AdvancedBlocking

[PeterKnotek]

HI

I have a little problem with Adv.Block
Here is my cfg

{
"enableBlocking": true,
"blockListUrlUpdateIntervalHours": 24,
"localEndPointGroupMap": {},
"networkGroupMap": {
"10.15.100.160": "NetflixAllowed",
"10.15.19.70": "NetflixAllowed",
"172.16.0.0/12": "fully_blocked",
"10.0.0.0/8": "fully_blocked",
"172.23.0.0/16": "Printers",
"10.15.20.39": "NoESET",
"172.29.1.11": "NoESET"
},
"groups": [
{
"name": "NoESET",
"enableBlocking": true,
"allowTxtBlockingReport": true,
"blockAsNxDomain": true,
"blockingAddresses": [
"127.0.0.1"
],
"allowed": [],
"blocked": [],
"allowListUrls": [],
"blockListUrls": [],
"allowedRegex": [
"^(.\.)?google\..$",
"^(.\.)?unlp\.sk$",
"^(.\.)?unlp\.local$",
"^www\.vszp\.sk$",
"^www\.union\.sk$",
"^www\.dovera\.sk$",
"^(.\.)?data\.microsoft\.com$",
"^(.\.)?edge\.microsoft\.com$",
"^(.\.)?mp\.microsoft\.com$",
"^(.\.)?download\.microsoft\.com$",
"^(.\.)?go\.microsoft\.com$",
"^(.\.)?download\.windowsupdate\.net$",
"^(.\.)?download\.windowsupdate\.com$",
"^(.\.)?ctldl\.windowsupdate\.com$",
"^(.\.)?cxcs\.microsoft\.net$",
"^(.\.)?ecs\.office\.com$",
"^(.\.)?update\.microsoft\.com$",
"^(.\.)?config\.edge\.skype\.com$",
"^(.\.)?api\.msn\.com$",
"^(.\.)?assets\.msn\.com$",
"^(.\.)?login\.live\.com$",
"^(.\.)?digicert\.com$",
"^(.\.)?azureedge\.net$",
"^(.\.)?login\.microsoftonline\.com$",
"^(.\.)?wdcp\.microsoft\.com$",
"^(.\.)?wdcpalt\.microsoft\.com$",
"^(.\.)?akamaized\.net$",
"^(.\.)?windows\.msn\.com$",
"^(.\.)?trafficmanager\.net$",
"^(.\.)?cloudapp\.azure\.com$",
"^(.\.)?content\.office\.net$",
"^(.\.)?support\.microsoft\.com$",
"^(.\.)?smartscreen\.microsoft\.com$",
"^(.\.)?msauth\.net$",
"^(.\.)?nczisk\.sk$",
"^(.\.)?www\.bing\.com$",
"^(.\.)?storage-vszp-prod\.predu\.sk$",
"^(.\.)?dns\.msftncsi\.com$",
"^(.\.)?eset\..$"
],
"blockedRegex": [
"."
],
"regexAllowListUrls": [],
"regexBlockListUrls": [],
"adblockListUrls": []
},
{
"name": "NetflixAllowed",
"enableBlocking": true,
"allowTxtBlockingReport": true,
"blockAsNxDomain": true,
"blockingAddresses": [],
"allowed": [
"netflix.com",
".netflix.com"
],
"blocked": [],
"allowListUrls": [],
"blockListUrls": [],
"allowedRegex": [],
"blockedRegex": [],
"regexAllowListUrls": [],
"regexBlockListUrls": [],
"adblockListUrls": []
},
{
"name": "fully_blocked",
"enableBlocking": true,
"allowTxtBlockingReport": true,
"blockAsNxDomain": true,
"blockingAddresses": [
"127.0.0.1"
],
"allowed": [],
"blocked": [],
"allowListUrls": [],
"blockListUrls": [],
"allowedRegex": [],
"blockedRegex": [
"^(.\.)?sme\..$",
"^(.\.)?alibaba\..$",
"^(.\.)?aliexpress\..$",
"^(.\.)?jwplayer\..$",
"^(.\.)?netflix\..$",
"^(.\.)?ccleaner\..$",
"^(.\.)?avast\..$",
"^(.\.)?tahaj\..$",
"^(.\.)?telegram\..$",
"^(.\.)?kukaj\..$",
"^(.\.)?uloz\..$",
"^(.\.)?sledujteto\..$",
"^(.\.)?streamuj\..$",
"^(.\.)?fastshare\..$",
"^(.\.)?prehraj\..$",
"^(.\.)?datoid\..$",
"^(.\.)?sdilej\..$",
"^(.\.)?zalohuj\..$",
"^(.\.)?webshare\..$",
"^(.\.)?uloz\..$",
"^(.\.)?flixtor\..$",
"^(.\.)?kra\..$",
"^(.\.)?mcafee\..$",
"^(.\.)?horoskopy\.cz$",
"^(.\.)?disqus\.com$",
"^(.\.)?blesk\.cz$",
"^(.\.)?t\.me$",
"^(.\.)?mega\.io$"
],
"regexAllowListUrls": [],
"regexBlockListUrls": [],
"adblockListUrls": []
},
{
"name": "Printers",
"enableBlocking": true,
"allowTxtBlockingReport": true,
"blockAsNxDomain": true,
"blockingAddresses": [
"127.0.0.1"
],
"allowed": [
"ccc.hpeprint.com",
"h10141.www1.hp.com"
],
"blocked": [],
"allowListUrls": [],
"blockListUrls": [],
"allowedRegex": [],
"blockedRegex": [
"."
],
"regexAllowListUrls": [],
"regexBlockListUrls": [],
"adblockListUrls": []
}
]
}

My problem is :
"10.15.100.160": "NetflixAllowed",
"10.15.19.70": "NetflixAllowed",

• why IP 10.15.100.161 has DNS ansver form eg kukaj.io ( is blocked regex ## "^(.\.)?kukaj\..$", ##
  • ich change IP to 10.15.100.161 block for kukaj.io work
    Need block for all some domain eg google | netflix | and for other IP allow allow netflix pr google or other domains
    But ... not work for IP
    "10.15.100.160": "NetflixAllowed",
    "10.15.19.70": "NetflixAllowed",

Anyone help?
Thanks

[ShreyasZare]

Thanks for the post. I am not exactly sure I understood your query since you have mentioned 10.15.100.161 twice and said it both works and not work.

Also, how are you testing the config? The test must be done from the same client IP address using tools like nslookup.

[ShreyasZare]

Thanks for the details. Does the regex text file include the regex with those double quotes? If yes, then remove those quotes.

Since you have the regex list configured as allowed list, and that there is nothing configured for blocking, there wont be anything to do for the app here. All those domain names in the list are already allowed and would resolve.

[PeterKnotek]

Thanks very very

"^(..)?streamuj..$" - not work
^(..)?streamuj..$ - not work
(..)?streamuj..$ - work
but only if this value is like web content

Last question
in cfg exist : "blockListUrlUpdateIntervalHours": 1,
can use : "allowListUrlsUpdateIntervalHours":1, ????

Thanks

[ShreyasZare]

You're welcome. The same block list update interval option is used for updating the allow lists too.

[PeterKnotek]

Thanks

Bud auto cerate every one hour file :
/etc/dns/apps/Advanced Blocking/blocklists/4cbc8e0d8a6b017fb2d54ecfe0831162549cdce334f30e36820764c971e3b998

• I think this file generate by defaul CFG

But also files where generated by maunal CFG with : "regexAllowListUrls" or "allowListUrls" is created in " /etc/dns/apps/Advanced Blocking/blocklists/ "

• I thing ... when is fille ( Allow list ) - the folder should be "/etc/dns/apps/Advanced Blocking/allowlist" - not blocklists

And last idea : can be create cfg for : allowListUrlsUpdateIntervalHour or allowListUrlsUpdateIntervalMinutes ???

• eg minicron ??

And this is probably the error or bug :
1 -

• if change primary www contect where is data for "allowListUrls"
  • and confirm APPLY in the APP setting for AdvancedBlocking
  • then NOT generate file whit fresh content - content is old // floods
  • the file will not be overwritten
    2 -
• when delete files in "/etc/dns/apps/Advanced Blocking/blocklists/*"
• if change primary www contect where is data for "allowListUrls"
  • and confirm APPLY in the APP setting for AdvancedBlocking
  • then generate file whit fresh content - content is OK

Thanks very very very much for your answer

[ShreyasZare]

Bud auto cerate every one hour file : /etc/dns/apps/Advanced Blocking/blocklists/4cbc8e0d8a6b017fb2d54ecfe0831162549cdce334f30e36820764c971e3b998

Those are cache files so that the URL can be loaded without fetching it every time from the Internet. As a user, you do not need to change any of these file on the disk. Always use the GUI to do the config.

But also files where generated by maunal CFG with : "regexAllowListUrls" or "allowListUrls" is created in " /etc/dns/apps/Advanced Blocking/blocklists/ "

I thing ... when is fille ( Allow list ) - the folder should be "/etc/dns/apps/Advanced Blocking/allowlist" - not blocklists

That is just a cache folder and name of the folder does not matter. Both block list and allow list cache files are stored there.

And last idea : can be create cfg for : allowListUrlsUpdateIntervalHour or allowListUrlsUpdateIntervalMinutes ???

* eg minicron ??

These lists are not frequently updates so an hour based interval is most suitable for this which is why there is no option to configure it in minutes. People configuring 1 min update interval would cause these list webservers to get flooded unnecessarily.

There is no plan to have a separate interval variable for allow list since it does not make any difference to treat it separately from block list.

And this is probably the error or bug : 1 -

* if change primary www contect where is data for "allowListUrls"
  
  * and confirm APPLY in the APP setting for AdvancedBlocking
  * then NOT generate file whit fresh content - content is old // floods
  * the file will not be overwritten
    2 -

The file update mechanism update files based on the time interval and the cache file's date last modified time stamp. It will not always fetch the same file if not needed. This is not a bug but optimization done to prevent frequently fetching lists.

* when delete files in "/etc/dns/apps/Advanced Blocking/blocklists/*"

* if change primary www contect where is data for "allowListUrls"
  
  * and confirm APPLY in the APP setting for AdvancedBlocking
  * then generate file whit fresh content - content is OK

If you delete cache file then it will get fetched as expected.

Thanks very very very much for your answer

You're welcome.