ragibkl / adblock-dns-server

Adblock DNS Server powered by Bancuh DNS and dnsdist-acme
https://bancuh.com/
MIT License
63 stars 14 forks source link

Avoid blocking trackers like "google-analytics" and "googleads.g.doubleclick" to avoid break websites and make payment services and applications unusable #175

Closed trimechee closed 11 months ago

trimechee commented 1 year ago

Hello, thank you very much for these awesome wonderful dns servers ! πŸ₯‡ πŸ’―

Please i have request, there is fundamental problem, all dns lists break websites and make payment services and applications unusable.....because of blocking trackers that's why it's better to make lists and dns that just block ads and not the trackers, I tried a lot of mini light basic light minimal blocklists supposed to not contain false positives and not breaking the experience of apps, but I find that all the basic light even minimal light lists on the web apparently block these sites essentials:

google-analytics.com

googleads.g.doubleclick.net

for example I tried the lists of 1Hosts (mini), Disconnect, oisd-basic, adguard, control d, HaGeZi - Multi LIGHT, ph00lt0.....

but these important services "google-analytics" or "googleads.g.doubleclick" are blocked while they are essential for many sites and apps and services....

it doesn't matter if we see some ads, the most important thing is that all the sites work and we can be content with a basic blocking of the most malicious heavy ads, google is a well-known company so we have nothing to do fear but if there may be concern for privacy, there is virus malware theft.... this problem can be solved by not blocking trackers or at least tracking them from big companies like google and amazon, it will be great to make a list with in whitelist domains and trackers from big companies that we can find them here after doing this test:

https://d3ward.github.io/toolz/adblock.html

so it will be great to have a special list or dns that doesn't block trackers to avoid bugs:

"I suppose the same could be said about Google Ads which now breaks Google's partner ad settings interface.

Blocking these types of domains which breaks smaller services that aren't used as much I can understand, but when you have large scale applications being broken it may be time to look at improving the approach such as possibly splitting the AdGuard DNS filter into many smaller lists for more granular control."

urgent need to be unblocked:

https://github.com/AdguardTeam/AdGuardSDNSFilter/issues/1335

https://github.com/AdguardTeam/AdGuardSDNSFilter/issues/1142

https://github.com/AdguardTeam/AdguardFilters/issues/150327

https://github.com/AdguardTeam/AdguardFilters/pull/90357

The interest of dns blockers is to avoid installing an app or extension on our smartphone or computer which can be heavy and run in the background and use up battery and ssd, and the dns must be functional because it is not possible to deactivate the domains that we want manually in the dns and there are several subdomains, otherwise the dns block loses all interest if websites are broken and service does not work, so my request please and to make a list for ublock origin and for dns servers that allow to use custom lists in "rethink dns" and "ahadns blitz" and "control d" dns and "opennic dns" and "nextdns"....

and this list only blocks ads and does not block trackers like "google-analytics" and "googleads.g.doubleclick and amazon trackers.....to avoid false positives and the breakdown of services and site breakages website, thank you very much!

the list of trackers not to be blocked can be found on this site:

https://d3ward.github.io/toolz/adblock.html

ragibkl commented 1 year ago

@Tomatoide , what's your opinion on this?

Tomatoide commented 1 year ago

What are examples of sites or apps broken by blocking these domains?

Update: added hagezi whitelist in #183 should improve this

trimechee commented 1 year ago

"I guess I have to challenge this at least once as it's simply too problematic. For example, https://github.com/AdguardTeam/AdguardFilters/pull/90357 alone, not resolved in DNS, has been wasting a lot of precious time of user, losing financial opportunity, and causing you to lose new user1. There are more - this repo has around 10+ GA-related issues and TPF has 200+ exception, and today I found this can be solved if GA is unblocked on DNS without allowing in contents filtering. Note this is not only a matter of DNS user but also of those using DNS filtering on apps. As discussed in Slack in past, there will be many user who only want to block ads and not tracker, but those who want to block GA can still do with personal DNS or with any of client-side AG products. Privacy advocates will critisize you and me if it's done, but the qustion is the total utility of all user.

Of note someone already [asked] (https://twitter.com/miniamaruDEBU/status/1372024462149779456) paypay to solve the issue.

https://github.com/AdguardTeam/AdGuardSDNSFilter/issues/1335

trimechee commented 1 year ago

Paypay's external service binding still fails. After thinking about it for about an hour, I found out that Adguard was the cause. It wasn't the smartphone I always use, so I forgot that Adguard was running in the background. If you have any problems, you should first suspect Adguard. How many times was this pattern repeated?

https://twitter.com/zumusata366/status/1508051498772889608

trimechee commented 1 year ago

Hello @ragibkl @Tomatoide , I think our beloevd Bancuh adblock-dns-server can stand out from other dns that block google analitycs and other essential services by allowing google analytics, google analitycs belongs to the most world famous trusted global company in earth and won't scam us and we take advantage of google services for free like 15 giga of google drive and free youtube, gmail, blog..... so the minimum of gratitude is to allow these services in the background which are necessary for online payments, we would like to use Bancuh adblock-dns-server even on banking sites and everywhere, that's the interest and particularity of Bancuh adblock-dns-server compared to other very aggressive dns which contain false positives and block abuse of essential services force us to deactivate dns, we only want to block aggressive ads on streaming sites, google ads are not aggressive because google has defined a strict policy for authorized advertising and has even installed a blocker abusive ads by default in google chrome.....the press is talking that google could delete the user's google accounts if it activates ad blocker in youtube 3 times, so using a dns that blocks googles services could soon cause us deleting our google account!!

"These Domains need to be unblocked for my Shaw app to work #1142

1.) www.google-analytics.com 2.) rum-collector-2.pingdom.net 3.) siteintercept.qualtrics.com 4.) rum-static.pingdom.net 5.) strack.shaw.ca 6.) cdn.appdynamics.com 7.) shaw.demdex.net 8.) cm.everesttech.net

https://github.com/AdguardTeam/AdGuardSDNSFilter/issues/1142

if we want to block google analytics, there are hundreds of dns that do it, the really rare and exceptional and unique thing is a dns that does not block the services of a famous global company used in our daily life, but just block malware, crypto jacking, and aggressive ads from anonymous scammers and not block famous companies as seen in this test, the dream is not to block famous company trackers or just block ads and not trackers:

https://d3ward.github.io/toolz/adblock.html

edge and firefox web browsers already have powerful built-in features that block trackers, and if there is a problem, you can quickly disable these protections in the web browser, but with dns, it's more complex, you have to deactivate the dns in the os, do a dns flush to delete the old dns ca the dns does not have a control application so that we can put a white list or the application is paid or free but limited... .. or allow one of the 4 four servers of our beloved Bancuh adblock-dns-server to use google analitycs and other world society services contained in https://d3ward.github.io/toolz/adblock.html by clearly indicating this to the user, especially with manifestv3, ad blockers risk becoming ineffective and the dns remains the last resort and the dns must avoid blocking certain essential services such as those of google, amazon....