[How-to] Adblock Plus filters right on router

[ColinTaylor]

I am not quite clear: are you still suggesting I replace the parameter "ulimit -s 2048" with "ulimit -n 2048"?

It's just speculation on my part as I don't use privoxy.

I would suggest that to start with you add "max-client-connections 256" to the config file and add "ulimit -n 2048" to the startup script. Try it with and without "ulimit -s 2048". See if you think it makes a difference.

When you get the problem it might be worth logging onto the router and issuing the following 2 commands. You might get lucky and it could highlight a problem with memory or number of processes.

# ps w
# free

PS The reason I chose "max-client-connections 256" and "ulimit -n 2048" is because that is double the default values (at least on my N66U - might be different for you).

 

[waffles]

OK, so here are my updated files:

config file (S24privoxy)

#!/bin/sh

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ulimit -s 2048
max-client-connections 256

. /opt/etc/init.d/rc.func

and
/jffs/scripts/services-start (did I pick the correct one?)

#!/bin/sh

sleep 10
/opt/etc/init.d/rc.unslung start
ulimit -n 2048

 

[ColinTaylor]

No, I think that's wrong.

Put "ulimit -n 2048" in S24privoxy (the privoxy start script) after the other ulimit command.
Put "max-client-connections 256" in the config file. Sorry, I don't know the name of that file. Is it /opt/etc/privoxy/config ?

 

[waffles]

Thank you for staying with me here, Colin!

My S24privoxy now:

#!/bin/sh

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ulimit -s 2048
ulimit -n 2048

. /opt/etc/init.d/rc.func

I found a "config" file under ..../entware.arm/etc/privoxy/
and added the "max client..":

confdir /opt/etc/privoxy
logdir /opt/var/log
filterfile default.filter
logfile privoxy
actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.
actionsfile default.action   # Main actions file
actionsfile easylistgermany.script.action
actionsfile easylist.script.action
actionsfile user.action
filterfile easylistgermany.script.filter
filterfile easylist.script.filter
filterfile user.filter
listen-address  0.0.0.0:3128
toggle  1
enable-remote-toggle  1
enable-remote-http-toggle  0
enable-edit-actions 1
enforce-blocks 0
buffer-limit 4096
forwarded-connect-retries  0
accept-intercepted-requests 1
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 300
socket-timeout 300
max-client-connections 256
#permit-access  192.168.1.0/24
debug   1    # show each GET/POST/CONNECT request
debug   4096 # Startup banner and warnings
debug   8192 # Errors - *we highly recommended enabling this*
#admin-address privoxy-admin@example.com
#proxy-info-url http://www.example.com/proxy-service.html

rebooting the router and keeping fingers crossed......

 

[steelskinz]

Could someone only post privoxy files for R7000 please ? I want to try it on Tomato but don't want to install all the entware stuff. Thank you.

 

[ryzhov_al]

Could someone only post privoxy files for R7000 please ? I want to try it on Tomato but don't want to install all the entware stuff. Thank you.

You may try privoxy binary from here.

 

[steelskinz]

Thanks !

 

[steelskinz]

Thank you for staying with me here, Colin!

My S24privoxy now:

#!/bin/sh

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ulimit -s 2048
ulimit -n 2048

. /opt/etc/init.d/rc.func

I found a "config" file under ..../entware.arm/etc/privoxy/
and added the "max client..":

confdir /opt/etc/privoxy
logdir /opt/var/log
filterfile default.filter
logfile privoxy
actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.
actionsfile default.action   # Main actions file
actionsfile easylistgermany.script.action
actionsfile easylist.script.action
actionsfile user.action
filterfile easylistgermany.script.filter
filterfile easylist.script.filter
filterfile user.filter
listen-address  0.0.0.0:3128
toggle  1
enable-remote-toggle  1
enable-remote-http-toggle  0
enable-edit-actions 1
enforce-blocks 0
buffer-limit 4096
forwarded-connect-retries  0
accept-intercepted-requests 1
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 300
socket-timeout 300
max-client-connections 256
#permit-access  192.168.1.0/24
debug   1    # show each GET/POST/CONNECT request
debug   4096 # Startup banner and warnings
debug   8192 # Errors - *we highly recommended enabling this*
#admin-address privoxy-admin@example.com
#proxy-info-url http://www.example.com/proxy-service.html

rebooting the router and keeping fingers crossed......

Did it work ?

 

[waffles]

Did it work ?

It has improved, meaning I seem to get errors less frequently. Not perfect, but 'tolerable' for me for now.

 

[andyg]

seriously thinking about implementing the adblock now...any opinions?
http://www.technologyreview.com/vie...cretly-connect-to-user-tracking-and-ad-sites/

 

[ColinTaylor]

As someone once said: "If you're not paying for the product, you are the product!"

 

[mstombs]

seriously thinking about implementing the adblock now...any opinions?
http://www.technologyreview.com/vie...cretly-connect-to-user-tracking-and-ad-sites/

I recommend
http://www.zenz-solutions.de/personalhttpproxy/
when you don't have the benefit of your router to help.

 

[Chrysalis]

seriously thinking about implementing the adblock now...any opinions?
http://www.technologyreview.com/vie...cretly-connect-to-user-tracking-and-ad-sites/

my merlin is running lighthttpd and the dns server forwards tracking domains to it.

But also I have afwall on my phones, I think android is a mess for security especially with google themselves wanting to track people so much.

 

[kvic]

Thanks! This ad block serves gadgets well.

A perfect application to take away some idle cycles from my rt-ac56u.

 

[steelskinz]

I've finished ipset how-to.

Another example about Peer Guardian functionality right on router has been added.

Is the script still up to date ?

 

[ryzhov_al]

Is the script still up to date ?

I'm still using it. Looks up to date.

 

[Harikrishnan M]

I have followed the installation and configuration steps on my RT-AC66U / Merlin 378.54_2 and run into the "2aab0000 Error: Unable to take any additional connections: Resource temporarily unavailable" problem. I have configured the iptables only for one android phone and this error starts about 5 minutes into browsing. The mobile browser also stops connecting after the error starts.

I have tried all the options mentioned in this thread and have not been able to fix the problem. Is there any suggestion on how to get this problem fixed.

Once fixed I wanted to try enabling the filter for my entire home network with about 10 devices and see how it performs.

 

[amigohd]

I am using https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset with my AC87U but Apple's iCloud Service is blocked. How can I "unblock" a specific IP range which is blocked by peerguardian list?

SOLUTION:
grep -v APPLE does work within the script after gunzip the downloaded list

 

[WaVeR]

Hi Folks,

Since the last update 378.53/54 privoxy and DNScrypt doesn't start automatically. I'm forced to connect to the routeur to restart the 2 services. Anyone else with this issue?

 

[RMerlin]

Hi Folks,

Since the last update 378.53/54 privoxy and DNScrypt doesn't start automatically. I'm forced to connect to the routeur to restart the 2 services. Anyone else with this issue?

The System Log is your best friend. Have a look at it, it probably reports something to the effect that the router was asked to run a script, but you have custom scripts disabled. If that's the case, enable them under Administration -> System.