4f5a:5b81::1';nvram commit

I've been using those settings already, but in the last few days I noticed a new spate of queries for dns.msftncsi.com coming from my Windows machine, apparently getting routed by dnsmasq to 131.107.255.255. I recall RMerlin opining it's a bad idea to blocklist it because of the role it plays in network congestion mitigation. but for now I'm blocking it in iptables anyhow.

 

[Lynoad]

There you have them, right at the head of the dbl.oisd.nl hosts list, your *.info TLD entries.

Okay so I guess I'll remove that list. Thanks.

 

[thelonelycoder]

[ ... ]

I've been using those settings already, but in the last few days I noticed a new spate of queries for dns.msftncsi.com coming from my Windows machine, apparently getting routed by dnsmasq to 131.107.255.255. I recall RMerlin opining it's a bad idea to blocklist it because of the role it plays in network congestion mitigation. but for now I'm blocking it in iptables anyhow.

Those are two different things you talk about. One is my solution to stop the router from querying that domain despite it being disabled in the UI. The other is the OS doing a lookup for services it uses. By blocking that lookup you get side effects such as Windows thinking it has no Internet access. I also believe that RMerlin is right with his opinion.

 

[Lynoad]

Those are two different things you talk about. One is my solution to stop the router from querying that domain despite it being disabled in the UI. The other is the OS doing a lookup for services it uses. By blocking that lookup you get side effects such as Windows thinking it has no Internet access. I also believe that RMerlin is right with his opinion.

Thank you for that very useful clarification! I'll unblock the host and IP, and keep the DNS check setting in the hope that an update ends up fixing it. I now get that it seems an Asus issue. Appreciate you and @RMerlin looking into it (I see perhaps coincidentally that he pushed out a beta today).

 

[thelonelycoder]

I've pushed a Diversion update, no version change
- Checks for jffs partition before installing Diversion
- Aborts installation if creation of Diversion directory structure fails
- Prevents and fixes stale 'ads count' and 'sort ash history' processes

Use u to update Diversion

 

[Swistheater]

^^^^^^^this is going to be awesome... Thank You

 

[thelonelycoder]

^^^^^^^this is going to be awesome... Thank You

Which of the three bug fixes you mean by that?