iptables and ads

iptables and ads

[woksy]

Hi people ! ;-)
I was just answering myself if i could stop ads loading from web pages such as 
yahoo, lycos, & co ? (i don't mean blocking popup, just stopping those boring 
ads from loading)
I tried to do this with something like that:
$IPTABLES -A INPUT -i $EXTIF -s 216.73.92.112/32 -j drop-and-log-it
but it seems that I mistaked.
Can anybody help me please ? 
Thanks

Re: iptables and ads

[Andre Lorenz]

Am Montag, 11. August 2003 17:38 schrieb woksy@ether.net1.nerim.net:
> Hi people ! ;-)
> I was just answering myself if i could stop ads loading from web pages such
> as yahoo, lycos, & co ? (i don't mean blocking popup, just stopping those
> boring ads from loading)
> I tried to do this with something like that:
> $IPTABLES -A INPUT -i $EXTIF -s 216.73.92.112/32 -j drop-and-log-it
> but it seems that I mistaked.
> Can anybody help me please ?
> Thanks

Hello,

I would solve this like this way

iptables  -N  drop-and-log-it
iptables -A input -i $EXTIF -j drop-and-log-it
iptables -A drop-and-log-it  -s 216.73.92.112/32 -j DROP
iptables -A drop-and-log-it  -s 216.73.92.112/32 -j LOG --log-prefix 
"SOMETHING_TEXT: "

It isn't elegant, but it might work

mfg
Andre

Re: iptables and ads

[Ramin Dousti]

On Mon, Aug 11, 2003 at 05:38:35PM +0200, woksy@ether.net1.nerim.net wrote:

> Hi people ! ;-)

Hi :-)


> I was just answering myself if i could stop ads loading from web pages such as 
> yahoo, lycos, & co ? (i don't mean blocking popup, just stopping those boring 
> ads from loading)

I think when you enter any application domain you'll better be off with
some solution at that (application) level. Use a transparant proxy and
block the communication there.

> I tried to do this with something like that:
> $IPTABLES -A INPUT -i $EXTIF -s 216.73.92.112/32 -j drop-and-log-it

Well, the line above by itself is  not incorrect but:

0) what doesn't work?
1) what does drop-and-log-it do.
2) why do you kill the communication in INPUT? Not in OUTPUT?
3) Most of the ad stuff have a big DNS pool for the servers. I don't
   think your /32 catches them all.

Ramin

> but it seems that I mistaked.
> Can anybody help me please ? 
> Thanks
> 

Re: iptables and ads

[woksy]

Thank you a lot for your help people, I think Amie gave me the best way to 
solve my problem ;-)
It was really fast, thanks ;-)


Le Lundi 11 Août 2003 17:51, Andre Lorenz a écrit :
 Am Montag, 11. August 2003 17:38 schrieb woksy@ether.net1.nerim.net:
 > Hi people ! ;-)
 > I was just answering myself if i could stop ads loading from web pages
 > such as yahoo, lycos, & co ? (i don't mean blocking popup, just stopping
 > those boring ads from loading)
 > I tried to do this with something like that:
 > $IPTABLES -A INPUT -i $EXTIF -s 216.73.92.112/32 -j drop-and-log-it
 > but it seems that I mistaked.
 > Can anybody help me please ?
 > Thanks

 Hello,

 I would solve this like this way

 iptables  -N  drop-and-log-it
 iptables -A input -i $EXTIF -j drop-and-log-it
 iptables -A drop-and-log-it  -s 216.73.92.112/32 -j DROP
 iptables -A drop-and-log-it  -s 216.73.92.112/32 -j LOG --log-prefix
 "SOMETHING_TEXT: "

 It isn't elegant, but it might work

 mfg
 Andre