Diversion Diversion - the Router Ad-Blocker

[HairyA00]

I'll dig out my code that customises the dnsmasq instance that is spun up by Diversion. I imagine it's just a case of specifying a different upstream nameserver

DNS options per MAC address while still being forced through DNSMASQ would make me very happy, that's for sure. Really powerful feature if you have different aged users on your network. Even for YazFi... would be awesome to send guests upstream to something like OpenDNS while still going through DNSMASQ for ad-blocking.

For the whole home, I use the following blocklists:

https://hosts-file.net/emd.txt
https://hosts-file.net/exp.txt
https://hosts-file.net/hjk.txt
https://hosts-file.net/mmt.txt
https://hosts-file.net/psh.txt
http://sysctl.org/cameleon/hosts
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/gambling/hosts
https://hosts-file.net/ad_servers.txt
https://mirror1.malwaredomains.com/files/domains.hosts


For one subset of users, I bypass Diversion and go to one Pi-hole that uses the same blocklists plus customized OpenDNS. Trust me, if I could find an alternative to using OpenDNS, I would... a magic blocklist to filter out the following categories would be great. My guest network also goes upstream to this Pi-hole using YazFi.

Academic Fraud
Drugs
Gambling
P2P/File sharing
Proxy/Anonymizer
Adware
Web Spam
Tasteless


And for one single user on the network, I bypass Diversion and go to one Pi-hole that uses the same blocklists plus Cleanbrowsing Family (not over DoT, that would be another cool feature for DNSFilter):
https://cleanbrowsing.org/filters


What I'm getting at, I suppose, is I am managing three appliances (router plus pi-hole 1 and pi-hole 2). I could just say, "ehh, who cares if the ads aren't blocked for the handful of devices", but I really appreciate the benefit of Diversion or Pi-hole in all cases.

 

[Jack Yaz]

DNS options per MAC address while still being forced through DNSMASQ would make me very happy, that's for sure. Really powerful feature if you have different aged users on your network. Even for YazFi... would be awesome to send guests upstream to something like OpenDNS while still going through DNSMASQ for ad-blocking.

For the whole home, I use the following blocklists:

https://hosts-file.net/emd.txt
https://hosts-file.net/exp.txt
https://hosts-file.net/hjk.txt
https://hosts-file.net/mmt.txt
https://hosts-file.net/psh.txt
http://sysctl.org/cameleon/hosts
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/gambling/hosts
https://hosts-file.net/ad_servers.txt
https://mirror1.malwaredomains.com/files/domains.hosts


For one subset of users, I bypass Diversion and go to one Pi-hole that uses the same blocklists plus customized OpenDNS. Trust me, if I could find an alternative to using OpenDNS, I would... a magic blocklist to filter out the following categories would be great. My guest network also goes upstream to this Pi-hole using YazFi.

Academic Fraud
Drugs
Gambling
P2P/File sharing
Proxy/Anonymizer
Adware
Web Spam
Tasteless


And for one single user on the network, I bypass Diversion and go to one Pi-hole that uses the same blocklists plus Cleanbrowsing Family (not over DoT, that would be another cool feature for DNSFilter):
https://cleanbrowsing.org/filters


What I'm getting at, I suppose, is I am managing three appliances (router plus pi-hole 1 and pi-hole 2). I could just say, "ehh, who cares if the ads aren't blocked for the handful of devices", but I really appreciate the benefit of Diversion or Pi-hole in all cases.

So this is my dnsmasq.postconf: https://pastebin.com/Jy8AZcep
(mydomain is a substitute for my real domain)

You should be able to add:

sed -i '/servers-file/d' "/opt/share/diversion/.conf/alternate-bf.conf"
echo "server=208.67.222.222" >> "/opt/share/diversion/.conf/alternate-bf.conf"

prior to the

dnsmasq -C

call to use opendns directly (note: you miss out on stubby/dot if you use it)


In theory, you could craft your own dnsmasq.conf, spawn a new interface with:

ifconfig br0:alternate_bf IP

and launch it with dnsmasq -C

You wouldn't be able to manage it through Diversion though

 

[HairyA00]

So this is my dnsmasq.postconf: https://pastebin.com/Jy8AZcep
(mydomain is a substitute for my real domain)

You should be able to add:

sed -i '/servers-file/d' "/opt/share/diversion/.conf/alternate-bf.conf"
echo "server=208.67.222.222" >> "/opt/share/diversion/.conf/alternate-bf.conf"

prior to the

dnsmasq -C

call to use opendns directly (note: you miss out on stubby/dot if you use it)


In theory, you could craft your own dnsmasq.conf, spawn a new interface with:

ifconfig br0:alternate_bf IP

and launch it with dnsmasq -C

You wouldn't be able to manage it through Diversion though

Thanks @Jack Yaz, I am going to take a look in a bit. I'm surprised this seems like a feature many aren't interested in; also surprised that other products don't really do it (Pi-hole, Adguard Home, etc).

 

[eepohboy]

Hi,

Can someone provide a screenshot of the result of running "diversion help", please?

My router's CPU is maxing at 100% and I want to disable Diversion to eliminate it as a cause, and the only way I seem to be able to interact with the router is by sending it commands over ssh.

To be clear, I am unable to have a usual ssh session, where I log in and run commands. The furthest I have got was logging in, typing a command, and the session would hang.

However, I seem to be able to send it commands by running

ssh admin@router 'command -arg'

 

[Asad Ali]

Can someone provide a screenshot of the result of running "diversion help", please

 

[eepohboy]

View attachment 19065

Many thanks!

 

[Thanatos07]

Hi all i tried to look around google to see if anybody else has the same problem as me but i couldn't find any so i decided to post here. I have diversion standard installed in my RT-AC68U. Initially it worked fine however lately i noticed that i am no longer able to access websites on my windows 10 laptop connected via ethernet and also on another laptop connected via wifi. I am however able to access the internet through android and ios. Disabling diversion resolves the problem for my laptops. My routers ip is set as 192.168.1.254. while pixel is at 192.168.1.2. I have assigned an address to my devices through Lan DHCP on the web gui of the router. Anybody here have this problem before? Thanks

 

[thelonelycoder]

Hi all i tried to look around google to see if anybody else has the same problem as me but i couldn't find any so i decided to post here. I have diversion standard installed in my RT-AC68U. Initially it worked fine however lately i noticed that i am no longer able to access websites on my windows 10 laptop connected via ethernet and also on another laptop connected via wifi. I am however able to access the internet through android and ios. Disabling diversion resolves the problem for my laptops. My routers ip is set as 192.168.1.254. while pixel is at 192.168.1.2. I have assigned an address to my devices through Lan DHCP on the web gui of the router. Anybody here have this problem before? Thanks

What's on 192.168.1.1? Is the routers IP advertised as the DNS server and Gateway to clients?

 

[Thanatos07]

What's on 192.168.1.1? Is the routers IP advertised as the DNS server and Gateway to clients?

Thanks for the reply. 192.168.1.1 is the modem/router from my ISP. Yes the router(192.168.1.254) is set as the default gateway and DNS server to my devices by default when i checked. BTW this seems to happen sporadically. Disabling and enabling diversion seems to fix it temporarily though. Although not really an ideal solution but since the problem doesn't really happen at a set time interval, its not really a big issue.

 

[Mistogan]

Hmm, what are doing ds option at diversion menu? Use a custom settings dnsmasq or not?

 

[Thanatos07]

Hmm, what are doing ds option at diversion menu? Use a custom settings dnsmasq or not?

I dont understand. Where can i find that option? I checked the log and noted a lot of dnsmasq**** config error etc..

 

[Thanatos07]

Dnsmasq config error is REFUSED.. I see a lot of this when internet is not working.

 

[Mistogan]

I dont understand. Where can i find that option? I checked the log and noted a lot of dnsmasq**** config error etc..

Diversion — > put o for more options.

 

[Thanatos07]

hmmm.. i looked at the menus and saw an option to create a swapfile. I created one the restart diversion. after which the problem seems to be fixed. I havent had the problem afterwards. Im sure it was not the restart since i did it several times before this and it didnt work. Could it have been a memory problem?
i tried to download my logfile and it was like 500mb sized...

 

[TexasDave]

I use the "Shopping" Tab in Google on occasion. How do I add it to the whitelist? Not sure of the URL to use...Is it "googleadservices.com"? What if any issues would happen if I leave it in the whitelist? Thanks!

[ANSWER: Added googleleadservices.com and that works. Still curious what downsides there are for leaving this in the whitelist]

 

[BeHappy]

I have a question if Diversion standard is working in the following situation.

My provider doesn't allow that I use my Asus AC68U as my primary router. If I want to use it I have to connect it to the router of my provider and create a DMZ. Do I need to do special things to make Diversion work or doesn't it matter that I have go through the DMZ of the main router?
Thanks!

 

[martinr]

I use the "Shopping" Tab in Google on occasion. How do I add it to the whitelist? Not sure of the URL to use...Is it "googleadservices.com"? What if any issues would happen if I leave it in the whitelist? THanks!

Have a look here:


https://github.com/Adamm00/IPSet_ASUS/wiki

https://www.snbforums.com/threads/a-few-concerns.54278/#post-458432

 

[jrmwvu04]

@thelonelycoder I posted in the pixelserv thread but things there are sort of dead lately. Just a heads up that there will be an issue for all the new macOS 10.15 and iOS 13 users next month without a change to pixelserv code.

 

[Jack Yaz]

@thelonelycoder I posted in the pixelserv thread but things there are sort of dead lately. Just a heads up that there will be an issue for all the new macOS 10.15 and iOS 13 users next month without a change to pixelserv code.

That's @kvic 's problem to solve

 

[jrmwvu04]

That's @kvic 's problem to solve

Be that as it may, there are no indications he's still around to solve it. I have not heard from him on any of the various usual channels for months now. So unless something changes, pixelserv will not work as it has in the past for those systems for anyone who doesn't acquire a patched binary.