Netgate SG-1000 microFirewall

Author Topic: Adblock browser addon vs DNSBL Easylist  (Read 619 times)

0 Members and 1 Guest are viewing this topic.

Offline tagit446

  • Newbie
  • *
  • Posts: 15
  • Karma: +2/-0
    • View Profile
Adblock browser addon vs DNSBL Easylist
« on: January 07, 2018, 07:51:29 pm »
Sorry if this has been asked before and it may be a dumb question but I use Adblock addon in Chrome and also use the DNSBL Easylist and Easyprivacy in pfSense.

Why does my Adblock still show that it is blocking ads?

I ask because from what I can tell, Adblock use's Easylist and Easyprivacy the same as DNSBL.

It would seem DNSBL should be blocking the same ads before they get to the browser but isn't.
pfSense v2.4.2 - RELEASE (amd64) running on AMD Phenom(tm) II X4 965 Processor, Asus M4A89GTD PRO motherboard, Dell / Intel Pro/1000 VT Quad Port PCI-E Gigabit NIC Dell P/N 0H092p

Offline V3lcr0

  • Full Member
  • ***
  • Posts: 228
  • Karma: +11/-0
    • View Profile
Re: Adblock browser addon vs DNSBL Easylist
« Reply #1 on: January 08, 2018, 04:51:09 pm »
I can't speak to the Adblock lists but I suspect they have more then DNSBL Easylist and Easyprivacy...try adding more custom lists.

I didn't find Easylist and Easyprivacy very comprehensive....

Offline tagit446

  • Newbie
  • *
  • Posts: 15
  • Karma: +2/-0
    • View Profile
Re: Adblock browser addon vs DNSBL Easylist
« Reply #2 on: January 08, 2018, 05:34:20 pm »
From the Adblock browser option it shows that it uses Easylist and Easyprivacy. I just checked again and it does also show that it uses a custom list (w/no details), a Cryptocurrency (Bitcoin) Mining Protection List and a Malware protection list.

With that said, for DNSBL I use the following custom lists.

https://openphish.com/feed.txt
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
http://www.malware-domains.com/files/justdomains.zip
https://isc.sans.edu/feeds/suspiciousdomains_Low.txt
https://isc.sans.edu/feeds/suspiciousdomains_Medium.txt
https://isc.sans.edu/feeds/suspiciousdomains_Medium.txt
https://isc.sans.edu/feeds/suspiciousdomains_High.txt
https://raw.githubusercontent.com/Dawsey21/Lists/master/main-blacklist.txt
http://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt
http://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
http://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt
https://gist.githubusercontent.com/BBcan177/b6df57cef74e28d90acf1eec93d62d3b/raw/f0996cf5248657ada2adb396f3636be8716b99eb/MS-4
https://raw.githubusercontent.com/ZeroDot1/CoinBlockerLists/master/hosts_browser
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
http://raw.githubusercontent.com/quidsup/notrack/master/trackers.txt
http://raw.githubusercontent.com/eladkarako/hosts.eladkarako.com/master/_raw__hosts.txt
https://mirror1.malwaredomains.com/files/justdomains
http://mirror1.malwaredomains.com/files/immortal_domains.txt
https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews-gambling-porn/hosts
http://avant.it-mate.co.uk/dl/Tools/hpHosts/HOSTS.zip
https://adaway.org/hosts.txt
https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&startdate%5Bday%5D=&startdate%5Bmonth%5D=&startdate%5Byear%5D=&mimetype=plaintext
http://someonewhocares.org/hosts/hosts
http://sysctl.org/cameleon/hosts
http://winhelp2002.mvps.org/hosts.txt
http://www.malekal.com/HOSTS_filtre/HOSTS.txt
http://www.malwaredomainlist.com/hostslist/hosts.txt
https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist
https://zeustracker.abuse.ch/blocklist.php?download=hostfile
http://www.hostsfile.org/Downloads/hosts.txt
http://www.securemecca.com/Downloads/hosts.txt
http://hosts-file.net/exp.txt
http://hosts-file.net/ad_servers.txt
http://hosts-file.net/emd.txt
http://hosts-file.net/hjk.txt
http://hosts-file.net/fsa.txt
http://hosts-file.net/grm.txt
http://hosts-file.net/psh.txt
http://hosts-file.net/mmt.txt
http://hosts-file.net/hfs.txt
http://hosts-file.net/pha.txt
http://hosts-file.net/wrz.txt
https://osint.bambenekconsulting.com/feeds/dga-feed.gz
http://raw.githubusercontent.com/michaeltrimm/hosts-blocking/master/_hosts.txt

I also have many IPv4 list as well. Given all the list I use I am surprised the Adblock browser addon is still showing that it is blocking things.
pfSense v2.4.2 - RELEASE (amd64) running on AMD Phenom(tm) II X4 965 Processor, Asus M4A89GTD PRO motherboard, Dell / Intel Pro/1000 VT Quad Port PCI-E Gigabit NIC Dell P/N 0H092p

Offline V3lcr0

  • Full Member
  • ***
  • Posts: 228
  • Karma: +11/-0
    • View Profile
Re: Adblock browser addon vs DNSBL Easylist
« Reply #3 on: January 08, 2018, 08:03:05 pm »
Thats a pretty rich list...are you getting alerts in pfBlocker DNSBL? Could be a red flag you have a set up issue...

Are you able to compare IPs on adBlocker lists vs your list custom IP lists? Are domains getting thru?
Do you have GeoIP blocker enabled with suspect countries?

Thanks for sharing your lists....


Offline motific

  • Jr. Member
  • **
  • Posts: 42
  • Karma: +4/-0
    • View Profile
Re: Adblock browser addon vs DNSBL Easylist
« Reply #4 on: January 23, 2018, 10:51:59 am »
Why does my Adblock still show that it is blocking ads?

pfBlocker's blocking stops domains from being accessible by redirecting requests to an internal server, it does not stop your browser from attempting to reach the site in the first place.   Adblock alters the html so that your browser doesn't even attempt to reach out (and sometimes it alters the page layout to use that space from the missing ads.

Offline anttechs

  • Jr. Member
  • **
  • Posts: 26
  • Karma: +5/-1
  • I.T Specialist & PfSense & PfBlocker Fan!
    • View Profile
    • Ant-Tech.is
Re: Adblock browser addon vs DNSBL Easylist
« Reply #5 on: January 26, 2018, 07:25:39 am »
Check out my block lists collection for Pfblocker https://ant-techs.is/ip-blocklists/
Intel(R) Celeron(R) CPU J1900 @ 1.99GHz
Current: 1992 MHz, Max: 1993 MHz
4 CPUs: 1 package(s) x 4 core(s)
AES-NI CPU Crypto: No
8 Gig RAM
250GB SSD

https://ant-techs.is/ip-blocklists

Offline anttechs

  • Jr. Member
  • **
  • Posts: 26
  • Karma: +5/-1
  • I.T Specialist & PfSense & PfBlocker Fan!
    • View Profile
    • Ant-Tech.is
Re: Adblock browser addon vs DNSBL Easylist
« Reply #6 on: February 05, 2018, 09:47:14 am »
Id Rather block it from the hole network from the router not just each computer just look at my site there are so many links to get now and I like the ransomware links now that it good to stop from the router.
Intel(R) Celeron(R) CPU J1900 @ 1.99GHz
Current: 1992 MHz, Max: 1993 MHz
4 CPUs: 1 package(s) x 4 core(s)
AES-NI CPU Crypto: No
8 Gig RAM
250GB SSD

https://ant-techs.is/ip-blocklists

Offline Tom7755

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Adblock browser addon vs DNSBL Easylist
« Reply #7 on: February 08, 2018, 08:09:12 am »
This might be a stupid question, but is your DNSBL working?

I see this behavior since DNSBL doesn't work for me because I'm also using OpenVPN.

So far I can't find a way to make them work together in a secure way.