john123951 / adblockplus-server

Centralized adblock plus for your home / office with privoxy proxy server.

Adblock Plus Server

Centralized adblock plus for your home / office. So all kind of advertisement blocked in one place. No need to install extensions in your Desktop, Laptop, Tablet, Smartphone etc.,

Run the below docker in any one of machine in your network.

docker run -d --restart=always --cap-add=NET_ADMIN \
-p 8118:8118 \
--name adblock john123951/adblockplus-server-china:latest

Then add this as proxy server in all other system. For ex 192.168.0.10:8118

Guide to Setup Proxy

Forward Proxy

In that way you have to manually configure proxy in each every client. For examble to set up proxy in below browser.

• firefox
• chrome
• android
• ubuntu

In this method client must know proxy details.

Note: There is no gureentee App in your smartphone also follow the proxy which is set in your browser. Refer this Stackoverflow thread

Transparent Proxy

In this client does not aware of proxy is there in between. So you no need to configure proxy in all client.

In this you have to route traffic from WiFi router to proxy server then reach the internet.

Note : HTTPS traffic can't be routed via proxy. Refer Man in the Middle Attack

How I have used in my Home

In my home I used transparent proxy.

Here is my setup

• Ubuntu 14.04
• Internet on Eth0 port (My ISP giving direct fibre connection)
• WiFi Hotspot in wlan0. Refer setup wifi hotspot ubuntu

Install Docker

curl -sSL https://get.docker.com/ | sh

Then run privoxy adblock as container

docker run -d --restart=always --cap-add=NET_ADMIN \
    -p 8118:8118 \
    --name adblock arulrajnet/adblockplus-server:latest

Copy the below text and save as file /etc/network/if-up.d/adblockplus-privoxy

#! /bin/bash
# Add iptables rule to NAT port 80 traffic to docker0:8118(Privoxy port). 

set -e

DOCKER0_IP=$(ifconfig docker0 | sed -En 's/127.0.0.1//;s/.*inet (addr:)?(([0-9]*\.){3}[0-9]*).*/\2/p')

# IPtables rule
iptables -t nat -A PREROUTING -i wlan0 -p tcp --dport 80 -j DNAT --to $DOCKER0_IP:8118

Make that as executable

sudo chmod +x /etc/network/if-up.d/adblockplus-privoxy

• Now restart your machine.
• Connect to wifi hotspot from your smartphone.
• all your HTTP ads are blocked without any app / extra settings in your phone.

Roadmap

• block HTTPS ads
  • DNS lookup
• PixelServ for blocked pages
• evaluate squid-cache

Misc

To build this container.

docker build -t $USER/adblockplus-server:latest .

IP Tables

iptables -t nat -A PREROUTING -i wlan0 -p tcp --dport 80 -j DNAT --to 172.17.0.1:8118

http://serverfault.com/questions/167233/iptables-https-transparent-proxy-with-privoxy

you can't just forward 443 traffic. Because its the MAN IN THE MIDDLE attack. Better use DHCP with auto-detect proxy.

Reference

https://github.com/RMerl/asuswrt-merlin/wiki/How-to-use-Adblock-Plus-filter-subscriptions-to-provide-advertisement-filtering-to-devices

https://github.com/evaryont/bin/blob/master/adblock-to-privoxy

https://github.com/StevenBlack/hosts/blob/master/updateHostsFile.py

License

MIT License.

Author

@arulrajnet