Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Blocklist of all Facebook domains

github.com

Post reply on HN
Print view View original

51–60 of 152 posts

Re: Blocklist of all Facebook domains

#51

Post by bogomipz »

Borating wrote: post #30
marios wrote: post #15

Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets). If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables…

Like this [1], More details at [2] [1] http://www.commandlinefu.com/commands/view/16096/block-all-f... [2] http://www.tcpiputils.com/browse/as/32934

Why would you wait and drop the traffic inbound? Why would you let your browser send the SYNs at all? This rule doesn't make any sense.

Re: Blocklist of all Facebook domains

#52

Post by zxcvcxz »

Honest question because I seriously don't know: Is facebook really worse than google when it comes to privacy?

I kind of wonder who exactly are the people telling everyone to block facebook everywhere while everyone seems to collectively ignore google.

Google and facebook seem to both purposely ignore the known implications of their data collection programs. They likely have handed over data to the NSA, and we know they sell the data.

Re: Blocklist of all Facebook domains

#53

Post by cheiVia0 »

petrikapu wrote: post #48

Do you how to apply this just for my user on OS X? My partner is heavy FB user and I don't want to block her...

uBlock Origin can handle hosts files, so you can just add it on the bottom of the Third Party Filters tab. It will auto-update it too.

https://raw.githubusercontent.com/jmdugan/blocklists/master/...

Re: Blocklist of all Facebook domains

#54

Post by bogomipz »

droopyEyelids wrote: post #44
marios wrote: post #15

Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets). If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables…

Facebook only has one AS?

That's not uncommon.

Re: Blocklist of all Facebook domains

#57

Post by walterbell »

Namidairo wrote: post #7
curiousgal wrote: post #4

>On Windows 7, the default AV security scan will try to remove the # facebook.com entry Wat?

I'm guessing some sort of crude malware tried to MitM Facebook logins so they started cleaning host files?

Microsoft was an investor in Facebook, http://whoownsfacebook.com and they are planning an undersea cable between the US and Europe that will only be used by the two companies.

Re: Blocklist of all Facebook domains

#58

Post by jzwinck »

droopyEyelids wrote: post #44
marios wrote: post #15

Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets). If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables…

Facebook only has one AS?

Most likely yes. There are only about 50k public autonomous systems on the entire Internet. The problem of course is already mentioned by another commenter: some FB assets are in other ASes.

https://en.m.wikipedia.org/wiki/Autonomous_system_(Internet)

Re: Blocklist of all Facebook domains

#59

Post by puddintane »

marios wrote: post #15

Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets). If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables…

Very interesting after looking up the AS number [1] you provided it includes domains that are not on that GitHub list - as you mentioned. I would have to agree with this being the better method to blocking facebook.

[1] http://www.tcpiputils.com/browse/as/32934 * note there are more than average ads on this site and it's a bit plain but this was the only one I could find that, with my brief searching, showed ip prefixes associated to the AS number.

If anyone has a better lookup tool that'd be great!

edit: Should also note that since other users are mentioning they might be under multiple AS number's maybe the ticket would be to setup a GitHub that collected these AS numbers for FB.

edit 2: found a less ad filled site! http://ipduh.com Search AS32934 click "prefixes" at top

Re: Blocklist of all Facebook domains

#60

Post by [deleted] »

puddintane wrote: post #59
marios wrote: post #15

Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets). If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables…

Very interesting after looking up the AS number [1] you provided it includes domains that are not on that GitHub list - as you mentioned. I would have to agree with this being the better method to blocking facebook. [1] http://www.tcpiputils.com/browse/as/32934 * note there are more than average ads on this site and it's a bit plain but this was the only one I could find that, with my brief searching, showed ip prefi…

[deleted]
Post reply on HN