[Release] AB-Solution 3 - The Ad Blocking Solution

[duffydack]

It's definitely not on. When it says forwarding to upstream, it never actually gets any reply... so is it much ado about nothing, or is this just not supposed to happen?

#!/bin/sh
cru a UpdateHosts "00 2 * * 5 /tmp/mnt/sda1/adblocking/addon/update-hosts.add cronjob"
cru a RotateLogs "20 5 * * * /tmp/mnt/sda1/adblocking/addon/rotate-logs.add"
CONFIG=$1
source /usr/sbin/helper.sh
logger "AB-Solution added entries via ab_dnsmasq_postconf.sh"
pc_append address=/::/:: $CONFIG
pc_append ptr-record=0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa,:: $CONFIG
pc_append addn-hosts=/tmp/mnt/sda1/adblocking/hosts-adblock $CONFIG
pc_append addn-hosts=/tmp/mnt/sda1/adblocking/blacklist.txt $CONFIG
pc_append log-facility=/tmp/mnt/sda1/adblocking/logs/dnsmasq.log $CONFIG
pc_append log-async $CONFIG
pc_append log-queries $CONFIG

Yeah, I see..
I've never had ipv6 enabled on this router. One of first things I did when I got it few weeks ago was disable it.

 

[thelonelycoder]

#!/bin/sh
cru a UpdateHosts "00 2 * * 5 /tmp/mnt/sda1/adblocking/addon/update-hosts.add cronjob"
cru a RotateLogs "20 5 * * * /tmp/mnt/sda1/adblocking/addon/rotate-logs.add"
CONFIG=$1
source /usr/sbin/helper.sh
logger "AB-Solution added entries via ab_dnsmasq_postconf.sh"
pc_append address=/::/:: $CONFIG
pc_append ptr-record=0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa,:: $CONFIG
pc_append addn-hosts=/tmp/mnt/sda1/adblocking/hosts-adblock $CONFIG
pc_append addn-hosts=/tmp/mnt/sda1/adblocking/blacklist.txt $CONFIG
pc_append log-facility=/tmp/mnt/sda1/adblocking/logs/dnsmasq.log $CONFIG
pc_append log-async $CONFIG
pc_append log-queries $CONFIG

Yeah, I see..

Hmm, enter (c) in AB, what is the ipv6_service= saying there?
If it says anything else than disabled then change it to:
ipv6_service="disabled"
in /adblocking/.config/ab-solution.cfg

Then run (h) again.

 

[duffydack]

Hmm, enter (c) in AB, what is the ipv6_service= saying there?
If it says anything else than disabled then change it to:
ipv6_service="disabled"
in /adblocking/.config/ab-solution.cfg

Then run (h) again.

# Router info #
routerName="RT-AC87U"
architecture="armv7l"
ipv6_service="disabled"

 

[thelonelycoder]

# Router info #
routerName="RT-AC87U"
architecture="armv7l"
ipv6_service="disabled"

Then the IPv6 entries in ab_dnsmasq_postconf.sh do not make sense.
When was the file last changed? Same time when you ran (h)?

 

[duffydack]

Then the IPv6 entries in ab_dnsmasq_postconf.sh do not make sense.
When was the file last changed? Same time when you ran (h)?

last changed when i ran. I ran it again, checked, it was changed just now and still has those lines.

 

[thelonelycoder]

last changed when i ran. I ran it again, checked, it was changed just now and still has those lines.

OK, wild guess: Your Nvram has a double entry of the setting ipv6_service.
Run this in the terminal, substituting <your device>:

nvram show | sort > /tmp/mnt/<your device>/nvram.txt

Then open the file nvram.txt and search how many ipv6_service entries you find.

 

[duffydack]

OK, wild guess: Your Nvram has a double entry of the setting ipv6_service.
Run this in the terminal, substituting <your device>:

nvram show | sort > /tmp/mnt/<your device>/nvram.txt

Then open the file nvram.txt and search how many ipv6_service entries you find.

admin@RT-AC87U-2A30:/tmp/mnt/sda1# cat nvram.txt | grep ipv6_service
ipv6_service=disabled

just 1.

 

[thelonelycoder]

You do run an unaltered version of AB-Solution 3?

 

[thelonelycoder]

And the firmware you run on the 87U?

 

[duffydack]

Asus 87u came with latest asus firmware, I flashed with merlin latest, reset to factory just in case, set it all up (inc disabling ipv6), and it's been that way since today when I installed your script, using the instructions on this page.

 

[thelonelycoder]

Asus 87u came with latest asus firmware, I flashed with merlin latest, reset to factory just in case, set it all up (inc disabling ipv6), and it's been that way since today when I installed your script, using the instructions on this page.

Let me check something, may take a little while.

 

[duffydack]

Let me check something, may take a little while.

No prob.. Thanks for all the help thus far. I may just ignore it and file it under, shirt happens

 

[thelonelycoder]

No prob.. Thanks for all the help thus far. I may just ignore it and file it under, shirt happens

Just one more check: Post lines 349 to 354 and 1461 in ab-solution.sh

 

[thelonelycoder]

@duffydack I just checked the released version with my 87U, but with firmware 380.65_alpha1.
There is no doubt it will add the IPv6 entries in dnsmasq.conf if the service is enabled, when IPv6 is disabled they also go.
I cant see any other possible way they are still in. The IPv6 setting is checked via nvram and then written to the AB config file.
But whenever the AB UI is started, that value is checked again in nvram.

A true mystery to me.

 

[duffydack]

Just one more check: Post lines 349 to 354 and 1461 in ab-solution.sh

# sundry
todayHour=$(date +"%F_%H") # 2016-02-16_08 used for backup files
firmwareBuildno=$(nvram get buildno)
lan_ipaddress=$(nvram get lan_ipaddr)
ipv6_service=$(nvram get ipv6_service)
# add-on's and related scripts

I'm on merlin stable 380.64

 

[thelonelycoder]

# sundry
todayHour=$(date +"%F_%H") # 2016-02-16_08 used for backup files
firmwareBuildno=$(nvram get buildno)
lan_ipaddress=$(nvram get lan_ipaddr)
ipv6_service=$(nvram get ipv6_service)
# add-on's and related scripts

I'm on merlin stable 380.64

Looks good. And line 1461?

 

[duffydack]

Looks good. And line 1461?

if [ $ipv6_service == "disabled" ];then

 

[thelonelycoder]

if [ $ipv6_service == "disabled" ];then

OK, I give up and file it under shirt happens.

 

[duffydack]

OK, I give up and file it under shirt happens.

lol. When I have time I'll start from scratch, even flash merlin again and reset....

 

[duffydack]

OK, I give up and file it under shirt happens.

I don't know why, but accessing the lan differently gives different results. When I just ssh to a locally connected machine, it queries, finds it in hosts.dnsmasq, and forwards upstream anyway. When I ping the machine, it does same but gets a reply query[PTR] 3.1.168.192.in-addr.arpa
But when I access a service on my lan, my gigaset voip web UI for example, it queries, gets it from hosts.dnsmasq and that's it.