Integrate Feodo Tracker Blocklist

9 Posts
3 Users
2 Reactions
1,486 Views
(@oliverrmeinebox-de)
Eminent Member
Joined: 5 Jahren ago
Posts: 27
Topic starter  

Hello,
would it be possible to include the block lists from https://feodotracker.abuse.ch/?
With this you could prevent a connection to botnet C&C servers.
If it is already possible now, which list would have to be included and how?

https://feodotracker.abuse.ch/blocklist/

Regards,
Oliver


   
ReplyQuote
(@calimero)
Member
Joined: 5 Jahren ago
Posts: 505
 

Good morning Oliver,

when you use the ipblocklist_recommended.txt file, and add it in the Blocker section under

Domain Malware & Fishing -> Name: "Feodotracker Recomnended", Format: "Domain List", URL:" the URL to ipblocklist_recommended.txt" it should do the trick.

Regards
Sven


   
ReplyQuote
(@calimero)
Member
Joined: 5 Jahren ago
Posts: 505
 

What I've also done, is to add the lists from the website "firebog.net" which I also used for my pihole tests.

You have to check them because 4 of them block things like amazon, android updates, facebook, etc.

But finaly you have a huge list of blocked waste 🙂

Regards
Sven


   
ReplyQuote
(@oliverrmeinebox-de)
Eminent Member
Joined: 5 Jahren ago
Posts: 27
Topic starter  

OK, I tried that, but here it might be a good idea to offer some more description or documentation, so that you understand better what belongs where, what means what and what you have to pay attention to when adding lists.

What means (what formats or so) e.g..:
With Domain Blocker:
domain list
squid-acl List
etc.host List
At Pattern Blocker:
easylist
URL list

Would it be good to suggest some providers/lists or to have a list of different block lists on the website or in the forum so that you can help yourself?

regards,
Oliver


   
ReplyQuote
(@calimero)
Member
Joined: 5 Jahren ago
Posts: 505
 

Hi Oliver,
you 're right. A better help with examples would help to understand, what you need for each point.
Domains and etc.host should normally be self explained

Domains (only Domain names or IP adresses) 
etc.host (127.0.0.1         example.com)

I have actually added all the host & domain lists found on firebog.net each one by one, but I now have some issues with single sites and device functions, which I only can fix with disabling a complete single list, which I don't want to.

What I plan to do is, to create a script, which downloads all the lists from firebog, compares them to the last downloaded and create only two lists locally on my webserver. One with domains and one with etc.host entries.
These lists I can sort / filter / remove duplicates and there I can exclude the ones, which make trouble on my devices.

Then I only add these two lists to the eblocker and it should work like a charm.

regards
Sven


   
ReplyQuote
(@oliverrmeinebox-de)
Eminent Member
Joined: 5 Jahren ago
Posts: 27
Topic starter  

@sven78gmx-de

You can possible use/edit this script https://github.com/deathbybandaid/piholeparser  


   
ReplyQuote
(@calimero)
Member
Joined: 5 Jahren ago
Posts: 505
 

@oliverrmeinebox-de

Thanks for that! Saves a lot of time!


   
ReplyQuote
(@oliverrmeinebox-de)
Eminent Member
Joined: 5 Jahren ago
Posts: 27
Topic starter  

@sven78gmx-de

Possible a better because not so big script: https://github.com/justdomains/ci
Results are https://github.com/justdomains/blocklists


   
ReplyQuote
(@random)
Illustrious Member Admin
Joined: 6 Jahren ago
Posts: 2061
 

eBlocker is not a general firewall at the moment. It routes port 80/443 to squid for pattern matching on URLs to block trackers based on easylist & co.

The eBlocker DNS blocker blocks the resolution of domain names to IP-addresses but not access to an individual IP.

Blocking of individual IPs is not possible to my knowledge.

Pls double check.

But of course this is a good feature request - and might be not that far away? 


   
ReplyQuote

Nach oben scrollen