Diversion Diversion - the Router Ad-Blocker

[L&LD]

That last line in your code box says otherwise?

 

[vertigo888]

That last line in your code box says otherwise?

But the GUI and install log says otherwise

Diversion upgrade log Sun, 12 Apr 2020 01:33:31 +0800
[31m____________________________________________________[0m

 [42m i [0m Checking router
 [42m ✔ [0m Asuswrt-Merlin
 [42m ✔ [0m Wireless router mode
 [42m ✔ [0m dos2unix
 [42m ✔ [0m Netstat
 [42m ✔ [0m Compatible device(s)
 [42m ✔ [0m Internet
 [42m ✔ [0m NTP date is synced
 [42m i [0m Router check complete

 [42m i [0m Checking dnsmasq.conf.add entries
 [42m ✔ [0m dnsmasq.conf.add
[31m____________________________________________________[0m

 [42m ? [0m Select Diversion Edition to upgrade to

[90m 1. Diversion Lite        SSH UI, Entware,
                          blocks only http ads[0m

 2. Diversion Standard    SSH UI, Entware,
                          package pixelserv-tls,
                          blocks http and https ads[0m

 Select Edition [2-2 e=Exit]
 [42m i [0m Checking port 443 availability
 [42m ✔ [0m Port 443 is available

[31m____________________________________________________[0m

 [42m i [0m Reserving one IP address for pixelserv-tls

 [42m ! [0m DO THIS NOW: Log into this routers WebUI

 - Go to LAN > DHCP Server
 - Adjust "IP Pool Starting Address" from the
   standard xxx.xxx.xxx.2 (typically 192.168.1.2)
   to xxx.xxx.xxx.3 (e.g 192.168.1.3)
   (xxx.2 would be the reserved address)
 - Make sure the reserved address is not used
   by your other devices
 - Then click "Apply"

 You will need to enter the IP address next

 [42m ! [0m Press Enter to continue when ready
[31m____________________________________________________[0m

 Enter pixelserv-tls IP Address:
 [42m ✔ [0m 192.168.1.9 is a valid IP address
 [42m i [0m checking if 192.168.1.9 is available to use

 [42m ✔ [0m pixelserv-tls IP address set to 192.168.1.9
 [42m i [0m Probing for Entware
 [42m ✔ [0m Entware is already installed

 [42m i [0m Getting Diversion Standard files
     from diversion.ch
 [42m ✔ [0m ash-history.div     integrated
 [42m ✔ [0m functions.div       integrated
 [42m ✔ [0m mount-entware.div   integrated
 [42m ✔ [0m post-conf.div       integrated
 [42m ✔ [0m rc.func.div         integrated
 [42m ✔ [0m rotate-logs.div     integrated
 [42m ✔ [0m S80pixelserv-tls    integrated
 [42m ✔ [0m update-bl.div       integrated
 [42m ✔ [0m write-config.div    integrated

 [42m i [0m Checking white and blacklists
 [42m ✔ [0m Whitelist
 [42m ✔ [0m Blacklist
 [42m ✔ [0m Wildcard blacklist

 [42m i [0m Probing for pixelserv-tls
 [42m i [0m Installing Entware package 'pixelserv-tls'
[90m
Place ca.crt and ca.key to /opt/var/cache/pixelserv before starting HTTPS mode.
Start options can be adjusted via /opt/etc/init.d/S80pixelserv-tls.

See 'pixelserv-tls -h' for details
Installing pixelserv-tls (2.3.1-1) to root...
Downloading http://bin.entware.net/armv7sf-k2.6/pixelserv-tls_2.3.1-1_armv7-2.6.ipk
Configuring pixelserv-tls.
[0m
 [42m ✔ [0m pixelserv-tls installed

 [42m i [0m Creating pixelserv-tls CA certificate
[90m
[0m
 [42m ✔ [0m pixelserv-tls CA certificate created

 [42m i [0m Checking /jffs/scripts entries
 [42m ✔ [0m dnsmasq.postconf
 [42m ✔ [0m mount-entware
 [42m ✔ [0m services-stop
 [42m ✔ [0m unmount (Diversion)
 [42m ✔ [0m unmount (swap file)

 [42m i [0m Initializing Diversion

 [42m ✔ [0m blocking list

 [42m i [0m Restarting Dnsmasq
 [42m ✔ [0m Dnsmasq restarted

 [42m i [0m Checking dnsmasq.conf entries
 [42m ✔ [0m Additional hosts
 [42m ✔ [0m Log facility

 [42m i [0m (Re)starting pixelserv-tls
[90m
 Starting pixelserv-tls (Diversion)... failed
[0m

 [41m ✖ [0m pixelserv-tls not running, restarting...
[90m
 Starting pixelserv-tls (Diversion)... done
[0m

 [41m ✖ [0m pixelserv-tls not running, check Syslog for errors

 [42m ! [0m Press Enter to acknowledge

 [42m i [0m Checking cron jobs
 [42m ✔ [0m cron file found
 [42m ✔ [0m blocking list update
 [42m ✔ [0m Rotate logs
 [42m ✔ [0m Ads counter

 [42m ✔ [0m Diversion Standard v4.1.11 upgrade complete

Starting service manually, I receive the below with not much to go from:

Starting pixelserv-tls (Diversion)... failed

 

[L&LD]

Install log is a static report - from the past. Not sure where you see the GUI showing pixelserv-tls not running?

 

[vertigo888]

Install log is a static report - from the past. Not sure where you see the GUI showing pixelserv-tls not running?

Sorry cross replies, I cannot start the service manually either by /opt/etc/init.d/S80pixelserv-tls start

 

[Ro berto]

I switched to small list and now I can log-in to PayPal. The only downside is that some ads are now being shown.

with minimal blocking list I can log in to Android PayPal app and I haven't seen ads, very happy.

EDIT: clarified I'm using android app for PayPal

Sent from my SM-G970F using Tapatalk

 

[5stringdeath]

with minimal blocking list I can log in to PayPal and I haven't seen ads, very happy.

Sent from my SM-G970F using Tapatalk

I use the Standard list and have never had an issue with PayPal

 

[SomeWhereOverTheRainBow]

I use the Standard list and have never had an issue with PayPal

@Ro berto the problem isn't with paypal per-say, I have noticed issues with many financial login sites that had "additional security logins". the issues don't seem to occur for me if i skip "additional security step login" parameters. note: diversion has the option to whitelist as well.

 

[5stringdeath]

. note: diversion has the option to whitelist as well.

I understand this but I was just stating I don't think that particular list is the issue. I have none of my financial institutions whitelisted and I've never had an issue with Diversion or TFA logins.

 

[JemTheWire]

My uiDivstats is showing 406% blocked. Can someone please tell me where the actual logfile is located so that I can scrub it and start from fresh?

 

[thelonelycoder]

My uiDivstats is showing 406% blocked. Can someone please tell me where the actual logfile is located so that I can scrub it and start from fresh?

In the d menu in Diversion.

 

[Ubimo]

Today, I managed to get WireGuard running with 1.1.1.1 WARP on my local Windows 10 PC.
Do I still profit from adblocking through Diversion on my router? Or is this now being somehow circumvented due to WireGuard?
I cannot wrap my head around this.

 

[Luizlp10]

Diversion is working flawlessly in my AC86U with 384.16 merlin FW installed but I have a question about DoT, which I am using. I am still being able to see all queries from Dnsmasq on SSH client, on Diversion. Pardon me if this is an obvious one but should'nt it be encrypted and not visible from the log?

Thanks in advance.

 

[dave14305]

Diversion is working flawlessly in my AC86U with 384.16 merlin FW installed but I have a question about DoT, which I am using. I am still being able to see all queries from Dnsmasq on SSH client, on Diversion. Pardon me if this is an obvious one but should'nt it be encrypted and not visible from the log?

Thanks in advance.

The encryption is only from Stubby out to the internet to your chosen DoT servers. The DNS traffic from your LAN to dnsmasq and dnsmasq to Stubby is not encrypted. Diversion works within dnsmasq, so it is logging the queries before they are encrypted.

 

[thelonelycoder]

Today, I managed to get WireGuard running with 1.1.1.1 WARP on my local Windows 10 PC.
Do I still profit from adblocking through Diversion on my router? Or is this now being somehow circumvented due to WireGuard?
I cannot wrap my head around this.

No, that device runs its own VPN, circumventing the router. However, other devices behind the router and using it as the DNS resolver still use Diversion.

 

[Mivis]

Hi! First i have to say thank you for your work, i love having the addblocking in my router. Now, I have one question that I hope someone can solve. I use adobe lightroom and if I have diversion active, it gives me an error and it closes. How can I avoid this? Sorry if it is a dumb question, but I´m not an expert...Thank you

 

[martinr]

Hi! First i have to say thank you for your work, i love having the addblocking in my router. Now, I have one question that I hope someone can solve. I use adobe lightroom and if I have diversion active, it gives me an error and it closes. How can I avoid this? Sorry if it is a dumb question, but I´m not an expert...Thank you

Welcome to the forum. Can you tell us exactly what the error message says in Adobe Lightroom?

 

[Mivis]

Welcome to the forum. Can you tell us exactly what the error message says in Adobe Lightroom?

I´ve done a screenshot, the only problem is that is in Spanish...but maybe it´s enough. When the program loads, I get that error and it closes. If I disable diversion, it works perfectly and I get no error

 

[martinr]

I´ve done a screenshot, the only problem is that is in Spanish...but maybe it´s enough. When the program loads, I get that error and it closes. If I disable diversion, it works perfectly and I get no error

Thanks. I have no idea what that Spanish says, but before I give you a link, which explains how to whitelist a site in Diversion, do stop and consider: is there a genuine reason why Diversion is blocking that site? Before whitelisting any site, I’d want to be 100% certain that it really was a false positive. (I assume you know why the error message is in Spanish.)

Anyway, have a look at this link

https://www.snbforums.com/threads/diversion-the-router-ad-blocker.48538/page-69#post-446586

to find out about how to discover which domain is being blocked.

But do think twice before whitelisting anything.

 

[Donga120]

Anyone recommend any simple diversion setup/files/tips for ad blocking? I'm a bit new to all this and getting my head around it slowly. I'm currently using Standard and Minimal, 54,707 blocked domains on 1 host file.

 

[L&LD]

@Donga120, you're good.

What else is there to do? Just use the list as-is and explore further if your requirements change.