Dear community, I am using mentioned router with the following packages:
zram
Squid basic auth
p910
adblock fast
Since I am using openssl to generate htpasswd I got rid of apache dependencies which results in more free ram.
Ive selected these adblock fast lists:
Adguard Team cname trackers
Adguard Team cname clicktrhoughs
Adguard Team cname ads
Adguard Team cname microsites
Adaway hosts
oisd small
Goal: all these annoying popups filled with porn content shell be either blocked or blanked/blocked. Ive tested some porn domains but seems like either blocklist isnt active OR domain not listed since reachable...
Can I achive this goal or do I have to use clientside popup filters?
Blocking is not that easy, there are solutions available like NextDNS, AdguardHome, but there are also adblocker luci apps, and then there are also a few things which can bypass your default dns settings like hardcoded DoH in browsers (secure dns), but some devices can hardcode it.
Even if you did a really good job by using DoH ip blocklists, hijacking port 53 and have a lot of block lists, I have seen some sites putting all their ads behind a reverse proxy on their own ip range, there is not a bulletproof solution
If you want to block those top-level domains, they're ways to do so at your [OpenWrt-based] router and DNS connection to the Internet, but it's not clear why you associate those domains to "generally blocking porn advertising".
Please show basic configs, and also the firewall additions for transparent bump etc.
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):
Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:
AFAIK adblock-fast does not compress the blocklist. On a device which has 128MiB of RAM, consider using adblock-lean which does. This should leave more RAM free or allow to use a larger blocklist.
(full disclosure: I am currently the maintainer of adblock-lean)
This isn't what you asked, but if you're comfortable with a 1Gb raspberry 4 or 5, pihole works very well for me. Install rpi-os, download pihole and install it.
I still get popups, but there are multiple adlists out there. I also dive into the HTML of the Bad Site to see if the crap can be isolated to particular addresses … and add them to the blocklist. Like admiral.
Openwrt should be configured to not use DHCP -advertized DNS servers, - point your lan at the pihole system.
I'm well comfortable with the linux needed to get a RPI running,