PfblockerNG question on blocking WEB applications on smartphones
-
Hello everyone
I had a problem with blocking through pfblockerng
namely
applications on smartphones work bypassing pfblockerng.
Is there a recipe for blocking web applications on pfblockerng -
These phone apps, are they even using DNS, or do they use hard coded IPs ?
You could discover that with packet capturing.
And if they use DNS, they have their own build in (build into the App), or do they use the phone DNS ?
For example, the apps could use DNS over SSL/TLS
You could discover that with packet capturing.
What is the phone DNS ?If the apps are plaining it nicely, and they use the phone DNS
And the phone uses your pfSense as a DNS
Then the pfsense resolver unbound is able to 'see' the DNS requests.
And thus pfblockerng-devel can 'see' them, and act upon them. -
@gertjan well, for example, youtube and instagram and facebook on the browser they are blocked, but if the user enters through the application, then the blocking does not work
-
@shkiber said in PfblockerNG question on blocking WEB applications on smartphones:
but if the user enters through the application
True, the Youtube app doesn't use 'www.youtube.com' to connect to the web youtube server.
It uses another access - using another host name (if it uses a host name)As said above : what is the DNS used by these apps ? ( if they even use DNS, and not a list with build in IPs ).
You don't have the source code of the apps, I get it.
There is only one way to find out : packet capture the device, see if it emits DNS requests when you start the app. -
@gertjan Is wireshark suitable for this purpose?
-
"Wireshark" is a tool that permits you to see Ethernet packets.
The nice thing is : you can filter "from what" device to "what device", what protocol used (TCP or UDP), and what source and destination port, etc.You'll be seeing the packet, for example the initial DNS request from a device, and the answer coming back.
As a filter, set up the IPv4 (and/or IPv6 !) of the device, and destination port "53".I don't want to be silly, but wireshark can't help you if you don't know the basics of Ethernet (packets).
-
how can i capture the device with a packet to see the requests
-
@shkiber said in PfblockerNG question on blocking WEB applications on smartphones:
how can i capture the device with a packet to see the requests
?
Use the packet capture function, under Diagnostics. -
@gertjan good afternoon, i found a solution if you add dns
youtubei.googleapis.com in DNSBL, then the application on smartphones also gets blocked, thank you very much for your help
