search

divestedcg / dnsrm

A list of domains you probably don't want blocked
22 stars 5 forks source link

Google apps not working on android phones #3

Closed amarkudov closed 9 months ago

amarkudov commented 9 months ago

I'm using divblock on DivestedWRT. Blocking is good but i have trouble with android phones on my network. Google apps(Translate, Keep, Maps) and Rakuten Viber(chat works, cant send photos/videos) on android phones does not seem to work. Can't find the right domains to add in the exclusion list. Tried adding all the domains from dnsrm repo to exclusion list still no luck.

SkewedZeppelin commented 9 months ago

It purposely allows hundreds of Google domains and is unlikely to block them.

I use Google Translate and Maps myself along with websites like search and have no issue.

Tried adding all the domains from dnsrm repo to exclusion list still no luck.

The generated list is already checked against the exclusion list here, you can see which entries were removed: https://divested.dev/hosts-removed

Please use an app like PCAPDroid on your phone or use this command on your OpenWrt device: tcpdump -i br-lan udp port 53

amarkudov commented 9 months ago

When i activate PCAPDroid I get two errors on HTTPS 443, translate-pa.googleapis.com and clients1.google.com but apps work. As soon as I disable PCAPDroid everything stops working. I noticed that when I'm connected over VPN(Wireguard) to my network i don't have any problems. I was thinking maybe its not the divblock but when i disable it in OpenWrt everything works as it should. I have tested on 3 different devices and i get the same behavior.

SkewedZeppelin commented 9 months ago

ah try commenting the interface=br-lan line in /etc/dnsmasq.conf and rebooting

amarkudov commented 9 months ago

Nothing has changed, the problem still exists.

SkewedZeppelin commented 9 months ago

Are you using any other local proxy or custom DNS?

amarkudov commented 9 months ago

No, I'm not using local proxy or custom DNS.

SkewedZeppelin commented 9 months ago

You can entirely rule out divblock using /etc/init.d/divblock disable and reboot

The domains you listed are not blocked.

amarkudov commented 9 months ago

Got it working, had to add traffic rule in firewall for br-lan on port 53. Thank you for the support and your time.