Adblocking ~ Adblock Plus

jp141

Hi Everyone,

I have tried lots of different ways to block ad's with pfsense over the years (Squid, pfblocker, DG, adzap) but none of them seem to work too well. I am mainly interested in blocking youtube ads so they dont show up on my chromecast.

Now I know Chrome with adblock plus using the easylist works very very well so my question is, is there any thing I can setup on pfsense that works the same way as adblock and uses the easy list?

I have tried everything I can think of!

KOM

The main way to block ads is domain blacklists. Squid supports those. Why did you give up on Squid? I remember the Shallalist blacklist (that you can add to Squid) having an ads category, plus you can add your own categories.

jp141

Thanks KOM

I found with domain block lists I got a lot of false positives, sites being blocked etc and was constantly having to update the allow list. Also it didnt seem to work that well on youtube add's :(

KOM

Part of the problem is that everything is going HTTPS these days, and Squid/SquidGuard can't deal with that without either having SSL certs installed everywhere, or manual proxy config on all your clients, or WPAD dynamic proxy assignment.

jp141

Yeah :(

Thats the thing though, adblock plus works really really well.

ssppcc

there is any way to block ads like adblock plus do in my browser??
I´m trying to do the same using a script like this:


wget  wget -O http://hosts-file.net/ad_servers.txt -O /etc/squid/ad_servers.txt
cat /etc/squid/ad_servers.txt | tr -d "\r" | sed 's/127.0.0.1//g' | sed 's/^ *//g' >> /var/db/squidGuard/Blacklist/domains
squidGuard -C all
squid -k reconfigure

But unfortunally this is not working.
any idea????

Thanks in advance
Regards

Supermule

Problem is that the browser is the endpoint of the https tunnel and the FW is not. Thereby encrypting the traffic, it cannot intercept the signatures of the ads.

Therefore its very hard to combat in pfSense :(

KOM

The Shallalist ADS Target Category isn't doing the job for you?

Mr. Jingles

BB has pfBlockerNG 1.0 ready, and awaits code review by the admins. pfblockerNG 2.0 (which BB is working on) is planned to have adblocking support.

Cino

@Mr.:

BB has pfBlockerNG 1.0 ready, and awaits code review by the admins. pfblockerNG 2.0 (which BB is working on) is planned to have adblocking support.

=D HTTPS will still be an issue but there is somewhat of a workaround for it. Domain wise, HTTP/HTTPS traffic will be blocked. HTTP will display a transparent gif while HTTPS traffic will pop up with a cert error.. Only way around that, is to use a MITM SSL Proxy due to the nature of SSL/HTTPS.. MILM is not worth the trouble.. I've tried it before and my bank gave me the finger for trying….

ssppcc

@Mr.:

BB has pfBlockerNG 1.0 ready, and awaits code review by the admins. pfblockerNG 2.0 (which BB is working on) is planned to have adblocking support.

Wooow, sounds awesome. I can´t wait to test the pfblockerNG :-p

Thanks to all for your replies
Regards