• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Why is so difficult to block this specific website when using mobilephone's Chrome App?

Scheduled Pinned Locked Moved pfBlockerNG
19 Posts 5 Posters 2.0k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Z
    Zist @BBcan177
    last edited by Dec 20, 2018, 4:22 PM

    @bbcan177
    Thank you very much for your clarification, I will try it.

    1 Reply Last reply Reply Quote 0
    • Z
      Zist @BBcan177
      last edited by Jan 4, 2019, 11:08 PM

      @bbcan177

      The results for command are below:
      [2.4.4-RELEASE][admin@localdomain]/root: host -t A wodeshucheng.com
      wodeshucheng.com has address 10.10.10.1
      [2.4.4-RELEASE][admin@localdomain]/root: host -t A sub.wodeshucheng.com
      sub.wodeshucheng.com has address 10.10.10.1

      Here is what I did: I put the below into DNSBL Group customlist. Then with TLD Enabled, run a Force Reload - DNSBL.

      wodeshucheng.com
      wodeshucheng.com.cdn.dnsv1.com
      195813.sp.tencdns.net
      m.wodeshucheng.com
      m.wodeshucheng.com.cdn.dnsv1.com
      195812.dispatch.spcdntip.com

      Result:
      I still can browse wodeshucheng.com and its sub-domain web-pages
      I cannot browse m.wodeshucheng.com anymore; which is successful blocked.

      Is there another way to block wodeshucheng.com?

      1 Reply Last reply Reply Quote 0
      • J
        johnpoz LAYER 8 Global Moderator
        last edited by Jan 5, 2019, 10:16 AM

        you are blocking it.. But then again lets say it one more time!!! Using chrome on an android device might be using PROXY!! IN that case the proxy gets asked not the local dns... You can block with dns until you turn blue - not going to stop the client from talking to the proxy and going to any website the proxy can go to..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        Z N 2 Replies Last reply Jan 7, 2019, 3:17 PM Reply Quote 0
        • Z
          Zist @johnpoz
          last edited by Jan 7, 2019, 3:17 PM

          @johnpoz

          My question is, if chrome app on android can use its PROXY to work for wodeshucheng.com, why it doesn't work for others. Based on my test, many websites can be blocked successfully. Only wodeshucheng.com is so annoying. Why wodeshucheng.com is so special that it cannot be blocked?

          1 Reply Last reply Reply Quote 0
          • J
            johnpoz LAYER 8 Global Moderator
            last edited by Jan 7, 2019, 3:51 PM

            because they are hitting via some IP that your not aware of?

            If you do a query and get back 10.10.10.1 then that is clearly pfblocker blocking it.. You need to find what FQDN they are using to access it that your not blocking.. Or what IP they are using to access it, etc.

            I would think a simple sniff of the traffic while you go to it should show you this..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • P
              Pippin
              last edited by Pippin Jan 7, 2019, 5:03 PM Jan 7, 2019, 5:03 PM

              Maybe google's QUIC protocol ?

              https://www.fastvue.co/fastvue/blog/googles-quic-protocols-security-and-reporting-implications/

              I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
              Halton Arp

              1 Reply Last reply Reply Quote 0
              • B
                BBcan177 Moderator
                last edited by Jan 7, 2019, 10:50 PM

                nslookup or dig from your LAN device from the cmd prompt/shell.

                If the cmd/shell replies with the DNSBL VIP and you can still resolve that Domain in the browser, then you know that the Browser is using other methods to get to that IP. Also check your AV as some of them like Avast can also provide DNS over HTTPS...

                "Experience is something you don't get until just after you need it."

                Website: http://pfBlockerNG.com
                Twitter: @BBcan177  #pfBlockerNG
                Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                1 Reply Last reply Reply Quote 0
                • N
                  noplan @johnpoz
                  last edited by Jan 10, 2019, 12:49 AM

                  @johnpoz said in Why is so difficult to block this specific website when using mobilephone's Chrome App?:

                  ot going to stop the client from talking to the proxy and going to any website the proxy can go to..

                  a possible work around is
                  to get all requests to UDP Port 53 redirected to your DNS maybe that can help

                  B 1 Reply Last reply Jan 10, 2019, 1:16 AM Reply Quote 0
                  • B
                    BBcan177 Moderator @noplan
                    last edited by Jan 10, 2019, 1:16 AM

                    @noplan said in Why is so difficult to block this specific website when using mobilephone's Chrome App?:

                    a possible work around is
                    to get all requests to UDP Port 53 redirected to your DNS maybe that can help

                    That is the issue, these requests may be going over HTTPS (DOH), and its not possible to block that easily since its not on port 53.

                    "Experience is something you don't get until just after you need it."

                    Website: http://pfBlockerNG.com
                    Twitter: @BBcan177  #pfBlockerNG
                    Reddit: https://www.reddit.com/r/pfBlockerNG/new/

                    N 1 Reply Last reply Jan 11, 2019, 8:31 AM Reply Quote 0
                    • N
                      noplan @BBcan177
                      last edited by Jan 11, 2019, 8:31 AM

                      @bbcan177 said in Why is so difficult to block this specific website when using mobilephone's Chrome App?:

                      d its not possible to block that easily since its not on port 53.

                      so gettin you right
                      for optimal filter (pfB / DNSBL) experience it will be wise to
                      not redirect to port 53 (as i mentioned in the work around)

                      thanks for input ... makes totally sense
                      br from snowLand

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        This community forum collects and processes your personal information.
                        consent.not_received