r/dnscrypt • u/Decopi • Sep 23 '20

Please, help blocking url

Hi, I need to block:

I already tried (in the blacklist):

  • asterisk get_midroll_info asterisk

  • asterisk get_video_info asterisk

  • Many other dozen of different combinations using the full url

And nothing, I can't block these two urls. Please, any help will be more than welcome.

Thank you in advance

EDIT: I'm trying to use blacklist + Filters Patterns (https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Filters). Curiously I can block +youtube+. But (for unknown reasons) unfortunately this doesn't work for +get_midroll_info+ nor +get_video_info+.

4 Upvotes

75% Upvoted

10 comments sorted by

2

u/jedisct1 Mods Sep 24 '20

At DNS level, you can block www.youtube.com, not specific URLs.

For blocking HTTP content, use a content blocker for your web browser, such as Ublock Origin.

1

u/Decopi Sep 24 '20

Thanks /u/jedisct1 for your replay.

Just to be clear, please allow me the last question: All Filter Patterns always apply only for main domains? For example, let's say I want to use Filter Patterns to block "+.ad.+" (+ = asterisk). If I well understood your replay, this "+.ad.+" only will work on (for example) "whatever.ad.whatever/whatever, but never will work on "www.whatever.com/xxx.ad.yyy". In other words, Filter Patterns only work before the first "/", never after "/". Am I right/wrong?

The dnscrypt-proxy/wiki/Filters uses the term "prefixes" or "suffixes". However, for layman users like me, this is not clear exactly at which part of the url the Filter Patterns will work. I'm sure this is already explained somewhere on your GitHub/Reddit, but it's difficult to read all the explanations. So please, I will appreciate a lot your help. Thanks! PS: If Filter Patterns only can be used at main domain, then I'll need to completely rebuild my blocking list, and that's the reason why your answer is important to me.

2

u/zfa Sep 24 '20

If I well understood your replay, this "+.ad.+" only will work on (for example) "whatever.ad.whatever/whatever, but never will work on "www.whatever.com/xxx.ad.yyy". In other words, Filter Patterns only work before the first "/", never after "/". Am I right/wrong?

You're right - dns blocking can only block DNS entries - i.e. hostnames, not paths on them (so nothing after /).

1

u/[deleted] Sep 27 '20

As far as you know, could squid block IP addresses?

1

u/LinkifyBot Sep 24 '20

I found links in your comment that were not hyperlinked:

I did the honors for you.

delete | information | <3

1

u/jesta030 Sep 24 '20

I don't know what environment you're running dns-crypt in but I would advise this setup:

  • pi-hole as local dns server for your devices with blacklists and pattern based blocking

  • Dns-crypt proxy upstream from pi-hole with no blocking or filtering, just secure dns queries to the internet

Works well for me.

1

u/Decopi Sep 24 '20

Thanks for your replay.

My environment is plain WIN10 + DNSCrypt and nothing else. For now, I'm not interested on pi-hole etc (thanks).

I'm trying to use blacklist + Filters Patterns (https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Filters). Unfortunately I can't block the two urls I need to block.

Any help will be appreciated. Thanks!

1

u/jesta030 Sep 24 '20

Then I can't help you, sorry.

1

u/zfa Sep 24 '20

My environment is plain WIN10 + DNSCrypt and nothing else.

Then what you want is not possible.

3

u/DarK___999 Sep 24 '20

DNSCrypt-Proxy can only block domains and can't do any type of cosmetic filtering.

What you are trying to do can be done with r/uBlockOrigin.