search

ragibkl / adblock-dns-server

Adblock DNS Server powered by Bancuh DNS and dnsdist-acme
https://bancuh.com/
MIT License
66 stars 14 forks source link

DNS server option for a toned down protection #208

Closed RAiNYRENJi closed 5 months ago

RAiNYRENJi commented 5 months ago

I really like the DNS because it enforces SafeSearch but keeps the YouTube comments unblocked and blocks NSFW sites. A better version of CleanBrowsing DNS, I would say.

But a bit of a problem is that it's a bit too aggressive. Legitimate sites are blocked, like Google AdSense for legitimate purposes. And the adblocking is fine; it's just having to open sites like, for example, modified APKs with Anti-Adblock on their sites, which is just a hassle. Having both the devices and the router with the DNS setup is going to be a pain to use a different DNS like Google or Cloudflare since it's gonna be blocked or ineffective.

So here's the idea:

A DNS server option that: ☑️ Blocks trackers/analytics/bug reports ☑️ Blocks NSFW sites ☑️ Enforced SafeSesrch but YouTube comments unblocked ☑️ Blocks Bypass Methods ☑️ Blocks malicious/hidden redirect ads but keep the good ads unblocked.

Why? This:

Screenshot_20240416_120725.jpg

Screenshot_20240416_120636.jpg

Screenshot_20240416_120653.jpg

Here are also filterlists that come in handy:

ragibkl commented 5 months ago

@Tomatoide , what do you think of this?

Tomatoide commented 5 months ago

I'm not sure I don't use adsense nor modified apk sites, piracy like sites

RAiNYRENJi commented 5 months ago

I thought of having a DNS option that doesn't trigger the Anti-Adblock while still having protection on Malware and NSFW content.

ragibkl commented 5 months ago

Having both the devices and the router with the DNS setup is going to be a pain to use a different DNS like Google or Cloudflare since it's gonna be blocked or ineffective.

Hi @RAiNYRENJi , I don't think this is a problem. If you use the dns setup on your router, you can still override that on your specific device by using a different dns on your device.

On Android, you should be able to do this by using a normal google private dns.

Alternatively you can also use an app such as DNS66.

I also sometimes have to do this when I open shopee product share links on my phone.

Do give it a try and let me know the outcome.

RAiNYRENJi commented 5 months ago

On Android, you should be able to do this by using a normal google private dns.

Yep, it works through Private DNS

Screenshot_20240418_184413.jpg

ragibkl commented 5 months ago

@RAiNYRENJi , when the sites' anti-adblock gets triggered by bancuh-dns, can you check the bancuh-dns logs and see what are the domain names that were blocked? If it's a very small or just a single domain, maybe we can consider whitelisting it ourselves.

The current adblock list configs has been well optimized by @Tomatoide . I usually defer to him if we want to change the lists. But it might be fine to just whitelist 1-2 domains as long as we don't make more ads visible for other users.

RAiNYRENJi commented 5 months ago

@RAiNYRENJi , when the sites' anti-adblock gets triggered by bancuh-dns, can you check the bancuh-dns logs and see what are the domain names that were blocked? If it's a very small or just a single domain, maybe we can consider whitelisting it ourselves.

Here are the logs for the Anti-Adblock on rockmods.net and a2zapk.io

Just entering after the Cloudflare check screen on Rockmods

Screenshot_20240418_195421.jpg

Screenshot_20240418_194906.jpg

a2zapk direct download/from site download page

Screenshot_20240418_195424.jpg

Screenshot_20240418_195206.jpg

ragibkl commented 5 months ago

@RAiNYRENJi , I see 2 domains blocked on that. But they look like actual ad domains, so I think we should not whitelist them for now.

Regarding your other listed suggestions with Hagezi lists, I think @Tomatoide had looked at them earlier, and we are using some lists from them already. I think we are fine in that angle as well.

RAiNYRENJi commented 5 months ago

@ragibkl Would that mean...?

ragibkl commented 5 months ago

@RAiNYRENJi , What I mean is, initially I thought there are custom ad domains on that list that we can whitelist, so those sites can work for you. However, I think this is not a good idea. If we whitelist them, it will make the ads show up on other websites as well.

I think, let's not change any blacklist/whitelist configuration for now. When you need to browse those apk download sites, please use the workarounds that I've mentioned here: https://github.com/ragibkl/adblock-dns-server/issues/208#issuecomment-2063565145

Also, your suggestions about using hagezi lists is fine, but I think @Tomatoide have already included them in the current list. Let's not change anything yet.

I'll close this issue ticket since I think this don't need any fixes, and the workarounds mentioned should just work.

Thanks all for you contribution! Also, sorry for the late reply, I got busy with work.