[Bugs] eOS 2.5.x beta for RASPI ONLY

Statistics display in dashboard can differ from display of blocked requests in controlbar.

To reproduce. Reset device statistics in dashboard. Visit faz.de. Blocker shows 1 but dashboard several blocked domains. (Thanks to @ulmisch for this find!)

Similar with computerbild.de 13 blocked requests, sum of blocked requests in stats is 13 as well but it reads 25 domains where (if you count all domians) sum is 9.

Might have been an issue in previous versions already.

@ulmisch From the machine deck - first analysis from @bpr :

I took a look at the faz page in the web inspector. The browser first gets a redirect to
https://www.faz.net/aktuell/

For 3rd party requests the browser only sends https://www.faz.net/ as referrer. Therefore the eBlocker can block these requests (and they appear in the statistics), but it cannot assign them to the current page because the path is missing.

The behavior is probably the same as the HTTP header "Referrer-Policy: origin-when-cross-origin" according to the documentation:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

The faz page does not set this header, but you can do it dynamically for individual resources. I haven't found where exactly this happens.

Interestingly, only one request can be assigned by the controlbar: advertisement from static.faz.net. The complete referrer is transferred there.

Now what that means is

1. All trackers & such got blocked
2. Due to a website controlled parameter eBlocker might show less blocked trackers in icon than it actually had blocked
3. There might be no fix as this a security measure in the http protocol (we‘ll see 😉 )

@bpr, @benne

eBlocker Led Modul

Status Led at SPI pin on raspberry pi 3 and 4 are not working. 🙄 

I test with Led PL9823-F5 , nothing happend...

regards

PIO78

@pio78 The eBlocker LED board and program code was designed for the Banana Pi M2+.

It was never intended to run on Raspberry Pi and it would be a great surprise if it would work. Thanks for letting us know that there is no surprise 😉

Currently we have no plans in the core team to port the code or the hardware to work on Raspberry Pi. But maybe some talent from the community wants to tackle this?

@random

it is coded in RUBY. I never had contact with RUBY 🙂 

Is it possible to change the Led-Modul in Python?

regards

PIO78

Posted by: @pio78

Is it possible to change the Led-Modul in Python?

Sure, if you find a talented developer 😉 

There is a bug in 2.5.1 with parental controls and time-restricted internet access. I have written an issue on GitHub: https://github.com/eblocker/eblocker/issues/15

Thanks to @mainzelM for finding this bug!

Version 2.5.2 is now out with the following changes:

* Fixed issue with firewall settings when parental controls are used
* Updated MAC address prefixes to detect more vendors
* Updated dependencies for compatibility with Java 11
* Updated AngularJS to 1.8.0
* Set only 1.1.1.1 and 9.9.9.9 as default DNS servers
* Added experimental filter analysis feature under Settings / Blocker.

@bpr

Thank your for your great work :o)

regards

PIO78

Great! Thanks for all work guys!!! 😀 

Hi guys,

with version 2.5.2 it is not possible to add filterlists. 

eBlocker is working endlessly without finishing...

I have tested with different lists.

Back to 2.5.0 the same lists can be added as usual.

cu

@ulmisch

Yes you are right 🤔 

I testet Domainfilter:

Domainlist - https://adaway.org/hosts.txt

working endless ... 🙁 

Tested Patternlist:

Easylist - https://raw.githubusercontent.com/mainzelM/ddg-tr-as-easylist/master/easylist/topsites/fingerprinting123.txt

it takes a long time, but finished 🙂

regards

PIO78

@ulmisch

Which platform/device are you using / how much RAM do you have?

Which lists are you adding?

Good morning,

eBlocker runs on a raspberry 4 with 4 GB RAM.

Should be no problem 😉

As mentioned, with version 2.5.0 or 2.5.1 there was no issue...

cu

Hi,

do we have a problem with filterlist updates?

regards PIO78

Hi,

Filterlist tested with other lists Domainblocker doesn't finish, see attached 🙄 

regards

PIO78

Same problem here since 2.5.2 - adding domain blacklists won’t finish...

another issue(?) there‘re no new updates since 30.06.2020?  Searching manually says „No Updates Available“

Lists are working fine for me, but the system update is from 30.06.20

regards

Sven

@calimero @alexsuff Filterlist update should work again by tomorrow. We had to upgrade the server due to low memory condition that caused the update-list generation to fail 😥 

@pio78 Domain filer list "never ending spinner" issue is under investigation (soon)

@calimero It seems customs list work fine in easylist format. Can you confirm that adding a custom domain filter works as well?

I can reproduce the "never ending spinner" issue too. It might just be a parsing issue with the domain filters (but not the pattern filters).

@benne

Same issue for domain ad blocker for me.

regards Sven

After having some issues I tried resetting eBlocker, now the activation fails... 🙈

no matter what Mail Adress I try

Same Issue - Fresh install on Raspi4 - Can not Activate with "FAMLFT-DEMO"... - Just delete that feature - It is open-source ^^

500 Internal Server Error at Activation attempt

Posted by: @sigma

Just delete that feature - It is open-source

Feel free to do so: it‘s open source 😉

Make sure eBlocker has Internet access during setup. 

Alternatively try FAMLFT-OPENSOURCE

Good luck.

THX!

Posted by: @random

Posted by: @sigma

Just delete that feature - It is open-source

Feel free to do so: it‘s open source 😉

Make sure eBlocker has Internet access during setup. 

Alternatively try FAMLFT-OPENSOURCE

Good luck.

THX!

Wish I could - No talent at programming.. 😉

But that new License works like a charm. Thanks for the quick reply. 

@Pio78, @alexsuff, @CalimerO, @Benne

Thank you for the bug report. It was a compatibility issue between Java 8 and 11. It's fixed in version 2.5.3 now.

@bpr thanks for the info!

i just updated to 2.5.3 and added a list (oisd.nl) that didn’t work before. Now my eBlocker crashed and isn’t available anymore :-/

i pulled the plug to restart it. Filter lists still not working for me. Am I doing something wrong?

I added a custom filter list to the malware section. Even though the domains get blocked as expected the blocker counter is not incremented. I fear it's a minor bug...

Hi @alexsuff,

this sounds like an out-of-memory issue. I tested the oisd.nl list and it worked, although it took a few minutes with high CPU load to process.

Did your eBlocker process all lists in parallel? Maybe that took too much memory.

@bpr Running 2.5.2 I deleted custom lists because they didn’t finish processing. After updating to 2.5.3 I added them again but separately, waiting about 10-15 min after each.

...Running on raspi4 with 4gb ram

i still see a warning next to the list 🤷🏻‍♂️

Which list format of Oisd.nl did you use?

Thank you @alexsuff. With 4 GB of RAM it should not be an out-of-memory problem.

I used the format "Domain List" for the oisd.nl list. Could you give me the path to the deathbybandaid list and the format you used? Then I could test that, too.

@bpr here‘s the link:

https://raw.githubusercontent.com/deathbybandaid/piholeparser/master/Subscribable-Lists/CombinedBlacklists/DeathbybandaidList.txt

but there‘s no use of this list for me anymore, because it’s included in the oisd.nl  

the oisd.nl list worked the third time, after the system froze again and the Pi got really hot...

thank you!

Hi,

please test, after a reboot eBlocker Mobile is switched off.

After switching on ist is working to the next reboot.

🤔

Regards

Pio78

Yes, positive.

Seems eOS 2.5 specific bug. Should I merge this to the 2.5 bug thread?

@benne

yes merge it,

thanks

Hi @ll

1.st under "Blocker" -> "Analyze Tool" the recording for a device can be starten and stopped, but the refresh button does not display the recording.

2.nd as the recording was working it was not possible to delete the recording afterwards, even in the https diagnose it is not possible to delete the recording afterwards

3.rd in the https diagnose, even if you switch the "chosen device" the reload button below loads the old traffic from another device and not "the chosen"

Delete table only hide the content, edit and select all entries and then delete, does nothing 🙂

regards

Sven

Update #1

https diagnose logs are deleted after reboot of eBlocker

Diagnosebericht

Hello @all,

I also seem to have a new issue with the HTTPS recording functions. When trying to get a ticket of Hamburg Dungeon, https://www.thedungeons.com/hamburg/de/tickets/ (click on "Spar Ticket" , "jetzt buchen"). nothing goes on with eBlocker.

• The setting "Recording of HTTPS communication failures enabled" shows nothing at all
• The "Manual Recording" shows some but these seem not to cause the problem. But I cannot test my recordings with a trusted app because both buttons still are disabled. Please see hardcopy.
• One time I got a complete crash of eBlocker (even SSH did not work any longer, only power cycle).
• switching off eBlocker for the device works

In conjunction with the post of @calimero, there seems something to be quite wrong in the new version...

regards

Valentin

P.S: Mac OS Catalina 10.15.4, Safari

@valentin 

This function is woking fine for me. I am able to record https, I am able to select/change entries to be allowed and I am able to create a new App. Tried this with the Bethesda Game Launcher Client.

Regards Sven

@calimero,

now I have tried Google Chrome - and believe it or not but the WEB page and the eBlocker recordings are working as expected. So it's definitely an issue of Safari: It has its own blocking mechanism for several conditions.

I found a setting (see attachment) which denies opening the mentioned page. After switching it off, the behavior is the same as with Chrome.

Still two questions remain:

1) Why does my eBlocker allow the trackers blocked by Safari without need of an exception rule? How can I find out which trusted app may contain these exceptions?

2) Why do I have to set at least one rule to "disabled" to be able for creating a Trusted App for test (see tooltip)? Typically, I want to change a rule from "eBlocker disabled" to "eBlocker enabled" not vise versa.

Best regards,

Valentin

@valentin Just to make sure we are talking about the same version. Are you running eOS 2.5.x on Raspberry?

If it's rather related to the new eOS 2.5.4. on M2+/white cube, I kindly invite you to share your experiences in the corresponding supporter forums thread only to not get mixed up.

Posted by: @valentin

Why does my eBlocker allow the trackers blocked by Safari without need of an exception rule?

Can you please name trackers that Safari blocks but eBlocker not. I'd doubt this is the case but we are here to improve...

I personally also doubt that this is the cause for the issues described above. It might rather be a surrogate issue (that @mainzelM is implementing currently). Background: Some website don't work/load/display properly if some script is blocked. The idea of surrogates is to load a script from eBlocker (instead of the original site) that contain certain functions to make the site work properly while not doing anything dangerous (as the originally blocked script).

Posted by: @valentin

How can I find out which trusted app may contain these exceptions?

All exceptions from all apps (as a flattened list) are the "Trusted Website" - a tab next to "Trusted Apps" - and you can simply use the search function. If you can't find the exception there - there is none. For sure there are no "hidden" exceptions or such... - if that's what you are suggesting...?!

Posted by: @valentin

Why do I have to set at least one rule to "disabled" to be able for creating a Trusted App for test (see tooltip)? Typically, I want to change a rule from "eBlocker disabled" to "eBlocker enabled" not vise versa.

Sorry I'm lost and not sure what you are talking about - (which tooltip?) - where are you within eBlocker? Could you please be a little more clear on the single steps you are performing, what you experience and how you feel it should be improved. Screenshots maybe make it more transparent?

Thanks much for your help.

Posted by: @benne

Just to make sure we are talking about the same version. Are you running eOS 2.5.x on Raspberry?

Yes, its eBlocker on a Raspberry Pi 3+

Posted by: @benne

Can you please name trackers that Safari blocks but eBlocker not. I'd doubt this is the case but we are here to improve...

Unfortunately, I cannot name them because Safari does not tell me which URL it has blocked. The only thing I could do is somehow deactivating all trusted apps and to try again with eBlocker logging.

Posted by: @benne

For sure there are no "hidden" exceptions or such... - if that's what you are suggesting...?!

That is not what I meant. I was missing a way to find the trusted app which belongs to a given URL. But the question is answered with the "Trusted Website" tab. I did not understand that "Name" is reflecting the corresponding Trusted App (see hardcopy #1)

Posted by: @benne

Sorry I'm lost and not sure what you are talking about - [..] Screenshots maybe make it more transparent?

Sorry for the confusion. I was moving too fast. What I mean is: Let us assume I have recorded some URLs  (see hardcopy #2)

Now let us assume that eBlocker blocks an URL which my WEBsite needs for correct working, e.g. one of the URLs in hardcopy #3.

Changing one or more of them from "current rule: eBlocker disabled" to "eBlocker enabled" will not enable the buttons for temporary tests (hardcopy #4). But exactly this is what I would need more often: Does the website work correctly with my temporary rule?

The tooltip of button "create new" and "add to existing" explain me that this will only work if i change a rule to "eBlocker disabled" (hardcopy #5)

I hope this helps you

Best regards,

Valentin

hardcopy #1 is attached here.

hardcopy #2

hardcopy #3

hardcopy #4

hardcopy #5

Posted by: @valentin

 

Changing one or more of them from "current rule: eBlocker disabled" to "eBlocker enabled" will not enable the buttons for temporary tests (hardcopy #4). But exactly this is what I would need more often: Does the website work correctly with my temporary rule?

The tooltip of button "create new" and "add to existing" explain me that this will only work if i change a rule to "eBlocker disabled" (hardcopy #5)

Hm, I'm also slightly confused but maybe this helps: "eBlocker enabled" means that the eBlocker will analyse connections to that URL. As this is the default, there is nothing to test or add to an app. "eBlocker disabled" means, that eBlocker will NOT analyse the URL, which can be tested and also persisted in an "app".

Best regards,

Martin

@valentin At least I got it now 😉 A minor bug as there is a workaround, I guess.

Btw: There is a trick to add several attachments in one post: add attachment, post, edit post, add attachment, post, repeat...😁😎

Hello,
i have been using the eBlocker on a Raspberry Pi 4B 2GB for two weeks. My router is a FritzBox 7490. I followed the following instructions ( https://eblocker.org/de/magazin/manuelle-konfiguration-mit-der-fritzbox/).

I have three problems with my eBlocker, which I cannot solve.
1. eBlocker Mobile deactivates itself after every restart and automatic update. Of course the VPN access does not work anymore. Therefore I had to deactivate the automatic updates and now I always have to remember to reactivate eBlocker Mobile after a restart.

2. it happens again and again that our smartphones (Android - Galaxy S7 and S8) do not get an IP address. The network mode is set to expert and eBlocker is the DHCP server. If this happens, I have to restart the eBlocker. After that our devices get an IP again. This happens at least once a day, mostly even more often.

3. in the events you can see that 1-2 times per hour the network connection is disconnected ("The LAN connection to the eBlocker was interrupted.") Always three seconds later it is restored ("The LAN connection to the eBlocker was restored.").

Do any of you also have these problems?

I have already contacted the support and sent them my diagnostic report. Unfortunately they don't provide individual support and have referred me to the forum.

Can anyone help me.
Thanks in advance.

@Privacy

Hello and welcome to the community

Which Update are you using in the Fritzbox 7490?

Tested with another LAN cable?

AS your description and the logs tell, that the eBlocker disconnects from the network, the behaviour is "correct". No DHCP server, no IP adress...

And this is seem to be the reason, why eBlocker mobile also "deactivates" itself.

Why are you using the expert network mode? Did you have trouble using the normal mode?

If the normal mode is in use, the network connection from your mobile should not stop working.. maybe it is also worth trying this out.

Regards

Sven

@privacy I took the freedom to join your post to the corresponding bug thread so it‘s all in one place. (You might want to check this thread too)

Posted by: @privacy

eBlocker Mobile deactivates itself after every restart and automatic update.

This is a known issue and that will be fixed for the final release (see thread)

Posted by: @privacy

in the events you can see that 1-2 times per hour the network connection is disconnected

This is odd. I‘m with @calimero and suppose it‘s hardware/power/port/7490 related. Next to changing the LAN cable, I would try a different router port and switching raspi power supply.

If you have a spare switch, plug it in between raspi and 7490.

Even better if you have a spare router that spans a new (logically separated) network from your 7490. Put just a client, the router and eBlocker in this network and repeat the test. This is to make sure the 7490 is (not) the culprit here. It‘s quite a „trouble device“ anyway...

Posted by: @privacy

it happens again and again that our smartphones (Android - Galaxy S7 and S8) do not get an IP address.

I wonder / I‘m not clear if the network disconnects (discussed above) correlate timewise to your DHCP issues. So if you check the events, does the outage match to the time you try to use the client?

Does this DHCP issue happen on other (non mobile, non android) clients too? (or just on the Galaxy)

THX!

Hello CalimerO, hello Random,

thanks for your answers.
My FritzBox has the latest update (07.12).
I use the expert mode because the 7490 is not compatible with the automatic network mode. https://eblocker.org/de/magazin/manuelle-konfiguration-mit-der-fritzbox/).
The information that eBlocker Mobile deactivates itself after each restart and this is already known is very useful for me. Thanks for that.
Only the two Samsung Smartphones always get no IP address. With our laptops I have not yet noticed this phenomenon.
Between the FritzBox and the eBlocker is another switch. I will replace it with a new one and get back to you.
Thanks for the quick help.

Translated with www.DeepL.com/Translator (free version)

@privacy

Maybe with the beta Firmware for 7490 or the near 7.20 FritzOS the problems will went away.

I'm running 7.20 (and all early labor beta releases) on my 7590 and actually the 07.19-81737 BETA on my 7490 without any trouble.

cheers Sven

can't update nor activate license.

i tried network mode automatic and network mode individual.

i have a FritzBox 7590 everything works there.

i included some log files

https://ufile.io/hm5wy4t2

eblocker-diagnostics-report(1) is with network mode automatic

eblocker-diagnostics-report(2) is with network mode individual

@mcmarius11 Make sure eBlocker has Internet connection, screenshot shows it doesn‘t. Maybe traffic to eBlocker gets blocked for some reason.

And please make also sure to post in the right thread...

THX!

@random

I directly connected it to the router, I changed many settings I don't know why it thinks that it does not have internet. I put some log files in the zip above. eBlocker is my DHCP and DNS Server everything works except that I can't update nor accept the license. It would be awesome if someone could help

I use the raspberry pi 3

Hi there, haveing same problem as McMarius11.

Access to the internet is there, for example updates are running.

Using a very early white box with my personal lifetime key (and i'm not able to switch the license to the public key).

@mcmarius11 @det This thread is the general eOS 2.5 bug thread, NOT the one for WHITE CUBES.

I assume from your posts you try to beta-update the white cube. That‘s great! But this is mixing up this thread very much. Please use the other thread that had been linked everywhere (ie. email, dev status thread, ...). 

Fact is: your eBlocker can not communicate with the update server (that‘s why the license is not shown). Maybe the server is down. I gonna check later...

THX for your posts! 

@all We are aware of an update server issue that has been fixed meanwhile. Please retry.

THX!

@random

Now it works, I get the licence agreement and I can update it. Thanks again for the quick fix 🙂

@random Sorry for inconvenience. Yes, now it works. Upgraded last night on a very smooth way. Result looks well. Thx

Hi everyone, the problem was actually with my switch. Thanks for your help.