Adblock not starting

I have a fresh install of OpenWRT 24.10.4 on a GL.iNet GL-MT6000 router.

Installed adblock(not lean or fast) + luci adblock. version adblock - 4.4.2-r3

Straight out, the plugin doesn’t start, even if I have checked the download package is present (I chose curl). I turned on verbose logging but there is nothing helping me in there nor on using logread to diagnose the issue.

"relevant” logs :

Tue Nov 25 12:58:38 2025 user.info adblock-4.4.2-r3[22089]: adblock instance started ::: action: restart, priority: 0, pid: 22089
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_list ::: name: iplist, mode: iplist, cnt: 0, in_rc: 0, out_rc: 0
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_list ::: name: blocklist, mode: blocklist, cnt: 0, in_rc: 0, out_rc: 0
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_list ::: name: allowlist, mode: allowlist, cnt: 0, in_rc: 0, out_rc: 0
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_list ::: name: adaway, mode: restore, cnt: 0, in_rc: 4, out_rc: 4
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_list ::: name: adaway, mode: backup, cnt: 6540, in_rc: 0, out_rc: 0
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_list ::: name: adaway, mode: prepare, cnt: 6540, in_rc: 0, out_rc: 0
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_list ::: name: -, mode: merge, cnt: 6540, in_rc: 4, out_rc: 0
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_tld ::: name: -, cnt: 6540, cnt_tld: 4289, cnt_rem: -
Tue Nov 25 12:58:39 2025 user.debug adblock-4.4.2-r3[22089]: f_list ::: name: -, mode: final, cnt: 4289, in_rc: 4, out_rc: 0
Tue Nov 25 12:59:28 2025 user.debug adblock-4.4.2-r3[22089]: f_dnsup ::: dns: dnsmasq, cache_cmd: -, lookup_domain: localhost, restart_rc: 0, dns_flush: 0, dns_timeout: 20, dns_pid: 22792, dns_cnt: 21, rc: 4
Tue Nov 25 12:59:28 2025 user.err adblock-4.4.2-r3[22089]: dns backend restart with adblock blocklist failed
Tue Nov 25 13:00:17 2025 user.debug adblock-4.4.2-r3[22089]: f_dnsup ::: dns: dnsmasq, cache_cmd: -, lookup_domain: localhost, restart_rc: 0, dns_flush: 0, dns_timeout: 20, dns_pid: 23100, dns_cnt: 21, rc: 4

Thanks for your help!

Did you install curl?

Is your DNS wokring?

1 Like

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):

Screenshot 2025-10-20 at 8.14.14 PM

Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/dhcp
cat /etc/config/firewall
1 Like

Thanks for your assitance!

{
        "kernel": "6.6.110",
        "hostname": "OpenWrt",
        "system": "ARMv8 Processor rev 4",
        "model": "GL.iNet GL-MT6000",
        "board_name": "glinet,gl-mt6000",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "24.10.4",
                "revision": "r28959-29397011cc",
                "target": "mediatek/filogic",
                "description": "OpenWrt 24.10.4 r28959-29397011cc",
                "builddate": "1760891865"
        }
}
config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'redacted'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'lan4'
        list ports 'lan5'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.31.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wan'
        option device 'eth1'
        option proto 'dhcp'

config interface 'wan6'
        option device 'eth1'
        option proto 'dhcpv6'
        option disabled '1'
        option reqaddress 'try'
        option reqprefix 'auto'
        option norelease '1'

config interface 'iot'
        option proto 'static'
        list ipaddr '192.168.32.1/24'
        option device 'br-iot'
        list dns '192.168.31.1'
        list dns '8.8.8.8'

config device
        option type 'bridge'
        option name 'br-iot'

config device
        option type 'bridge'
        option name 'docker0'

config interface 'docker'
        option device 'docker0'
        option proto 'none'
        option auto '0'

config interface 'tailscale'
        option proto 'none'
        option device 'tailscale0'
config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option cachesize '1000'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option localservice '1'
        option ednspacket_max '1232'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'
        option dhcpv6 'server'
        option ra 'server'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'
        option piofolder '/tmp/odhcpd-piofolder'

config host
        option name 'server'
        option ip '192.168.31.2'
        list mac 'redacted'

config dhcp 'iot'
        option interface 'iot'
        option start '50'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'
        option dhcpv6 'server'
        option ra 'server'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'

config host
        option name 'server2'
        option ip '192.168.31.3'
        list mac 'redacted'

config defaults
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option synflood_protect '1'
        option flow_offloading '1'
        option flow_offloading_hw '1'

config zone
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option mtu_fix '1'
        option name 'iot'
        list network 'iot'

config zone
        option name 'tailscale'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
        list network 'tailscale'
        option masq '1'
        option mtu_fix '1'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'wan'
        list network 'wan6'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config forwarding
        option dest 'wan'

config forwarding
        option dest 'wan'

config forwarding
        option src 'iot'
        option dest 'wan'

config rule
        option src 'iot'
        option name 'Allow-DHCP-iot'
        list proto 'udp'
        option dest_port '67'
        option target 'ACCEPT'

config rule
        option src 'iot'
        option dest 'lan'
        option name 'Allow-DNS'
        list proto 'udp'
        list dest_ip '192.168.31.1'
        option dest_port '53'
        option target 'ACCEPT'

config rule
        option src 'tailscale'
        option dest 'lan'
        option name 'Allow-DNS-Tailscale'
        list proto 'udp'
        list dest_ip '192.168.31.1'
        option dest_port '53'
        option target 'ACCEPT'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Plex'
        list proto 'tcp'
        option src 'wan'
        option src_dport '32400'
        option dest_ip '192.168.31.3'
        option dest_port '32400'
        option family 'ipv4'

config forwarding
        option dest 'wan'

config forwarding
        option dest 'wan'

config forwarding
        option src 'tailscale'
        option dest 'wan'

Please add output from:

uci export adblock
1 Like

Did you import gl-inet configs?
Why IOT and LAN have same IP range?

1 Like
package adblock

config adblock 'global'
        option adb_enabled '1'
        option adb_debug '1'
        option adb_dnsforce '0'
        option adb_safesearch '0'
        option adb_mail '0'
        option adb_report '1'
        option adb_dns 'dnsmasq'
        option adb_fetchcmd 'curl'
        option adb_nicelimit '0'
        option adb_fetchinsecure '1'
        option adb_repiface 'br-lan'
        list adb_feed 'adaway'

what do you mean by importing gl-inet configs ?

lan is 192.168.31.0/24 while iot is 192.168.32.0/24

1 Like

I have hard time understanding your config.
Does the device have internet connectivity like opkg update -> that should permit any adblock downloads too.

root@OpenWrt:/etc/config# opkg update
Downloading https://downloads.openwrt.org/releases/24.10.4/targets/mediatek/filogic/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_core
Downloading https://downloads.openwrt.org/releases/24.10.4/targets/mediatek/filogic/packages/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.4/packages/aarch64_cortex-a53/base/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_base
Downloading https://downloads.openwrt.org/releases/24.10.4/packages/aarch64_cortex-a53/base/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.4/targets/mediatek/filogic/kmods/6.6.110-1-6a9e125268c43e0bae8cecb014c8ab03/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_kmods
Downloading https://downloads.openwrt.org/releases/24.10.4/targets/mediatek/filogic/kmods/6.6.110-1-6a9e125268c43e0bae8cecb014c8ab03/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/24.10.4/packages/aarch64_cortex-a53/luci/Packages.gz
... etc

Diff in syntax, is it correct?

I think both are fine, but I’m happy to standardize with the netmask expansion.

lan and iot both work correctly, meaning all my devices register on the .32 subnet and all my normal lan clients are on the .31 one

What happens if you run service adblock reload right now? You may need a startup delay if it only fails during boot.

No it’s not only at boot, on reload/restart it always goes back to error

config interface 'iot'
        option proto 'static'
        option device 'br-iot'
        list dns '192.168.31.1'
        list dns '8.8.8.8'
        list ipaddr '192.168.32.1'

OK, what are the latest messages from dnsmasq when trying a adblock reload?

service adblock reload
sleep 10
logread -e "dnsmasq\[|adblock" | tail -50

Alright everyone. The interface definition for iot WAS messed up.

I deleted the interface, rebuilt it and it works

config interface 'iot'
        option proto 'static'
        option device 'br-iot'
        option ipaddr '192.168.32.1'
        option netmask '255.255.255.0'

Thanks everyone!

I have no idea how luci created that configuration, I didn’t do it manually

but it’s now working with the same pattern as lan. Thanks frollic!

config interface 'iot'
        option proto 'static'
        option device 'br-iot'
        option ipaddr '192.168.32.1'
        option netmask '255.255.255.0'
1 Like

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.