Live data from Hacker News

Lockdown: Open-source firewall that blocks app tracking, ads, snooping

lockdownhq.com

41–50 of 79 posts

Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping

#41
As a pihole user for years I recently bought a firewalla blue. Installed pihole on the firewalla, turned off firewalla ad blocking, and done.

I can VPN to my home ad blocking network from anywhere, have more insights into my home network shenanigans, and still use my personal block list built over years. Super easy and most importantly, done.

Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping

#43

It's functions similar to other mobile ad-blockers in that it can route all your phones traffic over a VPN tunnel it establishes. But the ad-blocking vpn server is 127.0.0.1, so perhaps, like it says all the blocking happens right on your phone. This is what I've been waiting for if this works. Still getting ads on instagram though.

I have an old version of adblock for ios that can block (and even break) apple services. Just what I wanted.

Apple forced the developer to "upgrade" it to use DNS based blocking and provide no lists of adservers, which pretty much let everything back through.

Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping

#44
post #37

Earlier quoted context omitted.

If you use a pay-as-you-go network like Google Fi, and it saves you more than 1 GB, then it saves you money.

$10 for 1GB?!

$10/GB is pretty much the going rate for a la carte data on all major US carriers. You typically get better rates for your monthly plan but if you go over you're flipped back to the a la carte pricing.

Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping

#46
post #30
post #16

Earlier quoted context omitted.

On Android, DNS66 does exactly this, available on F-Droid. https://f-droid.org/en/packages/org.jak_linux.dns66/

As does NetGuard, both on the Play store and F-Droid: https://www.netguard.me/ A paid upgrade to the Play store version lets you filter traffic like adblock, or just use the releases from Github (they allow filtering, but not most pro features)

Do you have any tips on how to set up NetGuard well? I use an app now called "NoRoot Firewall" that lets me filter on ip address or url and also port, with wildcards. (Ex. *.facebook.com). I cannot find a way to set up NetGuard since it appears to me that I can only decide on each request, which makes it near impossible to ever whitelist/blacklist something like AWS, which uses an ever rotating number of locations.

Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping

#47
post #30

Earlier quoted context omitted.

As does NetGuard, both on the Play store and F-Droid: https://www.netguard.me/ A paid upgrade to the Play store version lets you filter traffic like adblock, or just use the releases from Github (they allow filtering, but not most pro features)

Do you have any tips on how to set up NetGuard well? I use an app now called "NoRoot Firewall" that lets me filter on ip address or url and also port, with wildcards. (Ex. *.facebook.com). I cannot find a way to set up NetGuard since it appears to me that I can only decide on each request, which makes it near impossible to ever whitelist/blacklist something like AWS, which uses an ever rotating number of locations.

Nrf hasn't been updated in a very long time, but as you say you can whitelist/blacklist pretty easily. Sadly, netguard doesn't have this facility as a global, and only allows it to be done on a clunky, per-app basis. I seem to recall the author not being receptive to the idea.

Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping

#48

It's functions similar to other mobile ad-blockers in that it can route all your phones traffic over a VPN tunnel it establishes. But the ad-blocking vpn server is 127.0.0.1, so perhaps, like it says all the blocking happens right on your phone. This is what I've been waiting for if this works. Still getting ads on instagram though.

On iOS I use DNSCloak. It takes some work to setup, like downloading the blocklist from somewhere yourself, but it works. I will try lockdown to see how it compares though. It looks easier.

Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping

#49
On macOS, we got a port of OpenBSD pf (probably not up to date though). I've been able to convert hosts files to OpenBSD pf format in, when was it, 2002? What you'd need to do is create an anchor. Perhaps there's a GUI for it as well for those who prefer. There's at least pfBlockerNG which basically does that for PfSense. [1] FWIW, all of this existed before Pi-Hole (or Raspberry Pi for that matter). IIRC there was also a converter script for hosts files to IPTables rules.

Is it possible to import such rules to Little Snitch? That's the go to firewall on macOS, though it is proprietary. There's also LuLu, a FOSS firewall for macOS. [2]

Now, from my memory, these block lists did cost quite some memory on a machine with 512 MB RAM. Even though it'd do dedup. What one could also do is build up a VPN with a remote server (in the cloud, or at home) and use say use WireGuard to have a secure connection while using a remote DNS on the VPN to get ads blocked.

[1] https://www.linuxincluded.com/block-ads-malvertising-on-pfse...

[2] https://github.com/objective-see/LuLu

Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping

#50
post #3

Earlier quoted context omitted.

> With TLS and it surely not mitm-ing connections, that's all it can do correct? Unless it also acts as a web-proxy, yes.

It can possibly access all your activity, contacts, microphone, and camera... Hard pass from me at the moment. :/

> It can possibly access all your activity, contacts, microphone, and camera... Hard pass from me at the moment. :/

Camera and mic? How does it do this as a vpn? I see no requests for such things in iOS settings for the app.

Post reply on HN