search

KodoPengin / GameIndustry-hosts-Template

Unique host templates to enhance own privacy in games, websites and regulary software on Desktop and Android devices
https://www.gameindustry.eu
89 stars 6 forks source link

block complete gstatic.com ? #3

Closed schmaller closed 1 year ago

schmaller commented 3 years ago

Hello ! With commit #5f54627f943ba9859271b7e1772666379334ea3e you blocked the whole gstatic.com domain. Isn't that way too much? i guess without access to e.g. connectivitycheck.gstatic.com a majority of android smartphones will stop working properly. Apart from that: thanks for your good work! Best regards, Daniel

KodoPengin commented 3 years ago

Hello Schmaller (Daniel), Thanks for your question.

From tests it's enough to block just "0.0.0.0 gstatic.com" to prevent Google Callbacks in relation to Steam (well, it's the only service i know with such behaviour). You can compare this to Firefox Captive Portal. However, if the service is blocked, the requests rush through and during a week i had over 15000 blocked attempts in my PI-Hole Query from Steam alone for this address.

Early example picture with Callbacks every 5 minutes https://gameindustry.eu/images/big/Steam_mit_aktivem_Google_Captive.webp

From steam.exe outgoing connections:

`IPv4 examples: 172.217.168.67 172.217.18.99 142.250.186.35 142.250.185.227 172.217.168.67 216.58.212.131 216.58.215.227 142.250.185.195

Host: http://gstatic.com/generate_204 Endpoint: gstaticadssl.l.google.com

GET /generate_204 HTTP/1.1 user-agent: Valve/Steam HTTP Client 1.0 (0) Host: gstatic.com Accept: text/html,/;q=0.9 accept-charset: ISO-8859-1,utf-8,*;q=0.7 Accept-Encoding: identity

HTTP/1.1 204 No Content Date: Wed, 13 Oct 2021 12:56:16 GMT Content-Length: 0`

Everything else for GStatic, e.g. Google Captcha, Google Fonts (https://fonts.gstatic.com), https://ssl.gstatic.com, https://encrypted-tbn0.gstatic.com or https://www.gstatic.com (Google images as example) should continue to work without problems.

In that case it would really be too much. At least Google Captcha is essential for many websites....

The "connectivitycheck.gstatic.com" should not interfere. Well, i also blocked it in my Android Templates without functional limitations/impacts. I use DNSFilter and/or PI-Hole for my Android devices.

Even if the answer was a little later, maybe you like to give feedback again

Regards Pengin

Edit PI-Hole entries with gstatic.com and www.gstatic.com: https://gameindustry.eu/ddl/zeug/Gstatic.jpg