Selfhosted

40677 readers

297 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago

MODERATORS

[email protected]

Opnsense blocking ads for iOS? (aussie.zone)

submitted 3 weeks ago by [email protected] to c/[email protected]

9 comments fedilink hide all child comments

Hey all, I can't seem to block ads in Jetpack Joyride on iOS. In using Unbound on Opnsense and I thought I had pretty good coverage - unless iOS uses a different manner to get ads on there?

top 9 comments

sorted by: hot top controversial new old

[–] [email protected] 0 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

On Android you have to disable the use of Private DNS (or something like that) in the WiFi settings. If this is enabled it will not use your WiFi's broadcast DNS, but a predefined one. The reasoning behind this (you can believe this or not) is so that on public WiFis your DNS queries cannot be tracked or manipulated by setting up a local DNS.

I can imagine there is something similar for iOS.

If this only affects some apps then they have decided to hardcore their DNS servers. The only thing you can do now is to identify these and block the calls, but this may also break other stuff if the servers are not only used to resolve ad URLs.

[–] [email protected] 6 points 3 weeks ago

The private DNS function is also very useful if you manually set it to an ad blocking DNS server.

[–] [email protected] 8 points 3 weeks ago (2 children)

Google devices (so maybe apple ones as well) sometimes hard code the dns server so you need to redirect dns request to you local unbound instance with a firewall rule.

[–] [email protected] 2 points 3 weeks ago

Apple devices support changing the DNS server through the wifi settings.

[–] [email protected] 9 points 3 weeks ago

And sometimes Google breaks your shit when you do that (Chromecast Ultra).

[–] [email protected] 10 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

Almost every ad platform is moving to have their ad DNS server names into the same mix as content servers. Without packet sniffing they are practically indeterminate.

Current list off the top of my head: YouTube, Netflix, Peacock, Disney, Paramount+.

It's more costly for them, but 🤷

You have an outdated app that isn't aware of that. Keep it until they force you to upgrade.

[–] [email protected] 5 points 3 weeks ago (1 children)

Not sure why you’re downvoted; this is what’s happening.

Don’t believe me? Try blocking ads on IMDB using DNS blacklisting ONLY AND still get the site to load properly.

[–] [email protected] -2 points 3 weeks ago (1 children)

Guy who posted wants a fix. That's the downvote.

[–] [email protected] 3 points 3 weeks ago

Then he shouldn't have asked a question if he isn't open for answers. If an answer is obviously wrong or dismissive of some important detail I would understand it. But if the complaint is It's not a one-click-fix or I don't understand what you're talking about then that's the best way of not learning anything and not solving the problem.