121–130 of 152 posts
If you're blocking Instagram, shouldn't you be blocking the Oculus Rift site (and any subdomains) too?
Not really, Instagram is a social network, Oculus is a device? It depends on the purpose of the list, of course, but for me they're very different.
Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets). If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables…
what's AS number? how can I find out what a AS number for a domain or ip address is?
Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets). If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables…
I was at a hackathon a few weekends ago, and to my surprise I needed to register a domain name and get an SSL certificate for it. I thought I was unreconcilably blocked for the duration of the hackathon, as DNS propagation disclaimers give itself 72 hours, and SSL certificates require who knows what. I was able to get a completely new domain with Amazon Route 53 and Amazon's free SSL certificates in 20 minutes. So ye…
You can get a cheapo SSL certificate in about 5 minutes if you've made one recently, otherwise it takes me about 30 minutes to jump through all the hoops.
Earlier quoted context omitted.
I agree. From this project I discover FreeContributor [1], which use dnsmasq has a DNSBL. [1] https://github.com/tbds/FreeContributor
Is it possible to apply this at the network level? I want to update my home router easily so that all devices in my home can benefit, not just my own laptop (since most of these lists are just updating /etc/hosts)
IMHO the only way to block things efficiently is via a proxy these days, IP/domain-based blocking are not reliable or efficient.
Earlier quoted context omitted.
I agree. From this project I discover FreeContributor [1], which use dnsmasq has a DNSBL. [1] https://github.com/tbds/FreeContributor
Is it possible to apply this at the network level? I want to update my home router easily so that all devices in my home can benefit, not just my own laptop (since most of these lists are just updating /etc/hosts)
Yes. Please check pi-hole project [1] or flash your router with open-wrt/dd-wrt and run dnsmasq with the FreeContributor lists.
Earlier quoted context omitted.
The problem with blocking all google doains is the amount of sites it would break. Youtube, gmail, googleapis for js libraries, google's blog platform, maps based on google maps and more would break.
Technically true, but blocking all Facebook domains breaks comments on many sites and the login feature on a few crucial ones too. It also 100% breaks your social life, but maybe there's little of that left to disrupt anyway, amongst the typical target audience for these lists :P
Earlier quoted context omitted.
Is it possible to apply this at the network level? I want to update my home router easily so that all devices in my home can benefit, not just my own laptop (since most of these lists are just updating /etc/hosts)
Is it possible to apply this at the network level? Yes. Please check pi-hole project [1] or flash your router with open-wrt/dd-wrt and run dnsmasq with the FreeContributor lists. [1] https://pi-hole.net/
do people usually do this directly on their FIOS router or is it easier to get a separate wifi router?
Earlier quoted context omitted.
Is it possible to apply this at the network level? Yes. Please check pi-hole project [1] or flash your router with open-wrt/dd-wrt and run dnsmasq with the FreeContributor lists. [1] https://pi-hole.net/
sweeeet thanks. do people usually do this directly on their FIOS router or is it easier to get a separate wifi router?
https://pi-hole.net/faq/can-i-set-the-pi-hole-to-be-the-dns-...
good stuff
Isn't Ghostery a better solution for something like this? If we are talking about browsers that is.