eBlocker Open Source Forum - Recent Topics

eBlocker Randomly stops working and no longer responding (potential memory leak?)

jimmysofat6864 — Wed, 04 Nov 2026 19:42:45 +0000

Before, my eBlocker setup was fairly reliable but I am not sure if it was a recent update or a memory leak or something but randomly, my eBlocker will stop intercepting traffic from my phone and advertisements will leak through. And when I check my eBlocker, it will just show a loading icon and no way to configure the eBlocker unit itself. I can press the power button on the unit itself and it will reboot my unit but register itself as a hard unplug when it wasn't.

It wasn't an issue a month or two ago when I got started but it seems to be a recent issue and presents itself randomly about after a day of use. I have some pictures and screenshots showing what happens when the issue occurs. On my phone, I just get a loading icon but on my desktop, I get a white screen or an error message.

1753 1752 1750 1751

DNS stopped working with active TOR network

JoxWayne — Wed, 04 Nov 2026 15:07:07 +0000

Hello,

I am wondering, if anyone else has the same problems, that I have since some days.

When I activet TOR network for my device, I cannot reach any internet site. Deativating TOR makes everything working again.

I did some tests on my PC and the first one was a nslookup wich directly failed. I also find it strange, that the DNS server name changes from eblocker.box to www.ebloker.box

TOR inactive:

nslookup eblocker.org
Server: eblocker.box
Address: 192.168.0.xxx

Name: eblocker.org
Addresses: 2a03:b0c0:3:f0:0:1:1bbe:3000
174.138.100.168

TOR active:

nslookup eblocker.org
Server: www.eblocker.box
Address: 192.168.0.xxx

DNS request timed out.
timeout was 2 seconds.

Jox

Tor fails on eBlockerOS 3.2.3 and 4.0.3: required Desc=3/Microdesc=3 protocols unsupported #460

CalimerO — Tue, 03 Nov 2026 08:37:45 +0000

@bpr

I tested Tor on eBlockerOS 3.2.3, 4.0.3 and two existing 4.1.0 test VMs on 3 November 2026.

After installing all offered updates, 3.2.3 (Tor 0.4.5.16) and 4.0.3 (Tor 0.4.7.16) both fail. The Tor service exits because the network requires Desc=3 Microdesc=3, which these versions do not support. On both systems, the dashboard nevertheless shows “Connected.”

The two eBlockerOS 4.1.0 VMs have Tor 0.4.9.11. Both reached 100% bootstrap, and an HTTPS request to torstatus.greensec.de through their Tor SOCKS socket returned HTTP 200. I have not yet tested traffic from a separate device routed through eBlocker.

The reproduction steps and the 4.1.0 follow-up are in GitHub issue #460.

Best regards
Sven

eBlocker Intercepting Traffic on Disabled Devices

jimmysofat6864 — Sun, 01 Nov 2026 05:35:35 +0000

I have eBlocker disabled in the settings for my Windows PC but I have it enabled for other devices on the network. But for some reason, eBlocker is still trying to intercept traffic from my Windows PC. When this occurs, I get DNS errors, page loading errors, or I get this error message saying "ERR_ICAP_FAILURE"

Since this machine is set to exempt, eBlocker should have completely bypassed my machine and not process it but it is still trying to process requests from my PC.

This doesn't seem to be an issue for the say first few hours of operation but given maybe a day or two, certain web requests such as clicking links in gmail lead to a page that never loads followed by the eBlocker error message which should have never been displayed in the first place since it's disabled in the eBlocker device settings.

The error message I see on the device with eBlocker disabled is as follows.

ERR_ICAP_FAILURE
Q0xUX1JFUU1PRF9BQk9SVA== (CLT_REQMOD_ABORT)

Expected Behavior:

When a device is set to "Not Protected", eBlocker should immediately cease sending gratuitous ARP replies for that host, stop proxying outbound HTTP/HTTPS traffic, and allow direct Layer 2/3 routing to the actual default gateway.

Current Behavior:

Certain web links time out and fail to load. Or in my case, I was restoring an iPhone in recovery mode via iTunes/Apple Devices/3uTools and I kept getting itunes error 1109. After extensive poking around and confirming that my eBlocker was disabled, the only way for me to restore and wipe my iPhone via iTunes was to power off my eBlocker and my iPhone restored successfully and the webpages I was trying to view loaded correctly.

1748

1749

eBlockerOS 3 and 4 are not vulnerable to eMudhra CAs with weak keys

Boris — Mon, 26 Oct 2026 12:58:38 +0000

It was found that several intermediate CA certificates by the eMudhra CA used very weak private keys.

For details, see for example eMudhra Intermediate CA Compromise.

The problem is that the private keys are now public and anyone can issue server certificates with these CAs.

Although the CA certificates with weak keys were revoked, I tested whether eBlocker could be vulnerable to server certificates issued by them.

The short answer is: no, eBlockerOS 3 and 4 are not vulnerable to these CA keys.

More details below...

There could be two potential attack vectors on eBlocker:

Fake the server certificate for any domain if eBlocker is intercepting HTTPS.
Fake the certificates of eBlocker's license and update servers: my.eblocker.org, api.eblocker.org and apt.eblocker.org.

Fake any server certificate

eBlocker's certificate validator downloads certificate revokation lists (CRLs) and prevents HTTPS connections to servers with certificates signed by one of the eMudhra CAs with weak keys.

Testing: enable HTTPS and go to https://emudhra.we-have-a-problem.com.

Tests with eBlockerOS 3.2.3 and 4.0.3 were successful: server certificates issued by the revoked eMudhra CAs were not accepted by eBlocker.

Fake license and update server certificates

The license server uses eBlocker's own certificate CAs and roots. If eBlocker tries to connect to a server (my.eblocker.org or api.eblocker.org) with a fake certificate, the Java client on the eBlocker does not allow the connection:

PKIX path building failed: ...
unable to find valid certification path to requested target

What about the update server at apt.eblocker.org?

The update server also has a certificate issued by eBlocker's own CA. If the system updater apt-get connects to a fake server it throws the error:

Certificate verification failed: The certificate is NOT trusted.
The certificate issuer is unknown.
Could not handshake: Error in the certificate verification.

But: even if it would be possible to get the eBlocker to connect to a fake update server, the code signatures would not match with eBlocker's GPG code signing keys, so updates would fail anyway.

No PHP2Shell security issue on eBlocker.org

Random — Wed, 21 Oct 2026 16:31:08 +0000

Today, we have instantly patched our PHP based website to avoid the PHP2Shell high severity security bug.

Your data is safe and we were able to apply the patch in less than an our after it's release.
Thanks to @bpr and @benne for the super quick reaction. 🚀

Read more about the bug here: https://cert.europa.eu/publications/security-advisories/2026-018/

An overview of the issue from the German Bundesamt für die Sicherheit in der Informationstechnik: https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2026/261021_PHP-kritische-Schwachstelle.html

eBlockerOS is not affected by the bug as it does not use PHP.

eBlocker keeps claiming certificate is not installed when it is installed

jimmysofat6864 — Mon, 19 Oct 2026 05:43:31 +0000

For some reason I cannot get my eBlocker error message to disappear when it is on the menu bar. It keeps showing the explanation mark but when I click it, it says the certificate is not installed but I already confirmed the certificate is installed and when I go to the function tests, they all work and it says the certificate is installed. I think the accuracy of the error messages needs to be fixed so they show up correctly or if there is an error, it needs to populate the correct error message.

1747 1745 1746

Move eBlocker to Vacation Location

Hartmut — Wed, 07 Oct 2026 07:45:03 +0000

My eBlocker is working fine at my home environment.

Can I take the eBlocker to a vacation environment, fare away from my home but Germany, where also a router is available and connect eBlocker to it ?

In other words, during vacation I want to be secured by the eBlocker. At home there is the FritzBox running alone.

When coming back from vacation eBlocker will be added to home environment soon.

Are there any issues to do this - or should I follow a special routine for adding eBlocker at vacation location ?

Kind regards Hartmut