Adblock support thread

Thanks, that was helpful. Your pcap includes only one valid DNS requests which was not found by adblock 4.0.3 due to a faulty sort ... now in 4.0.4 (not released yet!) it will be found, e.g.:

root@blackroute:/tmp$ /etc/init.d/adblock report
:::
::: Adblock DNS-Query Report
:::
  + Start    ::: 2020-04-11, 17:29:04
  + End      ::: 2020-04-11, 17:29:04
  + Total    ::: 1
  + Blocked  ::: 1 (100.00%)
:::
::: Top 10 Clients
:::
  + 1        ::: 192.168.64.138
:::
::: Top 10 Domains
:::
:::
::: Top 10 Blocked Domains
:::
  + 1        ::: 415eff01-dnsotls-ds.metric.gstatic.com
:::
::: Latest DNS Queries
:::
Date           Time           Client                                       Domain                                            Answer
2020-04-11     17:29:04       192.168.64.138                               415eff01-dnsotls-ds.metric.gstatic.com            NX

The other requests on port 853 are not DNS requests and therefore excluded.

2 Likes

Thank you for answer

hi please 2 questions
first : my local dns requests came always from UDP port 53 please can you add udp support for adblock dns report i see tcpdump is for tcp port 53 only

second : how i change dns block ip from 0.0.0.0 to 127.0.0.1 because my local dns requests device not support 0.0.0.0 this let youtube blacklist making youtube videos delayed to start

Thank you.

Where did you see this? It's not limited by protocol, that means it's working for udp and tcp.

Please see the readme. Adblock doesn't use any kind of redirection - we're triggering only 'NXDomain'.

Thank you very much
about tcpdump adblock reports
mikrotik dns requests are from udp ports only so adblock report cannot read it from mikrotik

any idea?

First, please update to latest adblock 4.0.4 which includes an important reporting bugfix (please update the LuCI component as well, cause the page loading on the DNS Report tab has been changed as well).

If you're still missing any dns data in 4.0.4, then check your local pcap file with wireguard. If you see dns request & answers which are not part of the dns report, send me the compressed pcap file.

Thank you okay
i need to know can i edit NXDOMAIN to any ip i want like 127.0.0.1 because i cannot find solution in readme

nope, that's not possible as we don't use IP redirection.

okay i will wait about 1 day cause package list not yet updated latest adblock version

any way thank you Mr. Dirk
Have a nice work day
Regards,
Tarek Herik

so it was not working because of the eth1 interface which was getting only queries and not responses which your script is basing on.

But how to get it to work when I have more than one interface that I want the report to work (like lan, wifi)

see readme or Adblock support thread

if I set it to any it is garbage that collects localhost and wan

that's a tcpdump limitation, just filter the reports for things you're interested in.

it can be done like this
/tcpdump -nn -s0 -l -i any "net 192.168.3.0/24 or net 192.168.2.0/24 or net 192.168.1.0/24" and port 53 -C1 -W5 -w /tmp/adb_report.pcap

but now I would have to modify your script not to run tcpdump. Is it possible that u will add some options for tcpdump filtering?

or maybe even easier /tcpdump -nn -s0 -l -i any host openwrt.lan and port 53 -C1 -W5 -w /tmp/adb_report.pcap

I have just upgraded from 19.07.1 to 19.07.2 with new settings. Means I had to configure everything from scratch and even adblock which is now 4.0.3, as I have read.

Unfortunately, my adblock list doesnt download the sources. I have even reduced to only one source (see the bottom of my list). But still no download. I have tried both wget und uclient-fetch.

Thank you for any help!!

inc0gnit0

Status / Version enabled / 4.0.3
Blocked Domains 0
Active Sources energized_unified
DNS Backend dnsmasq, /tmp/dnsmasq.d
Run Utils /usr/bin/wget, /usr/bin/awk
Run Interfaces trigger: lan, report: -
Run Directories base: /tmp, backup: /tmp, report: /tmp, jail: /tmp
Run Flags backup: 1, reset: 0, flush: 0, force: 0, search: 0, report: 0, mail: 0, jail: 0
Last Run reload, 0m 6s, 124/67/50, 12.04.2020 18:28:49

Sun Apr 12 18:12:11 2020 user.info adblock-4.0.3[9022]: download of 'stevenblack' failed, url: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts, rule: /^0\.0\.0\.0[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 5, log: --2020-04-12 18:12:11--  https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:12:11 2020 user.info adblock-4.0.3[9022]: download of 'yoyo' failed, url: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:12:11--  https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext Resolving pgl.yoyo.org... 213.230.210.230 Connecting to pgl.yoyo.org|213.230.210.230|:443... connected. ERROR: cannot verify pgl.yoyo.org's certificate, issued by 'CN=Let\'s Encrypt Authority X3,O=Let\'s Encrypt,C=US':   Unable to locally verify the issuer's authority. To connect to pgl.yoyo.org insecurely, use `--no-check-certificate'.
Sun Apr 12 18:12:15 2020 user.info adblock-4.0.3[9022]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:16:03 2020 user.info adblock-4.0.3[10188]: adblock instance started ::: action: start, priority: 0, pid: 10188
Sun Apr 12 18:16:04 2020 user.info adblock-4.0.3[10188]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:16:04--  https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:04 2020 user.info adblock-4.0.3[10188]: download of 'adaway' failed, url: https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt, rule: /^127\.0\.0\.1[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 5, log: --2020-04-12 18:16:04--  https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:04 2020 user.info adblock-4.0.3[10188]: download of 'openphish' failed, url: https://openphish.com/feed.txt, rule: BEGIN{FS="/"}/^http[s]?:\/\/([[:alnum:]_-]+\.)+[[:alpha:]]+(\/|$)/{print tolower($3)}, categories: -, rc: 5, log: --2020-04-12 18:16:04--  https://openphish.com/feed.txt Resolving openphish.com... 146.185.189.167 Connecting to openphish.com|146.185.189.167|:443... connected. ERROR: cannot verify openphish.com's certificate, issued by 'CN=RapidSSL RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to openphish.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:04 2020 user.info adblock-4.0.3[10188]: download of 'disconnect' failed, url: https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:16:04--  https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt Resolving s3.amazonaws.com... 52.216.133.165 Connecting to s3.amazonaws.com|52.216.133.165|:443... connected. ERROR: cannot verify s3.amazonaws.com's certificate, issued by 'CN=DigiCert Baltimore CA-2 G2,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to s3.amazonaws.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:04 2020 user.info adblock-4.0.3[10188]: download of 'stevenblack' failed, url: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts, rule: /^0\.0\.0\.0[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 5, log: --2020-04-12 18:16:04--  https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:04 2020 user.info adblock-4.0.3[10188]: download of 'yoyo' failed, url: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:16:04--  https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext Resolving pgl.yoyo.org... 213.230.210.230 Connecting to pgl.yoyo.org|213.230.210.230|:443... connected. ERROR: cannot verify pgl.yoyo.org's certificate, issued by 'CN=Let\'s Encrypt Authority X3,O=Let\'s Encrypt,C=US':   Unable to locally verify the issuer's authority. To connect to pgl.yoyo.org insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:09 2020 user.info adblock-4.0.3[10188]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:16:15 2020 user.info adblock-4.0.3[10615]: adblock instance started ::: action: start, priority: 0, pid: 10615
Sun Apr 12 18:16:16 2020 user.info adblock-4.0.3[10615]: download of 'adaway' failed, url: https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt, rule: /^127\.0\.0\.1[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 5, log: --2020-04-12 18:16:15--  https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:16 2020 user.info adblock-4.0.3[10615]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:16:15--  https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:16 2020 user.info adblock-4.0.3[10615]: download of 'openphish' failed, url: https://openphish.com/feed.txt, rule: BEGIN{FS="/"}/^http[s]?:\/\/([[:alnum:]_-]+\.)+[[:alpha:]]+(\/|$)/{print tolower($3)}, categories: -, rc: 5, log: --2020-04-12 18:16:15--  https://openphish.com/feed.txt Resolving openphish.com... 146.185.189.167 Connecting to openphish.com|146.185.189.167|:443... connected. ERROR: cannot verify openphish.com's certificate, issued by 'CN=RapidSSL RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to openphish.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:16 2020 user.info adblock-4.0.3[10615]: download of 'disconnect' failed, url: https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:16:15--  https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt Resolving s3.amazonaws.com... 52.216.129.181 Connecting to s3.amazonaws.com|52.216.129.181|:443... connected. ERROR: cannot verify s3.amazonaws.com's certificate, issued by 'CN=DigiCert Baltimore CA-2 G2,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to s3.amazonaws.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:16 2020 user.info adblock-4.0.3[10615]: download of 'stevenblack' failed, url: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts, rule: /^0\.0\.0\.0[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 5, log: --2020-04-12 18:16:16--  https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:16 2020 user.info adblock-4.0.3[10615]: download of 'yoyo' failed, url: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:16:16--  https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext Resolving pgl.yoyo.org... 213.230.210.230 Connecting to pgl.yoyo.org|213.230.210.230|:443... connected. ERROR: cannot verify pgl.yoyo.org's certificate, issued by 'CN=Let\'s Encrypt Authority X3,O=Let\'s Encrypt,C=US':   Unable to locally verify the issuer's authority. To connect to pgl.yoyo.org insecurely, use `--no-check-certificate'.
Sun Apr 12 18:16:21 2020 user.info adblock-4.0.3[10615]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:17:39 2020 user.info adblock-4.0.3[11107]: adblock instance started ::: action: reload, priority: 0, pid: 11107
Sun Apr 12 18:17:40 2020 user.info adblock-4.0.3[11107]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:17:39--  https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:17:40 2020 user.info adblock-4.0.3[11107]: download of 'adaway' failed, url: https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt, rule: /^127\.0\.0\.1[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 5, log: --2020-04-12 18:17:39--  https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:17:40 2020 user.info adblock-4.0.3[11107]: download of 'openphish' failed, url: https://openphish.com/feed.txt, rule: BEGIN{FS="/"}/^http[s]?:\/\/([[:alnum:]_-]+\.)+[[:alpha:]]+(\/|$)/{print tolower($3)}, categories: -, rc: 5, log: --2020-04-12 18:17:39--  https://openphish.com/feed.txt Resolving openphish.com... 146.185.189.167 Connecting to openphish.com|146.185.189.167|:443... connected. ERROR: cannot verify openphish.com's certificate, issued by 'CN=RapidSSL RSA CA 2018,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to openphish.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:17:40 2020 user.info adblock-4.0.3[11107]: download of 'disconnect' failed, url: https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:17:39--  https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt Resolving s3.amazonaws.com... 52.216.98.69 Connecting to s3.amazonaws.com|52.216.98.69|:443... connected. ERROR: cannot verify s3.amazonaws.com's certificate, issued by 'CN=DigiCert Baltimore CA-2 G2,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to s3.amazonaws.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:17:40 2020 user.info adblock-4.0.3[11107]: download of 'stevenblack' failed, url: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts, rule: /^0\.0\.0\.0[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 5, log: --2020-04-12 18:17:40--  https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:17:40 2020 user.info adblock-4.0.3[11107]: download of 'yoyo' failed, url: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:17:40--  https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext Resolving pgl.yoyo.org... 213.230.210.230 Connecting to pgl.yoyo.org|213.230.210.230|:443... connected. ERROR: cannot verify pgl.yoyo.org's certificate, issued by 'CN=Let\'s Encrypt Authority X3,O=Let\'s Encrypt,C=US':   Unable to locally verify the issuer's authority. To connect to pgl.yoyo.org insecurely, use `--no-check-certificate'.
Sun Apr 12 18:17:46 2020 user.info adblock-4.0.3[11107]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:18:20 2020 user.info adblock-4.0.3[11579]: Please enable the 'DNS Report' option to use the reporting feature
Sun Apr 12 18:18:25 2020 user.info adblock-4.0.3[11643]: Please enable the 'DNS Report' option to use the reporting feature
Sun Apr 12 18:22:59 2020 user.info adblock-4.0.3[12461]: adblock instance started ::: action: reload, priority: 0, pid: 12461
Sun Apr 12 18:23:00 2020 user.info adblock-4.0.3[12461]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:00 2020 user.info adblock-4.0.3[12461]: download of 'openphish' failed, url: https://openphish.com/feed.txt, rule: BEGIN{FS="/"}/^http[s]?:\/\/([[:alnum:]_-]+\.)+[[:alpha:]]+(\/|$)/{print tolower($3)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:00 2020 user.info adblock-4.0.3[12461]: download of 'adaway' failed, url: https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt, rule: /^127\.0\.0\.1[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:00 2020 user.info adblock-4.0.3[12461]: download of 'disconnect' failed, url: https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:00 2020 user.info adblock-4.0.3[12461]: download of 'stevenblack' failed, url: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts, rule: /^0\.0\.0\.0[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:00 2020 user.info adblock-4.0.3[12461]: download of 'yoyo' failed, url: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:05 2020 user.info adblock-4.0.3[12461]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:23:20 2020 user.info adblock-4.0.3[12909]: adblock instance started ::: action: start, priority: 0, pid: 12909
Sun Apr 12 18:23:21 2020 user.info adblock-4.0.3[12909]: download of 'adaway' failed, url: https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt, rule: /^127\.0\.0\.1[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:21 2020 user.info adblock-4.0.3[12909]: download of 'disconnect' failed, url: https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:21 2020 user.info adblock-4.0.3[12909]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:21 2020 user.info adblock-4.0.3[12909]: download of 'openphish' failed, url: https://openphish.com/feed.txt, rule: BEGIN{FS="/"}/^http[s]?:\/\/([[:alnum:]_-]+\.)+[[:alpha:]]+(\/|$)/{print tolower($3)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:21 2020 user.info adblock-4.0.3[12909]: download of 'stevenblack' failed, url: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts, rule: /^0\.0\.0\.0[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:21 2020 user.info adblock-4.0.3[12909]: download of 'yoyo' failed, url: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:23:26 2020 user.info adblock-4.0.3[12909]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:26:28 2020 user.info adblock-4.0.3[14044]: adblock instance started ::: action: start, priority: 0, pid: 14044
Sun Apr 12 18:26:28 2020 user.info adblock-4.0.3[14044]: download of 'adaway' failed, url: https://raw.githubusercontent.com/AdAway/adaway.github.io/master/hosts.txt, rule: /^127\.0\.0\.1[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:26:28 2020 user.info adblock-4.0.3[14044]: download of 'disconnect' failed, url: https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:26:28 2020 user.info adblock-4.0.3[14044]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:26:28 2020 user.info adblock-4.0.3[14044]: download of 'openphish' failed, url: https://openphish.com/feed.txt, rule: BEGIN{FS="/"}/^http[s]?:\/\/([[:alnum:]_-]+\.)+[[:alpha:]]+(\/|$)/{print tolower($3)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:26:28 2020 user.info adblock-4.0.3[14044]: download of 'stevenblack' failed, url: https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn-social/hosts, rule: /^0\.0\.0\.0[[:space:]]+([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($2)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:26:28 2020 user.info adblock-4.0.3[14044]: download of 'yoyo' failed, url: https://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml&showintro=0&mimetype=plaintext, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:26:33 2020 user.info adblock-4.0.3[14044]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:26:52 2020 user.info adblock-4.0.3[14364]: adblock instance started ::: action: reload, priority: 0, pid: 14364
Sun Apr 12 18:26:53 2020 user.info adblock-4.0.3[14364]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:26:56 2020 user.info adblock-4.0.3[14364]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:27:03 2020 user.info adblock-4.0.3[14756]: adblock instance started ::: action: start, priority: 0, pid: 14756
Sun Apr 12 18:27:04 2020 user.info adblock-4.0.3[14756]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 1, log: /bin/uclient-fetch: SSL support not available, please install one of the libustream-.*[ssl|tls] packages as well as the ca-bundle and ca-certificates packages.
Sun Apr 12 18:27:08 2020 user.info adblock-4.0.3[14756]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:27:19 2020 user.info adblock-4.0.3[15028]: adblock instance started ::: action: reload, priority: 0, pid: 15028
Sun Apr 12 18:27:20 2020 user.info adblock-4.0.3[15028]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:27:20--  https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:27:25 2020 user.info adblock-4.0.3[15028]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:27:32 2020 user.info adblock-4.0.3[15425]: adblock instance started ::: action: start, priority: 0, pid: 15425
Sun Apr 12 18:27:33 2020 user.info adblock-4.0.3[15425]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:27:33--  https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:27:38 2020 user.info adblock-4.0.3[15425]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)
Sun Apr 12 18:28:43 2020 user.info adblock-4.0.3[15816]: adblock instance started ::: action: reload, priority: 0, pid: 15816
Sun Apr 12 18:28:44 2020 user.info adblock-4.0.3[15816]: download of 'energized_unified' failed, url: https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt, rule: /^([[:alnum:]_-]+\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 5, log: --2020-04-12 18:28:44--  https://raw.githubusercontent.com/EnergizedProtection/block/master/unified/formats/domains.txt Resolving raw.githubusercontent.com... 151.101.112.133 Connecting to raw.githubusercontent.com|151.101.112.133|:443... connected. ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':   Unable to locally verify the issuer's authority. To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.
Sun Apr 12 18:28:49 2020 user.info adblock-4.0.3[15816]: blocklist with overall 0 blocked domains loaded successfully (TP-Link Archer C7 v5, OpenWrt 19.07.2 r10947-65030d81f3)

You're missing 'ca-bundle', adblock 4 check the certificates by default. It's better to directly update to 4.04, cause it includes all latest bugfixes and the ca-bundle dependency.

1 Like

Thank you very much!! :slight_smile: :+1:

Firmware Version: OpenWrt 19.07.2 r10947-65030d81f3 / LuCI openwrt-19.07 branch git-20.099.26404-e9449d9
Architecture: ARMv7 Processor rev 0 (v7l)
Hello,
Today I did upgrade from older version. Do not know exactly version number, but I do upgrades every week or if I see them.
I am getting a lot of errors and adblock is not working since upgrade.

login as: root
root@x.x.x.x's password:


BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 19.07.2, r10947-65030d81f3
 -----------------------------------------------------
root@X4S:~# opkg update
root@X4S:~# opkg install adblock
Installing adblock (4.0.3-1) to root...
Downloading https://downloads.openwrt.org/releases/19.07.2/packages/arm_cortex-a15_neon-vfpv4/packages/adblock_4.0.3-1_all.ipk
Configuring adblock.
Collected errors:
 * wfopen: /etc/adblock/adblock.blacklist: No such file or directory.
 * wfopen: /etc/adblock/adblock.mail: No such file or directory.
 * wfopen: /etc/adblock/adblock.monitor: No such file or directory.
 * wfopen: /etc/adblock/adblock.sources.gz: No such file or directory.
 * wfopen: /etc/adblock/adblock.whitelist: No such file or directory.
 * resolve_conffiles: Existing conffile /etc/config/adblock is different from the conffile in the new package. The new conffile will be placed at /etc/config/adblock-opkg.
 * file_sha256sum_alloc: Failed to open file /etc/adblock/adblock.whitelist: No such file or directory.
 * file_sha256sum_alloc: Failed to open file /etc/adblock/adblock.blacklist: No such file or directory.

Looks like a broken jffs2 filesystem .... most probably unrelated to adblock. Look for jffs2 filesystem errors, try re-flashing, firstboot etc.

@dibdot
thx for response. Lot of work to reconfigure all. But if needed...

thank you