Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Firewalling away the ads?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
DarkRyder
n00b
n00b


Joined: 16 Jul 2003
Posts: 49
Location: Sol-III, west edge of the smaller northern continent, near a big bay (Send help!)

PostPosted: Thu Oct 16, 2003 9:14 pm    Post subject: Firewalling away the ads? Reply with quote

I recently got my household set up behind a firewall (vanilla-sources + shorewall) and would like to use it to filter out known advertisers, but have not found a way to do so.

Shorewall has a "blacklist", but it appears to only work for incoming connections, while I want to block outgoing. Basically, I want to be able to set up something like ZoneAlarm's "Blocked Sites" on the firewall so I don't have to install and configure software on each of the systems behind it.

Any advice?
_________________
Unless, of course, scissors *can't* beat rock...
Back to top
View user's profile Send private message
lorenb
Apprentice
Apprentice


Joined: 24 Aug 2002
Posts: 207
Location: Toronto, ON

PostPosted: Thu Oct 16, 2003 9:23 pm    Post subject: Reply with quote

You could try this:

Quote:

* net-www/junkbuster
Latest version available: 2.0.2
Latest version installed: [ Not Installed ]
Size of downloaded files: 228 kB
Homepage: http://internet.junkbuster.com
Description: Filtering HTTP proxy
Back to top
View user's profile Send private message
slartibartfasz
Veteran
Veteran


Joined: 29 Oct 2002
Posts: 1462
Location: Vienna, Austria

PostPosted: Fri Oct 17, 2003 6:27 am    Post subject: Reply with quote

there are also possibilities to do that with squid
_________________
To an engineer the glass is neither half full, nor half empty - it is just twice as big as it needs to be.
Back to top
View user's profile Send private message
funkmankey
Guru
Guru


Joined: 06 Mar 2003
Posts: 304
Location: CH

PostPosted: Fri Oct 17, 2003 6:48 am    Post subject: Reply with quote

append to /etc/hosts :

http://www.accs-net.com/hosts/get_hosts.html

of course you still have to do it on each machine, but at least there's no additional software required.

or, it would be pretty easy to convert into iptables rules...

e.g.

Code:
  $IPTABLES -N blacklistdrop
  $IPTABLES -A blacklistdrop -j LOG --log-prefix="Blacklist DROP:"
  $IPTABLES -A blacklistdrop -j DROP
                                                                               
  # create the blacklist chain from /etc/blacklist
  $IPTABLES -N blacklist
   for subnet in `cat /etc/blacklist | awk '{print $2}'`;
  do
        $IPTABLES -A blacklist -s $subnet -j blacklistdrop
  done

...

$IPTABLES -A OUTPUT -j blacklist


or, turn your firewall machine into a local caching DNS (I recommend djbdns ^_^) and add the bogus entries for all of those ad domains.
_________________
I've got the brain, I'm insane, you can't stop the power
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum