Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Block iOS profile DNS?

    Scheduled Pinned Locked Moved pfBlockerNG
    3 Posts 2 Posters 744 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • CreationGuyC
      CreationGuy
      last edited by

      I'm using https://adguard-dns.io for my mobile devices, to block ads, etc. while on data or other wifi networks. I'm on the free plan so I only get 300k requests a month which I think will be fine.

      They have an option when you add a device to use "Configuration Profile". It installs the the phone and is applied.

      When you add a "device" to your ad guard dns account it creates a unique string for example tls://xXx123x.d.adguard-dns.com that applies to your account.

      How, if at all, can I block the mobile devices from accessthing adguard while on my home network to reduce the hits? I have pfBlockerNG enabled with Regex, I used this string and is not working:

      (^|\.)adguard-dns\.com$
      (^|\.)d\.adguard-dns\.com$
      

      I want the mobile devices to use pfsense' DNS when home.
      20220901_185438000_iOS.png

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @CreationGuy
        last edited by Gertjan

        @creationguy said in Block iOS profile DNS?:

        How, if at all, can I block the mobile devices from access thing adguard while on my home network to reduce the hits?

        Ask adgurad.
        They mention exactly this during set up : what is your home Wifi network ?

        b3c11f67-1fc0-4408-84d0-a3bca761df78-image.png

        Instead of hitting #1 and use the App, keep on reading.
        Method #2 gives you the possibility to create a profile "Open profile constructor".
        You'll see :

        b88fd6f2-15ce-4233-93d4-e28ed4b7e133-image.png

        Blocking adguard with pfBlockerng-devel : try :

        13b95e41-6bb4-452f-a667-690e58f3b786-image.png

        and have a look at the list ;)

        @creationguy said in Block iOS profile DNS?:

        I have pfBlockerNG enabled with Regex, I used this string and is not working:
        (^|.)adguard-dns.com$
        (^|.)d.adguard-dns.com$

        Chicken and egg problem.

        1. To get to your DNS, you need to resolve the host name of the DNS
        2. We have "adguard-dns.com", go to 1)

        😊 call Houston, you have a problem.

        The Profile to download, or the App, contain most probably hard coded IP addresses for their DNS services.
        So the regex won't work, as regex is used while doing DNS processing.

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        CreationGuyC 1 Reply Last reply Reply Quote 1
        • CreationGuyC
          CreationGuy @Gertjan
          last edited by

          @gertjan I totally overlooking that tiny link for profile builder... thank you- I did not look hard enough. It's working now.

          1 Reply Last reply Reply Quote 1
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.