adguardteam / adguardhome Goto Github PK
View Code? Open in Web Editor NEWNetwork-wide ads & trackers blocking DNS server
Home Page: https://adguard.com/adguard-home.html
License: GNU General Public License v3.0
Network-wide ads & trackers blocking DNS server
Home Page: https://adguard.com/adguard-home.html
License: GNU General Public License v3.0
2016-09-23 00:01:29,051 ERROR server.DnsRequestWorker Error while processing DNS request java.lang.IllegalArgumentException: invalid IPv6 address at org.xbill.DNS.AAAARecord.<init>(AAAARecord.java:35) at com.adguard.dns.server.EnforceSafeSearchFilter.modifyDnsRequest(EnforceSafeSearchFilter.java:96) at com.adguard.dns.server.DnsRequestWorker.run(DnsRequestWorker.java:70) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745)
2016-08-02 09:35:44,182 ERROR server.DnsRequestWorker Error while processing DNS request
java.lang.Exception: Cannot get ParentalControl response for domain name mmi706.whatsapp.net
at com.adguard.filter.filters.ParentalControlApiClient.lookupDomain(ParentalControlApiClient.java:72)
at com.adguard.filter.filters.ParentalControlApiClient.getParentalControlInfo(ParentalControlApiClient.java:46)
at com.adguard.dns.server.DnsFilter.isParentalControl(DnsFilter.java:118)
at com.adguard.dns.server.DnsFilter.filter(DnsFilter.java:102)
at com.adguard.dns.server.DnsRequestWorker.run(DnsRequestWorker.java:55)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)
Пропущена реклама слева страницы.
http://i80.fastpic.ru/big/2016/0809/e8/c76645bed781c386c5166e40ca6f5ae8.png
Оригинальный тред: https://forum.adguard.com/index.php?threads/adguard-dns-%D0%91%D0%B5%D1%82%D0%B0.12163/page-3#post-95100
Happened in stable Win 10.
More info here and in other comments below:
https://forum.adguard.com/index.php?threads/12163/page-2#post-92791
customer id 1369168:
"If I try to access any of the four DNS servers via http it asks to login. You should not expose DNS servers like that. Even if I can't login as I don't know the password, I can see the server run on "nginx/1.2.1". Chances are someone can try to find an exploit"
2016-08-03 09:43:37,800 ERROR server.DnsRequestWorker Error while processing DNS request java.net.MalformedURLException: For input string: "mail4.fast.net.id" at java.net.URL.<init>(URL.java:630) at java.net.URL.<init>(URL.java:493) at java.net.URL.<init>(URL.java:442) at com.adguard.dns.server.DnsFilter.createFilterContext(DnsFilter.java:154) at com.adguard.dns.server.DnsFilter.isBlock(DnsFilter.java:130) at com.adguard.dns.server.DnsFilter.filter(DnsFilter.java:88) at com.adguard.dns.server.DnsRequestWorker.run(DnsRequestWorker.java:55) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745) Caused by: java.lang.NumberFormatException: For input string: "mail4.fast.net.id" at java.lang.NumberFormatException.forInputString(NumberFormatException.java:65) at java.lang.Integer.parseInt(Integer.java:492) at java.lang.Integer.parseInt(Integer.java:527) at java.net.URLStreamHandler.parseURL(URLStreamHandler.java:217) at java.net.URL.<init>(URL.java:625) ... 9 more
After this task is completed:
AdguardTeam/AdGuardDNS#20
Please look into it. What should be done to add it?
DNSCrypt website:
https://dnscrypt.org/
Yandex browser has dnscrypt support, but I am not sure if they allow using a third party DNS server.
By the time of release we should add the following servers:
1 NY
1 SF
2 Netherlands
2016-07-26 12:25:14,389 ERROR server.DnsRequestWorker Error while processing DNS request
java.lang.NullPointerException at
java.util.concurrent.ConcurrentHashMap.hash(ConcurrentHashMap.java:333) at
java.util.concurrent.ConcurrentHashMap.get(ConcurrentHashMap.java:988) at
com.adguard.commons.concurrent.LockManager.getOrCreateObjectLock(LockManager.java:23)
at com.adguard.commons.concurrent.LockManager.acquireExclusiveLock(LockManager.java:69)
at com.adguard.filter.filters.SafebrowsingFilter.lookupDomain(SafebrowsingFilter.java:113) at
com.adguard.filter.filters.SafebrowsingFilter.filterHttpRequest(SafebrowsingFilter.java:82) at
com.adguard.dns.server.DnsFilter.isMalware(DnsFilter.java:137) at
com.adguard.dns.server.DnsFilter.filter(DnsFilter.java:92) at
com.adguard.dns.server.DnsRequestWorker.run(DnsRequestWorker.java:55) at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at
java.lang.Thread.run(Thread.java:745)
// Our agent has tested this at his end and was unable to reproduce the issue.
Read here the details:
https://blog.adguard.com/en/adguard-dns-beta/#comment-2846431854
We should do something about it.
При использовании "Семейного" варианта стал блокироваться сайт picarto.tv,
сайт со стримами художников:
DnsCrypt list https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv
Information about Adguard DNS https://gist.github.com/nkartyshov/29f82b5967ffba233ed161a3afe640c9
For the family protection DNS, it would be really good to enforce Google SafeSearch. Google tells how to do this at the DNS level here: https://support.google.com/websearch/answer/186669?hl=en
[edit] Also YouTube restricted mode: https://support.google.com/a/answer/6214622
Example:
https://kinovo.me/3419-mehanik2-2016.html
I am not sure about DNS though, it may be broken by other products as well.
I like the idea of the Adguard DNS, and I was trying the Family Protection servers. However, I've encountered too many links (like hyperlinks from emails) that won't load.
For now, I've switched to the OpenDNS Familyshield servers.
I suggest you add a block page when a page is blocked by the DNS server, and provide a link for reporting a page/domain that is believed to be blocked in error.
hello guys,i believe that http://www.filecroco.com/ site is clean and no need to block it with Ad Guard dns it just contains free software to download and not a harmful site.
best regards
Here is how it looks like inside Chrome:
175290: URL_REQUEST
https://pagead2.googlesyndication.com/pagead/gen_204?rt=dart&lid=17&sdkv=h.3.0.0&e=420706011&id&c=1408971686930332&domain=www.youtube.com
Start Time: 2016-07-27 18:05:16.993
t= 1447 [st= 0] +REQUEST_ALIVE [dt=99609]
t= 1447 [st= 0] DELEGATE_INFO [dt=0]
--> delegate_info = "NavigationResourceThrottle"
t= 1447 [st= 0] +URL_REQUEST_DELEGATE [dt=2]
t= 1447 [st= 0] DELEGATE_INFO [dt=1]
--> delegate_info = "extension Tampermonkey"
t= 1448 [st= 1] DELEGATE_INFO [dt=0]
--> delegate_info = "extension Tampermonkey"
t= 1448 [st= 1] DELEGATE_INFO [dt=1]
--> delegate_info = "extension Adguard AdBlocker (Beta)"
t= 1449 [st= 2] -URL_REQUEST_DELEGATE
t= 1449 [st= 2] URL_REQUEST_START_JOB [dt=0]
--> load_flags = 37120 (MAIN_FRAME | MAYBE_USER_GESTURE | VERIFY_EV_CERT)
--> method = "GET"
--> priority = "HIGHEST"
--> url = "https://pagead2.googlesyndication.com/pagead/gen_204?rt=dart&lid=17&sdkv=h.3.0.0&e=420706011&id&c=1408971686930332&domain=www.youtube.com"
t= 1449 [st= 2] +URL_REQUEST_START_JOB [dt=99607]
--> load_flags = 37120 (MAIN_FRAME | MAYBE_USER_GESTURE | VERIFY_EV_CERT)
--> method = "GET"
--> priority = "HIGHEST"
--> url = "https://pagead2.googlesyndication.com/pagead/gen_204?rt=dart&lid=17&sdkv=h.3.0.0&e=420706011&id&c=1408971686930332&domain=www.youtube.com"
t= 1449 [st= 2] +URL_REQUEST_DELEGATE [dt=2]
t= 1449 [st= 2] DELEGATE_INFO [dt=1]
--> delegate_info = "extension Adguard AdBlocker (Beta)"
t= 1450 [st= 3] DELEGATE_INFO [dt=0]
--> delegate_info = "extension Adguard AdBlocker (Beta)"
t= 1450 [st= 3] DELEGATE_INFO [dt=1]
--> delegate_info = "extension Adguard AdBlocker (Beta)"
t= 1451 [st= 4] -URL_REQUEST_DELEGATE
t= 1451 [st= 4] HTTP_CACHE_GET_BACKEND [dt=0]
t= 1451 [st= 4] HTTP_CACHE_OPEN_ENTRY [dt=0]
--> net_error = -2 (ERR_FAILED)
t= 1451 [st= 4] HTTP_CACHE_CREATE_ENTRY [dt=0]
t= 1451 [st= 4] HTTP_CACHE_ADD_TO_ENTRY [dt=0]
t= 1451 [st= 4] URL_REQUEST_DELEGATE [dt=0]
t= 1451 [st= 4] +HTTP_STREAM_REQUEST [dt=99605]
t= 1451 [st= 4] HTTP_STREAM_REQUEST_STARTED_JOB
--> source_dependency = 175294 (HTTP_STREAM_JOB)
t= 1452 [st= 5] HTTP_STREAM_REQUEST_STARTED_JOB
--> source_dependency = 175293 (HTTP_STREAM_JOB)
t=101056 [st=99609] CANCELLED
t=101056 [st=99609] -HTTP_STREAM_REQUEST
t=101056 [st=99609] -REQUEST_ALIVE
175293: HTTP_STREAM_JOB
https://pagead2.googlesyndication.com/
Start Time: 2016-07-27 18:05:16.998
t=1452 [st= 0] +HTTP_STREAM_JOB [dt=317]
--> alternative_service = "Uninitialized :0"
--> original_url = "https://pagead2.googlesyndication.com/"
--> priority = "HIGHEST"
--> source_dependency = 175290 (URL_REQUEST)
--> url = "https://pagead2.googlesyndication.com/"
t=1452 [st= 0] +PROXY_SERVICE [dt=0]
t=1452 [st= 0] PROXY_SERVICE_RESOLVED_PROXY_LIST
--> pac_string = "DIRECT"
t=1452 [st= 0] -PROXY_SERVICE
t=1452 [st= 0] HTTP_STREAM_JOB_DELAYED
--> resume_after_ms = 300
t=1752 [st=300] +HOST_RESOLVER_IMPL_REQUEST [dt=0]
--> address_family = 0
--> allow_cached_response = true
--> host = "pagead2.googlesyndication.com:443"
--> is_speculative = false
t=1752 [st=300] HOST_RESOLVER_IMPL_IPV6_REACHABILITY_CHECK
--> cached = true
--> ipv6_available = false
t=1752 [st=300] -HOST_RESOLVER_IMPL_REQUEST
--> net_error = -804 (ERR_DNS_CACHE_MISS)
t=1752 [st=300] +SOCKET_POOL [dt=17]
t=1769 [st=317] SOCKET_POOL_BOUND_TO_CONNECT_JOB
--> source_dependency = 175308 (CONNECT_JOB)
t=1769 [st=317] -SOCKET_POOL
--> net_error = -102 (ERR_CONNECTION_REFUSED)
t=1769 [st=317] -HTTP_STREAM_JOB
175294: HTTP_STREAM_JOB
https://pagead2.googlesyndication.com/
Start Time: 2016-07-27 18:05:16.997
t= 1451 [st= 0] +HTTP_STREAM_JOB [dt=99605]
--> alternative_service = "quic pagead2.googlesyndication.com:443"
--> original_url = "https://pagead2.googlesyndication.com/"
--> priority = "HIGHEST"
--> source_dependency = 175290 (URL_REQUEST)
--> url = "https://pagead2.googlesyndication.com/"
t= 1451 [st= 0] +PROXY_SERVICE [dt=0]
t= 1451 [st= 0] PROXY_SERVICE_RESOLVED_PROXY_LIST
--> pac_string = "DIRECT"
t= 1451 [st= 0] -PROXY_SERVICE
t=101056 [st=99605] -HTTP_STREAM_JOB
http://jsc.marketgid.com/k/i/kinozal.tv.599051.js?t=11662719
http://mxtads.com/6922931762
should be blocked by rules from DNS filter
||mxtads.com
||marketgid.com
||mstat.acestream.net
http://mstat.acestream.net/metrika.js
Test web page like this:
https://www.opendns.com/welcome/
I suggest adding such a test block to the DNS overview page:
https://adguard.com/en/adguard-dns/overview.html
Something like this:
https://monosnap.com/file/MFbYhCTOK0WrPIXlNxJD1mGM9xjS21
При использовании Adguard DNS (адреса прописаны в роутере) происходит блокировка загрузки файлов приложением JDownloader с rusfolder.com
Другие файлообменики работают нормально.
В браузерах (Яндекс, Сафари) такой проблемы не наблюдается, при использовании Adguard DNS. Только в приложении JDownloader.
Служба поддержки приложения JDownloader сообщила, что это связано с блокировкой api.adverigo.com/127.0.0.1:80
Действительно, при удалении адресов Adguard DNS, работа JDownloader с rusfolder.com восстановилась.
1.open opera
2.navigate to www.pcworld.com
3.open any article
Scroll below for ad's missed by your DNS
1368782
For a privacy Service like this it would be very nice to see. May let people allow to connect anonymously and even use it if behind firewall or as a bridge for people have ipv6 only connection with issue of ipv4 resolver connectivity as found in other issue for example add Hiddenservice address like adguard1dns5443.onion as a DNS/-Crypt resolver
Sure DNS is based on UDP by default and this support only tcp. but as you are dnscrypt enabled! Which is great. It works with your server on port TCP with dnscrypt-proxy -T (command line agrument). That works fine on anycast IP by now.
There is already dnscrypt resolvers offering this hidden for few years.
If fearing latency there still is some improvement along default config, first easiest is local dns cache..
https://adguard.com/en/privacy.html#website
`Information we collect when you use Adguard DNS
When you use Adguard DNS browser sends the following information to our server:
IP-address.
DNS request containing domain name.
We, in our turn, do not log or save any information. Since no information is being saved, nothing is sent to third parties.
Adguard DNS fails to load timesofindia.indiatimes.com website links which uses constantly updated Anti-Adblocker technologies and there is no alternative other than disabling Adgurad DNS to browse such sites.
Hope Adguard able to overcome sites that uses Anti-Adblockers.
Thank You.
https://adguard.com/ru/adguard-dns/instruction.html#android
Tested with
176.103.130.130
176.103.130.131
on a router.
952965
Original thread and screenshot are at
https://forum.adguard.com/index.php?threads/12163/page-4#post-103963
I would like to report that the default IPs for Adguard DNS seem to be blocking the Nvidia Geforce Experience program from downloading my graphics card drivers, I had to disable Adguard DNS to start the download, and I tested this again by re-enabling Adguard DNS and the download would fail.
Today there was a Geforce Game Ready Driver 372.54 that the Nvidia Geforce Experience alerted me about, but it can not be downloaded through the program while Adguard DNS is enabled.
$ nslookup lenta.ru 176.103.130.130
;; connection timed out; no servers could be reached
At the same time it resolves blocked domain:
$ nslookup ad.doubleclick.net 176.103.130.130
Server: 176.103.130.130
Address: 176.103.130.130#53
Non-authoritative answer:
Name: ad.doubleclick.NET
Address: 127.0.0.1
It appears that dnscrypt process was down on both US servers:
AdguardTeam/AdGuardDNS#46
What exactly causes this?
Affected domain:
vmf.edge-apps.net
Use a command like this:
nslookup ya.ru 176.103.130.130
The question is how to get through to US servers?
I live in Japan, Taiwan, Hongkong ~~ Used Adguard DNS for nearly 2 months. My friends and I love it, but one issue is ping to the Adguard DNS Server too slow ~~
Hope can add some server in Asia country
Domain www.kiwihealthjobs.co.nz is being blocked for some reason. Possibly something to do with snaphire.com which is the primary domain for the server.
Examle:
||smartadserver.com^$third-party
is converted to ||smartadserver.com
but must be ||smartadserver.com^
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.