AdvancedBlocking

[PeterKnotek]

HI

I have a little problem with Adv.Block
Here is my cfg

{
"enableBlocking": true,
"blockListUrlUpdateIntervalHours": 24,
"localEndPointGroupMap": {},
"networkGroupMap": {
"10.15.100.160": "NetflixAllowed",
"10.15.19.70": "NetflixAllowed",
"172.16.0.0/12": "fully_blocked",
"10.0.0.0/8": "fully_blocked",
"172.23.0.0/16": "Printers",
"10.15.20.39": "NoESET",
"172.29.1.11": "NoESET"
},
"groups": [
{
"name": "NoESET",
"enableBlocking": true,
"allowTxtBlockingReport": true,
"blockAsNxDomain": true,
"blockingAddresses": [
"127.0.0.1"
],
"allowed": [],
"blocked": [],
"allowListUrls": [],
"blockListUrls": [],
"allowedRegex": [
"^(.\.)?google\..$",
"^(.\.)?unlp\.sk$",
"^(.\.)?unlp\.local$",
"^www\.vszp\.sk$",
"^www\.union\.sk$",
"^www\.dovera\.sk$",
"^(.\.)?data\.microsoft\.com$",
"^(.\.)?edge\.microsoft\.com$",
"^(.\.)?mp\.microsoft\.com$",
"^(.\.)?download\.microsoft\.com$",
"^(.\.)?go\.microsoft\.com$",
"^(.\.)?download\.windowsupdate\.net$",
"^(.\.)?download\.windowsupdate\.com$",
"^(.\.)?ctldl\.windowsupdate\.com$",
"^(.\.)?cxcs\.microsoft\.net$",
"^(.\.)?ecs\.office\.com$",
"^(.\.)?update\.microsoft\.com$",
"^(.\.)?config\.edge\.skype\.com$",
"^(.\.)?api\.msn\.com$",
"^(.\.)?assets\.msn\.com$",
"^(.\.)?login\.live\.com$",
"^(.\.)?digicert\.com$",
"^(.\.)?azureedge\.net$",
"^(.\.)?login\.microsoftonline\.com$",
"^(.\.)?wdcp\.microsoft\.com$",
"^(.\.)?wdcpalt\.microsoft\.com$",
"^(.\.)?akamaized\.net$",
"^(.\.)?windows\.msn\.com$",
"^(.\.)?trafficmanager\.net$",
"^(.\.)?cloudapp\.azure\.com$",
"^(.\.)?content\.office\.net$",
"^(.\.)?support\.microsoft\.com$",
"^(.\.)?smartscreen\.microsoft\.com$",
"^(.\.)?msauth\.net$",
"^(.\.)?nczisk\.sk$",
"^(.\.)?www\.bing\.com$",
"^(.\.)?storage-vszp-prod\.predu\.sk$",
"^(.\.)?dns\.msftncsi\.com$",
"^(.\.)?eset\..$"
],
"blockedRegex": [
"."
],
"regexAllowListUrls": [],
"regexBlockListUrls": [],
"adblockListUrls": []
},
{
"name": "NetflixAllowed",
"enableBlocking": true,
"allowTxtBlockingReport": true,
"blockAsNxDomain": true,
"blockingAddresses": [],
"allowed": [
"netflix.com",
".netflix.com"
],
"blocked": [],
"allowListUrls": [],
"blockListUrls": [],
"allowedRegex": [],
"blockedRegex": [],
"regexAllowListUrls": [],
"regexBlockListUrls": [],
"adblockListUrls": []
},
{
"name": "fully_blocked",
"enableBlocking": true,
"allowTxtBlockingReport": true,
"blockAsNxDomain": true,
"blockingAddresses": [
"127.0.0.1"
],
"allowed": [],
"blocked": [],
"allowListUrls": [],
"blockListUrls": [],
"allowedRegex": [],
"blockedRegex": [
"^(.\.)?sme\..$",
"^(.\.)?alibaba\..$",
"^(.\.)?aliexpress\..$",
"^(.\.)?jwplayer\..$",
"^(.\.)?netflix\..$",
"^(.\.)?ccleaner\..$",
"^(.\.)?avast\..$",
"^(.\.)?tahaj\..$",
"^(.\.)?telegram\..$",
"^(.\.)?kukaj\..$",
"^(.\.)?uloz\..$",
"^(.\.)?sledujteto\..$",
"^(.\.)?streamuj\..$",
"^(.\.)?fastshare\..$",
"^(.\.)?prehraj\..$",
"^(.\.)?datoid\..$",
"^(.\.)?sdilej\..$",
"^(.\.)?zalohuj\..$",
"^(.\.)?webshare\..$",
"^(.\.)?uloz\..$",
"^(.\.)?flixtor\..$",
"^(.\.)?kra\..$",
"^(.\.)?mcafee\..$",
"^(.\.)?horoskopy\.cz$",
"^(.\.)?disqus\.com$",
"^(.\.)?blesk\.cz$",
"^(.\.)?t\.me$",
"^(.\.)?mega\.io$"
],
"regexAllowListUrls": [],
"regexBlockListUrls": [],
"adblockListUrls": []
},
{
"name": "Printers",
"enableBlocking": true,
"allowTxtBlockingReport": true,
"blockAsNxDomain": true,
"blockingAddresses": [
"127.0.0.1"
],
"allowed": [
"ccc.hpeprint.com",
"h10141.www1.hp.com"
],
"blocked": [],
"allowListUrls": [],
"blockListUrls": [],
"allowedRegex": [],
"blockedRegex": [
"."
],
"regexAllowListUrls": [],
"regexBlockListUrls": [],
"adblockListUrls": []
}
]
}

My problem is :
"10.15.100.160": "NetflixAllowed",
"10.15.19.70": "NetflixAllowed",

• why IP 10.15.100.161 has DNS ansver form eg kukaj.io ( is blocked regex ## "^(.\.)?kukaj\..$", ##
  • ich change IP to 10.15.100.161 block for kukaj.io work
    Need block for all some domain eg google | netflix | and for other IP allow allow netflix pr google or other domains
    But ... not work for IP
    "10.15.100.160": "NetflixAllowed",
    "10.15.19.70": "NetflixAllowed",

Anyone help?
Thanks

[ShreyasZare]

Thanks for the post. I am not exactly sure I understood your query since you have mentioned 10.15.100.161 twice and said it both works and not work.

Also, how are you testing the config? The test must be done from the same client IP address using tools like nslookup.

[ShreyasZare]

If have IP 10.15.100.150 - the rule for blocking other sites does not apply to IP 10.15.100.150

You have to copy the same regex in to the group that is used for that IP. You need to copy paste the blocking regex in all the groups.

[PeterKnotek]

Ak máte IP 10.15.100.150 - pravidlo pre blokovanie iných stránok neplatí pre IP 10.15.100.150

Musíte skopírovať rovnaký regulárny výraz do skupiny, ktorá sa používa pre danú adresu IP. Musíte skopírovať a vložiť blokujúci regulárny výraz do všetkých skupín.

A small example PLEASE - I still don't understand

[ShreyasZare]

Here is a small example where the same regex is configured in both the groups and one group has additional allowed domain name for netflix. Just to keep the example small, I am adding just one regex entry so you need to add the remaining regex entries.

{
	"enableBlocking": true,
	"blockListUrlUpdateIntervalHours": 24,
	"localEndPointGroupMap": {},
	"networkGroupMap": {
		"10.15.100.160": "NetflixAllowed",
		"10.0.0.0/8": "fully_blocked",
	},
	"groups": [
		{
			"name": "NetflixAllowed",
			"enableBlocking": true,
			"allowTxtBlockingReport": true,
			"blockAsNxDomain": true,
			"blockingAddresses": [],
			"allowed": [
				"netflix.com"
			],
			"blocked": [],
			"allowListUrls": [],
			"blockListUrls": [],
			"allowedRegex": [],
			"blockedRegex": [
				".\\.kukaj\\..$"
			],
			"regexAllowListUrls": [],
			"regexBlockListUrls": [],
			"adblockListUrls": []
		},
		{
			"name": "fully_blocked",
			"enableBlocking": true,
			"allowTxtBlockingReport": true,
			"blockAsNxDomain": true,
			"blockingAddresses": [
				"127.0.0.1"
			],
			"allowed": [],
			"blocked": [],
			"allowListUrls": [],
			"blockListUrls": [],
			"allowedRegex": [],
			"blockedRegex": [
				".\\.kukaj\\..$"
			],
			"regexAllowListUrls": [],
			"regexBlockListUrls": [],
			"adblockListUrls": []
		}
	]
}

Note that you need to follow the regex described in here.

Also note that since the regex is being used inside JSON format strings, you need to escape the backslash character so that the JSON format is correct.

[PeterKnotek]

Thanks very very very - works

[ShreyasZare]

You're welcome.