Diversion Diversion - the Router Ad-Blocker

[Xsvrg]

I think that Xsvrg is saying that he had to do that because be has hardcoded the DNS servers for his network adapter settings (under the Windows/TCP properties tab, and likely set a fixed/static address), rather than relying on DHCP from the router. This works too, but wouldn't be necessary if using DHCP from the router. To each his own...

How come it wasn't working for me? DHCP seems to be enabled.
I didn't do it intentionally, and not trying to argue that it's better. I'm new to this lol.

 

[jsbeddow]

How come it wasn't working for me? DHCP seems to be enabled.
I didn't do it intentionally, and not trying to argue that it's better. I'm new to this lol.

Hmm...it might have just been due to the browser (and/or Windows) still using cached entries, still resolving the ad sites. There are various command line ways to fix this, but one of the easiest (but longest) is to simply reboot the computer between tests.

 

[L&LD]

@Xsvrg what router do you have? What firmware version are you running?

The proper way to get the devices to use the router's assigned DNS is by turning on the LAN, DNSFilter and setting the global filter mode to Router.

Assuming you did the rest of the steps correctly and you are not using Firefox as your browser, you should see no more ads unless they are served from the websites (or inline youtube advertising) that serve them.

 

[Xsvrg]

@jsbeddow @L&LD
I usually use ublock so I disabled it before testing. Basically I tried those websites in Edge, saw ads. Went to the Diversion FAQ, manually changed my ipv4 dns to the router address, refreshed Edge and the ads were gone.

I'm using the latest merlin beta on asus ac68u

The proper way to get the devices to use the router's assigned DNS is by turning on the LAN, DNSFilter and setting the global filter mode to Router.

So which DNS servers do I use in that page?

 

[L&LD]

As already stated, set the Global Filter Mode to Router.

 

[Xsvrg]

As already stated, set the Global Filter Mode to Router.

View attachment 22272

I enabled that, I was asking if those DNS fields should be empty, I guess yes.

What about DNS under LAN > DHCP Server and under WAN > Internet Connection, should they all be blank?

 

[Treadler]

I enabled that, I was asking if those DNS fields should be empty, I guess yes.

What about DNS under LAN > DHCP Server and under WAN > Internet Connection, should they all be blank?

Yes, & yes!

 

[Treadler]

Diversion clearly states in the FAQ you need to do that to make it work https://diversion.ch/faq-reader/diversion-is-installed-and-i-still-see-ads.html

“This is done automatically by your device if you select to obtain the IP address automatically from the router's DHCP Server.”

 

[GregS]

Run “top” in a terminal. It shows at the top the categories of use. I have seen an issue where NIC went very high and caused other issues.

Cool, wasn't aware of that feature. It was showing 65% idle with the top process taking 2% cpu (dnsmasq log) during today's outage.

 

[GregS]

Agree, remove stubby and see if you can reproduce.

I tried disabling DNSPrivacy during today's outage, and confirmed stubby was not running afterwards but it had no effect on restoring functionality. During this outage no nslookup commands from my computer were making it through to show up in the dnsmasq log (including router.asus.com), though oddly a few calls did come through from the same computer but they don't appear to have completed, only repeats of these 2 lines; perhaps the router internally was bouncing this request around?

Mar 30 10:06:39 dnsmasq[11315]: query[A] ssl.gstatic.com from 192.168.1.2
Mar 30 10:06:39 dnsmasq[11315]: forwarded ssl.gstatic.com to 127.0.1.1

Is 127.0.1.1 the ip stubby normally listens on? After disabling DNS Privacy I can see the restart of dnsmasq but no entries come in after that. So I'll keep DNS Privacy disabled and see if the issue returns.

 

[dave14305]

Mar 30 10:06:39 dnsmasq[11315]: query[A] ssl.gstatic.com from 192.168.1.2
Mar 30 10:06:39 dnsmasq[11315]: forwarded ssl.gstatic.com to 127.0.1.1

Is 127.0.1.1 the ip stubby normally listens on? After disabling DNS Privacy I can see the restart of dnsmasq but no entries come in after that. So I'll keep DNS Privacy disabled and see if the issue returns.

If it's still forwarding to 127.0.1.1, then dnsmasq thinks Stubby is still enabled.

 

[GregS]

If it's still forwarding to 127.0.1.1, then dnsmasq thinks Stubby is still enabled.

Ok thanks. After I disabled and rebooted the router the log shows it was forwarding to the external dns server 1.1.1.1 instead.

 

[juched]

Cool, wasn't aware of that feature. It was showing 65% idle with the top process taking 2% cpu (dnsmasq log) during today's outage.

Then there is something missing. They should add up to 100%. What was the other item with numbers? I am guessing NIC.

 

[GregS]

Whoops I misunderstood nic to be Network Interface Card and not 'user nice cpu time' as my googling found
Good point then, the top listed process was only reporting 2%. I'll look more closely next time it happens.

 

[Rici]

* Edit: Seems to be an issue with the USB stick that probably went defective.

Any durable USB Stick you can recommend?

Thanks!

---------------------------------------------------------

Hi all,

I'm faced about once a day with pixelserv-tls no longer responding. Is there a way to restart pixelserv-tls manually?

Interestingly enough, Diversion and SkyNet were running without problems (well, aside from not being able to communicate with pixelserv-tls).

Note: In the meantime, I updated to pixelserv-tls v2.3.1. Not sure if this fixes the issue - but having a restart option (not only for pixelserv-tls, but Diversion and Skynet and amtm as well) would be good IMO.

 

[Butterfly Bones]

Hi all,

I'm faced about once a day with pixelserv-tls no longer responding. Is there a way to restart pixelserv-tls manually?

Interestingly enough, Diversion and SkyNet were running without problems (well, aside from not being able to communicate with pixelserv-tls).

Note: In the meantime, I updated to pixelserv-tls v2.3.1. Not sure if this fixes the issue - but having a restart option (not only for pixelserv-tls, but Diversion and Skynet and amtm as well) would be good IMO.

SSH session command line in a terminal.

/opt/etc/init.d/S80pixelserv-tls restart

Via Diversion from AMTM

1 > ep > 4

 

[thelonelycoder]

Note: In the meantime, I updated to pixelserv-tls v2.3.1. Not sure if this fixes the issue - but having a restart option (not only for pixelserv-tls, but Diversion and Skynet and amtm as well) would be good IMO.

pixelserv-tls:
Command as posted above by @Butterfly Bones or in Diversion in menu ep.
Diversion:
Disable and re-enable ad-blocking or logging with a or l restarts all Diversion services. Basically anything that restarts Dnsmasq also restarts Diversion.
And this is exactly what this command does:

diversion restart

There is no restart command for amtm as there is nothimg to restart. amtm runs nothing.

 

[Rici]

Thank you!

Is there any durable USB Stick you folks can recommend?

 

[L&LD]

@Rici just use what you have on hand that is 16GB or larger. When it dies, buy another cheap one then.

USB drives are not durable. Just use one that works for now.

 

[Rici]

Thanks, @L&LD .

Why 16GB?
I thought 8GB is sufficient for Diversion + SkyNet etc. ?