Thanks for sharing this information.
Actually I'm planning to setup Unbound parallel to dnsmasq.
How does this impact your statement?
Will ad-blocking work with Unbound recursive DNS server?
I'm not sure how to interpret your last response.
But I assume that I can run Adblock-fast with Unbound, too.
Can I download and store the lists on an external drive, e.g. USB stick?
Using Unbound as a recursive DNS server in OpenWrt, which setup do you recommend?
@cmonty14 please review the README before asking any further questions. The subject of unbound setup/use is outside of the scope of this thread.
Actually I didn't ask questions regarding unbound setup and/or usage.
I asked which DNS setup you recommend for Adblock-fast.
Anyway, I have configured parallel dnsmasq now and will continue configuring Adblock-fast.
Is there a function in Adblock-fast that allows me to filter out a client that sends a DNS request blocked by Adblock-fast?
Is there any logging (overall)?
Nice.
I think it would be good to add https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-domains.txt blocklist as default.
Chrome begun to use port 443 for DNS as default in some cases.
This is a good solution to block that from happening.
By the way, is there a method to add/remove individual blocked/allowed domains without needing for redownload of all the block-list each time?
Just use the default configuration. As I understand it, parallel will download and parse the block lists in the same time instead of doing it sequentially. So basically it doesn't waste time.
I don't think there is such a thing.
I saw there is an option to enable debugging. You might want to try that. It enables some kind of logging but it's not recommended to leave it on apparently, since it will wear out your router's flash memory.
You can enable resolver (dnsmasq, smartdns, unbound) logging where supported. As desribed in the README, the adblock-fast does not stay in memory after preparing the combined block-list for the resolver, so it can't log any requests on its own.
As a maintainer of https-dns-proxy package I strongly disagree. Also if you have rogue devices/malicious code running on your LAN devices, blocking access to DoH/DoT servers is not the way to address the problem. For all other use cases the benefits of encrypted DNS requests in a modern world outweigh any potential issues IMHO.
Yes, the allow command from CLI. I don't have the expertise to add support for pause/allow commands to WebUI.
Aside from the Allow command, I didn't see a block command
Let me sleep on how to best implement block command.
I thought about some use for it.
For example if I want to block a website/platform at night and enable it again in the morning.
Using a cron I can accomplish it if I have this functionality in your script.
1 Like
Hi,
I'm facing an error with this allow list (white list).
Failed to process allow-list!
Errors encountered, please check the README!
Can you please advise how to fix this?
1 Like
There isn't much information about the compressed cache.
I mean, in the docs it says:
Create compressed cache of the AdBlocking file in router’s persistent memory. Only recommended to be used on routers with large ROM and/or routers with metered/flaky internet connection.
Still, how would I know if it's beneficial or not? It's not clear.
Would it prevent the redownload of block-lists upon reboot of the router?
How the cache is used? Each time there is a domain query?
What is this AdBlocking file exactly? What it's storing? domains? IPs?
Go to the system log and search "AdBlock-Fast" to get the relevant messages.
Actually there's no relevant log entry:
Mon Aug 19 08:36:22 2024 user.notice adblock-fast [8008]: Force-reloading adblock-fast 1.1.2-4...
Mon Aug 19 08:36:24 2024 user.notice adblock-fast [8008]: [DL] Allowed List: anudeepND - Whitelist (domains) [✓]
Mon Aug 19 08:36:25 2024 user.notice adblock-fast [8008]: [DL] Blocked List: Hoshsadiq - NoCoin Adblock List (hosts) [✓]
Mon Aug 19 08:36:25 2024 user.notice adblock-fast [8008]: [DL] Blocked List: SmartTV (domains) [✓]
Mon Aug 19 08:36:27 2024 user.notice adblock-fast [8008]: [DL] Blocked List: Yoyo.org - Hosts (hosts) [✓]
Mon Aug 19 08:36:28 2024 user.notice adblock-fast [8008]: [DL] Blocked List: AdguardTeam - CNAME Ads (domains) [✓]
Mon Aug 19 08:36:28 2024 user.notice adblock-fast [8008]: [DL] Blocked List: AdguardTeam - CNAME Trackers (hosts) [✓]
Mon Aug 19 08:36:28 2024 user.notice adblock-fast [8008]: [DL] Blocked List: WinHelp2002 MVPS - Hosts (hosts) [✓]
Mon Aug 19 08:36:28 2024 user.notice adblock-fast [8008]: [DL] Blocked List: AdguardTeam - CNAME Clickthroughs (domains) [✓]
Mon Aug 19 08:36:29 2024 user.notice adblock-fast [8008]: [DL] Blocked List: Kboghdady - YouTube Ads DNS (domains) [✓]
Mon Aug 19 08:36:39 2024 user.notice adblock-fast [8008]: [DL] Blocked List: StevenBlack - Unified hosts (hosts) [✓]
Mon Aug 19 08:37:19 2024 user.notice adblock-fast [8008]: [DL] Blocked List: Hagezi - Pro (domains) [✓]
Mon Aug 19 08:37:40 2024 user.notice adblock-fast [8008]: Sorting combined list [✓]
Mon Aug 19 08:40:44 2024 user.notice adblock-fast [8008]: Optimizing combined list [✓]
Mon Aug 19 08:42:42 2024 user.notice adblock-fast [8008]: Allowing domains [✗]
Mon Aug 19 08:42:44 2024 user.notice adblock-fast [8008]: Formatting merged file [✓]
Mon Aug 19 08:42:44 2024 user.notice adblock-fast [8008]: Creating dnsmasq servers file [✓]
Mon Aug 19 08:42:45 2024 user.notice adblock-fast [8008]: Removing temporary files [✓]
Mon Aug 19 08:43:03 2024 user.notice adblock-fast [8008]: Restarting dnsmasq [✓]
Because of how the final block-list is stored (TLD-optimized and sorted), it's harder to implement the block command than to allow command. For your use-case, you may want to have two copies of compressed cache and switch between them.
It depends.
It would.
No, it's to start adblock-fast upon reboot much faster by not having to re-download and re-process all the source lists. I thought README is pretty explicit that adblock-fast does not stay in memory after processing the lists and generating the resolver's block-list file, so it has nothing to do with domain queries.
It depends on the resolver/resolver option you pick.
I cannot reproduce:
edge620 in ~ # service adblock-fast dl
Force-reloading adblock-fast 1.1.2-4...
[DL] Allowed List: test (domains) [✓]
[DL] Blocked List: AdguardTeam - CNAME Ads (domains) [✓]
[DL] Blocked List: AdAway - Hosts (hosts) [✓]
[DL] Blocked List: Hoshsadiq - NoCoin Adblock List (hosts) [✓]
[DL] Blocked List: SomeoneWhoCares - Hosts (hosts) [✓]
[DL] Blocked List: WinHelp2002 MVPS - Hosts (hosts) [✓]
[DL] Blocked List: Yoyo.org - Hosts (hosts) [✓]
Sorting combined list [✓]
Optimizing combined list [✓]
Allowing domains [✓]
Formatting merged file [✓]
Creating dnsmasq servers file [✓]
Creating compressed cache [✓]
Removing temporary files [✓]
Restarting dnsmasq [✓]
adblock-fast 1.1.2-4 is blocking 30293 domains (with dnsmasq.servers) [✓]
The file you've linked was first to be processed with name test. Posting your adblock-fast config might help.
Hi, It's me again.
I'm using version 1.1.2-3. The file size will not be stored in config, still, and even the web UI can't know the file size now, getFileUrlFilesizes will get a 0 size. I have tried rules with no available problem, and nothing changes.
Thu Aug 29 19:50:28 2024 user.notice adblock-fast [13651]: Force-reloading adblock-fast 1.1.2-3...
Thu Aug 29 19:50:33 2024 user.notice adblock-fast [13651]: [DL] Blocked List: Cats-Team (dnsmasq3) [✓]
Thu Aug 29 19:50:34 2024 user.notice adblock-fast [13651]: Sorting combined list [✓]
Thu Aug 29 19:50:40 2024 user.notice adblock-fast [13651]: Optimizing combined list [✓]
Thu Aug 29 19:50:40 2024 user.notice adblock-fast [13651]: Allowing domains [✓]
Thu Aug 29 19:50:41 2024 user.notice adblock-fast [13651]: Formatting merged file [✓]
Thu Aug 29 19:50:41 2024 user.notice adblock-fast [13651]: Creating dnsmasq servers file [✓]
Thu Aug 29 19:50:41 2024 user.notice adblock-fast [13651]: Removing temporary files [✓]
Thu Aug 29 19:50:43 2024 user.notice adblock-fast [13651]: Restarting dnsmasq [✓]
Thu Aug 29 19:50:43 2024 user.notice adblock-fast [13651]: service is blocking 98467 domains (with dnsmasq.servers) [✓]