AdBlocking with combined hosts file

[Bamsefar]

If I understand you correctly then this has nothing to do with adblocking.

Well, it is more I guess a question about how to use IPTABLES than anything else... That is why it was placed here in this thread. Now as you might have read, it seems to be misplaced due to that the firewall should do exactly what I am asking for. While I might nog be 100% convinced yet about port scanning "people", the general idea is of course correct with the firewall.

All scripts, be it adblock, blocking countries from accessing open ports or the script (somewhere on this forum, can not find it for the moment) that blocks IPs from scanning ports in the future, will be using some sort of IPTABLEs.

 

[Martineau]

Well, it is more I guess a question about how to use IPTABLES than anything else... That is why it was placed here in this thread. Now as you might have read, it seems to be misplaced due to that the firewall should do exactly what I am asking for. While I might nog be 100% convinced yet about port scanning "people", the general idea is of course correct with the firewall.

All scripts, be it adblock, blocking countries from accessing open ports or the script (somewhere on this forum, can not find it for the moment) that blocks IPs from scanning ports in the future, will be using some sort of IPTABLEs.

Last time I checked, and apparently confirmed by the first sentence of this Guide:

http://www.howtogeek.com/177621/the...tables-the-linux-firewall/?PageSpeed=noscript

so the ASUS Firewall is a collection of appropriately ordered set of iptable rules - so for Linux based ASUS routers

'NO iptable rules ' == 'NO Firewall'

but I could be wrong!

 

[Savell Martin]

Question, do I login as 'root' user?
Because I cannot get the password for that.
But my username and password that I use to log into the routers GUI works.

Is this correct?

Also I have a new router and it doesnt seem to have any files or folders in jffs.
Do I create them manually in ssh?
Or how do I get it to work?

Sorry linux nub here

EDIT: when I try mkdir scripts (from within jffs) I get permission denied scripts is read only.
So I guess its already there but my user cant see it?
Or how do I get access to this?

 

[Savell Martin]

Can anyone help me with the above?

 

[ColinTaylor]

Can anyone help me with the above?

By default there is no root user only admin (same as in the GUI).

Regarding your jffs problem, it's difficult to give precise instructions as you haven't told us your firmware version . But in general you should check that you have enabled the jffs partition and formatted it. Typically those options are in Administration > System > Persistent JFFS2 partition (or something similar).

 

[Savell Martin]

Sorry should have said more.

Running latest Merlin, so 380.57.

Under Administration -> System it is set to: Enable JFFS custom scripts and configs (YES)
But like I say when logging into ssh, and looking at the jffs folder it seems empty when logged in as my admin account.

 

[Savell Martin]

Ok well now logging back into ssh I can now see the scripts folders and config folders in jffs (it was NOT there yesterday) maybe that extra reboot fixed it.

But those folders are still empty so there is nothing to add to eg services-start, or /jffs/configs/dnsmasq.conf.add

Do I need to create those from scratch?

 

[Savell Martin]

Ok well I created all those files with vi and put in the advanced settings.
But I am still getting ads.

I may have missed something, or it just may not be running.
OR it could be taking a bit of time to download the lists.

Is there any way to check I set it up correctly?

I can see 'hosts.blocked' in /tmp/mnt/sda1/hosts.
I did not create that file. But if I vi into it its empty.

And yes I did flushdns

 

[Savell Martin]

Anyone?
Still getting ads even after a restart the next morning...

Do I need to set anything in DNS or anything for it to work?
Or is it just set and forget?

I tried doing a service restart_dnsmasq which says it restarted successfully.

 

[shooter40sw]

Check that you clients are using the router as DNS, otherwise the dnsblock will get bypassed...

Anyone?
Still getting ads even after a restart the next morning...

Do I need to set anything in DNS or anything for it to work?
Or is it just set and forget?

I tried doing a service restart_dnsmasq which says it restarted successfully.

 

[Savell Martin]

Check that you clients are using the router as DNS, otherwise the dnsblock will get bypassed...

Thanks but they are all using the router as DNS.
Good idea tho

 

[shooter40sw]

The file must have information of the blocked sites, check again the scripts, the paths of everything, run manually the script and see if it downloads the files and combines them, you can place the -v parameter in the wget command to see if its actually downloading the files

Ok well I created all those files with vi and put in the advanced settings.
But I am still getting ads.

I may have missed something, or it just may not be running.
OR it could be taking a bit of time to download the lists.

Is there any way to check I set it up correctly?

I can see 'hosts.blocked' in /tmp/mnt/sda1/hosts.
I did not create that file. But if I vi into it its empty.

And yes I did flushdns

 

[Savell Martin]

The file must have information of the blocked sites, check again the scripts, the paths of everything, run manually the script and see if it downloads the files and combines them, you can place the -v parameter in the wget command to see if its actually downloading the files

Cheers.
I have double checked the folders and the scripts.

How can I run the script manually?

 

[shooter40sw]

Cheers.
I have double checked the folders and the scripts.

How can I run the script manually?

one way is to go the /jffs/scritps/ once there ./nameofscript.sh

 

[Savell Martin]

Thanks bud.

Just to confirm 100% my scripts look like (for advanced according to OP):
/jffs/scripts/services-start
/jffs/scripts/update-hosts.sh
/jffs/configs/dnsmasq.conf.add

Just wondering if that first "services-start" should be "services-start.sh"?

And I have:
/tmp/mnt/sda1/hosts/whitelist.txt
/tmp/mnt/sda1/hosts/blacklist.txt

And this was created automatically (which is why I thought it was working, but it seems empty):
/tmp/mnt/sda1/hosts/hosts.blocked

 

[shooter40sw]

the script service-start leave it like that, your problem seams that the update-host.sh must have some error because it must fill the hosts.blocked,
Edit that file look for the command

wget -qO- and put wget -O-

Thant way you will see the output and maybe an error.

Check out that the hosts.blocked file does have write permission, mine is like this -rw-rw-rw- but I never had that issue ...

Thanks bud.

Just to confirm 100% my scripts look like (for advanced according to OP):
/jffs/scripts/services-start
/jffs/scripts/update-hosts.sh
/jffs/configs/dnsmasq.conf.add

Just wondering if that first "services-start" should be "services-start.sh"?

And I have:
/tmp/mnt/sda1/hosts/whitelist.txt
/tmp/mnt/sda1/hosts/blacklist.txt

And this was created automatically (which is why I thought it was working, but it seems empty):
/tmp/mnt/sda1/hosts/hosts.blocked

 

[Savell Martin]

Thanks will take a look when I get home.

Appreciate the help

 

[martinr]

.

My reason for blacklisting people is less a concern for security, but more my annoyance at them filling up my syslog with their failed attempts There's also a certain amount of satisfaction in the feeling that you're throwing their packets on the floor and wasting their time.

Colin, do you do this using iptables? If so, what does a typical entry look like?

I don't suppose you've noticled a fall-off in the syslog entries per unit time since you started this, have you, or is it like trying to clean the Augean stables?

And if you do use iptables, do you leave the entries in permanently or do you gradually remove the earliest ones, to prevent iptables becoming unwieldy (if that happens) and also because, possibly, "throwaway" IP addresses are used?

 

[ColinTaylor]

Hi @martinr As this question is off topic I'll reply to you by PM to avoid disrupting this thread any more than I have . Cheers.

 

[elorimer]

Thanks bud.

Just to confirm 100% my scripts look like (for advanced according to OP):
/jffs/scripts/services-start
/jffs/scripts/update-hosts.sh
/jffs/configs/dnsmasq.conf.add

Just wondering if that first "services-start" should be "services-start.sh"?

And I have:
/tmp/mnt/sda1/hosts/whitelist.txt
/tmp/mnt/sda1/hosts/blacklist.txt

And this was created automatically (which is why I thought it was working, but it seems empty):
/tmp/mnt/sda1/hosts/hosts.blocked

The empty hosts.blocked file suggests the whitelist.txt file has an empty line. It's matching and removing every blocked site.