@ulmisch Has https ever worked in your environment? Have you disabled av/firewall etc? I guess either the eBlocker cert has not the correct root/issuer rights or something else is intercepting your ssl traffic. Please share screenshot of the certificate issuer: go to a https site. Click the „lock“ that indicates https in browser. There you can usually find a button „show certificate“ or such. When taking the screenshot, make sure the cert issuer is shown.

@ulmisch I believe these questions never got answered. Did you fix the issue meanwhile? Otherwise I‘m sure we get it fixed together. The certificate issuer of a „non working site“ would be helpful, I agree.

Thanks much!

To make this clear: The absence of the icon is NOT an indicator that eBlocker is not working. eBlocker works on network level in the back end. The icon is just some GUI component for the front end that might break for reasons discussed - but the core eBlocker component is working just fine and not affected at all...

@mainzelm what does this mean? It does not show the icon but blocks still? Or it does not block the trackers from there? And how can sites avoid this and how many sites are there? I am confused. And I believe the Rki doesn’t do this for eblocker, it must mean something to others as well.

The browser does not show the eBlocker icon because of a specific security feature enabled by that site. But apart from the missing icon, eBlocker still works for this site and the blocking of trackers is not affected at all. It's just that the eBlocker icon cannot be loaded.

I don't know how many other sites are affected, but, no, they don't do this for eBlocker, they do it for security (see https://content-security-policy.com to learn more about the details).

Best regards,

Martin

Use cases: Do you want it formally as in UML or is Prosa sufficient? 

I try Prosa first before I do it formally.

When I use an app or surf the web, I would like to see, which servers in the internet are contacted to receive information. E.g. if I go to focus.de in the web, the log should show focus.de but then also all the domains, servers, etc, it contacts. E.g. graph.facebook.com, demdex, xxx.doubleclick.google.kingkong.net, google-analytics.com, google-tagmanager.com etc. I would then be able to choose the entry and say I want to allow it (whitelisting) or I want to block it and then on which domain level. Meaning: google.com, or tagmanager.google.com or xxx.tagmanager.google.com. This way I can allow go to mail.google.com but all others are blocked. The functionally of Little Snitch on MacOS is the example I would like.

In little Snitch you can also choose which application is allowed.

So in little snitch you start word and a window opens and asks: Allow this app to connect to this server on this port. Then I can say: Once, for this sessions, forever. This app or all Apps.

So I could go to adobe.com port 80 with the Webbrowser but block adobe.com port 80 for Rapidweaver. Or allow port 443 but not 80. And so on. 

is this sufficient? Since eblocker is its own device I believe it is difficult to block traffic until someone clicked ok. It would mean some App of eblocker on my device, which I believe Apple would not allow. So for me it would be fine, if I could jump every evening to eblocker, see all apps, all urls, all ports and then decide which I would want to be blocked in the future or which I would want to whitelist. Or view what eblocker does when I install a new app and then immediately block the connection. Yes, the first connect would go through but nothing later. AdGuard is on iPhone is a good example how this works. This way, my list grows and I can block what I want to be blocked. I am very very restrictive what I allow. I do it in Little Snitch and Adgurad Pro. And I do much more than what AdGuard Pro e.g. offers. Although they do a really good job, I believe.

Could I use eblocker as a VPN only and do the tracking with my local device? So disabling the tracking part and keeping the VPN `? Not my preferred option though.

@gregor Sure, you can disable tracker and ad blocking (under settings>blocker disable all/unwanted lists) and just use eBlocker as a VPN/TOR gateway. But then you'll also miss tracker blocking in Apps or lower level OS communication. I feel you are rather giving up control - but I don't know your other protection tools neither.

What's the feature or control you are missing in eBlocker? Just write it down like a "use case" - "I want to do xyz to achieve abc" and we can work on improving eBlocker in future. Best spot to post is the "Feature Request" forum...

Thanks much.

Safari, no add-ons or so, so no adguard, ublock origin or such. 

https://www.rki.de no orange power button

in the trustworthy urls rki is not mentioned.

https://www.rki.de is not working for me either. The reason can be found in the browser console: "Refused to load https://controlbar.eblocker.com:3443/img/eblocker-icon-44x44.png because it does not appear in the img-src directive of the Content Security Policy.". So the site has a specific setting that prevents the loading of the icon, independent of your setup. I think displaying the icon on such sites as well should be possible but requires some work.

Best regards

Martin

so it seems that is ok.

traceroute to 1.1.1.1 with the VPN on eblocker enabled gives me:

traceroute to 1.1.1.1 (1.1.1.1), 64 hops max, 52 byte packets
1 192.168.1.1 (192.168.1.1) 8.729 ms 2.479 ms 1.933 ms
2 eblocker.box (192.168.178.33) 5.220 ms 3.519 ms 3.477 ms
3 10.16.0.1 (10.16.0.1) 51.361 ms 49.662 ms 48.865 ms
4 * * *
5 vlan120.as04.cph1.dk.m247.com (95.174.65.1) 58.311 ms 52.516 ms 49.745 ms
6 vlan2915.as04.cph1.dk.m247.com (83.97.21.166) 89.960 ms 68.568 ms 71.039 ms
7 xe-2-2-0-0.bb1.cph1.dk.m247.com (83.97.21.232) 48.502 ms
xe-2-3-0-0.bb1.cph1.dk.m247.com (83.97.21.77) 56.687 ms
xe-2-2-0-0.bb1.cph1.dk.m247.com (83.97.21.232) 48.922 ms
8 213.242.108.77 (213.242.108.77) 57.236 ms 49.733 ms 55.417 ms
9 ae-1-11.bar1.copenhagen1.level3.net (4.69.210.210) 58.459 ms 47.147 ms 50.570 ms
10 ae-1-11.bar1.copenhagen1.level3.net (4.69.210.210) 49.782 ms 56.015 ms 51.431 ms
11 213.242.108.206 (213.242.108.206) 50.803 ms 56.591 ms 88.115 ms
12 one.one.one.one (1.1.1.1) 51.524 ms 51.072 ms 60.330 ms

This case seems to be closed except you tell me it is not.

Though testing a bit more thoroughly I wonder about the following:

Safari, no add-ons or so, so no adguard, ublock origin or such. 

https://www.rki.de no orange power button

in the trustworthy urls rki is not mentioned.

And I wonder about the little amount of trackers on other sides such as eBay, hrs, nyt,  . Other tools, such as unlock origin, pivacy badger of off and others (on Firefox without eBlocker in the middle) indicate more trackers. Can that be?

@random I really appreciate your support. I know I am sometimes a pain in the b***

Could I use eblocker as a VPN only and do the tracking with my local device? So disabling the tracking part and keeping the VPN `? Not my preferred option though.