logo       

Re: RE: Blocking Web addresses: msg#00349

security.firewalls.m0n0wall

Subject: Re: RE: Blocking Web addresses

Rather than to fix the dns forwarder, the webgui should allow users to enter banned domains names.
-A doubleclick.net/doubleckick.com/blah.com/younameit.net 127.0.0.1 should be added to the dnsmasq launch command line

from man 8 dnsmasq:
-A, --address=/<domain>/[domain/]<ipaddr>
Specify an IP address to return for any host in the given domains. Queries in the domains are
never forwarded and always replied to with the specified IP address which may be IPv4 or IPv6.
To give both IPv4 and IPv6 addresses for a domain, use repeated -A flags. Note that
/etc/hosts and DHCP leases override this for individual names. A common use of this is to
redirect the entire doubleclick.net domain to some friendly local web server to avoid banner
ads.



Stefan Stolk - Dynasoft.nl wrote:
Yep, that is what I requested. Maybe it's an idea to fix the dns
forwarder in a way to support wildcards and a "block" function or so.

--Stefan

-----Oorspronkelijk bericht-----
Van: Jim Gifford [mailto:jim@xxxxxxxxxxxx] Verzonden: vrijdag 13 augustus 2004 0:41
Aan: m0n0wall@xxxxxxxxxxxxx
Onderwerp: Re: [m0n0wall] RE: Blocking Web addresses


Or, if you like to do things the "easy" way, then go to the m0n0wall
gui, click on "DNS forwarder", enable, and click on the "+" down below
to add an entry for "ads.youdontlikeit.com" to have an IP of 127.0.0.1.
Accomplishes the same effect within the existing framework of m0n0
without requiring any hacking.

hth,
jim

PS, I don't do this because I don't see a way to add "*.doubleclick.net"
and I don't feel like adding every single name they use (or even worse,
the hitbox set of servers...). Seems like there would still be a nice
feature to have some wildcard dns based site blocking.

On Thu, Aug 12, 2004 at 11:42:11PM +0200, Alex Sandini wrote:

m0n0 comes with dnsmasq

(http://www.thekelleys.org.uk/dnsmasq/doc.html).
Add
echo "127.0.0.1 ads.youdontlikeit.com" >> /etc/hosts
for every site You don't like at boot time somehow and tell dnsmasq to


reload /etc/hosts if needed (not sure).

Pat Ellison wrote:

This would be incrediblly usefull.. Block al those *&^($ doubleclick sites..



-----Original Message-----
From: Craig [mailto:news@xxxxxxxxxxxxx]
Sent: Sunday, August 01, 2004 7:29 AM
To: m0n0wall@xxxxxxxxxxxxx
Subject: Blocking Web addresses


Hello, I am looking for a solution to control the ability of blocking
websites, or shall I say block all and allow certain authorised

websites.
I
like the compactness of M0N0Wall, and I am wondering if there is a

way of

doing this with this system. Any ideas?

Craig



---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall-unsubscribe@xxxxxxxxxxxxx
For additional commands, e-mail: m0n0wall-help@xxxxxxxxxxxxx



---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall-unsubscribe@xxxxxxxxxxxxx
For additional commands, e-mail: m0n0wall-help@xxxxxxxxxxxxx



---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall-unsubscribe@xxxxxxxxxxxxx
For additional commands, e-mail: m0n0wall-help@xxxxxxxxxxxxx



---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall-unsubscribe@xxxxxxxxxxxxx
For additional commands, e-mail: m0n0wall-help@xxxxxxxxxxxxx



<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise