julian-klode / dns66 Goto Github PK

For privacy/security would it be possible to have an option to deny internet access while the app is starting/reconnecting?

Hi there, thanks for this great piece of software.
I might experience a bug, though.
Every once in a while, ads reappear on websites after a few hours.
A quick manual disconnect followed by a reconnect in your app solves the problem and ads immediately vanish when refreshing the page.

Currently the service needs to be restarted manually if the configuration was changed or the host files were refreshed. We should make that more automatic.

DNS server changes

As we re-route the DNS servers currently, we need to restart the service. It might make sense to use to use "virtual" IP addresses again, and then map them on demand instead of overriding routes for the existing servers. This also has the effect of enabling non-DNS packets for those servers again. One disadvantage is that Android might choose to use a non-VPN server under very high latency situations.

Host file changes

Instead of reading all host files into one set, we can read them into multiple sets in threads, and then combine them, and use an atomic reference in the VPN thread. We could also have a queue of changes to be done against the current set, and apply them after poll() returns, but merging in the VPN thread might be too slow.

When I try to use privoxy and dns66 at the same time, to go to a webpage, the VPN goes down and only uses the proxy.

Is it possible to use the vpn and a proxy at the SAME time?

Nexus 5x, 7.1.1 DP2, tho it happened with DP1. DNS66 will always report the host files need to be downloaded when turning on. Refresh and I see the downloads happening in notifications. Press on, same message.
Most ads are being blocked though fortunately.

We should identify when a user initially launches the app and tell them that the hosts files need to be refreshed before they can be used.

For the post initial setup scenario, we should automatically apply changes in the service, see #3, and we should regularly update the lists as discussed in #2.

Basic tracking list by Disconnect‎
https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt

Disconnect Malvertising
https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt

hosts-file.net phishing
https://hosts-file.net/psh.txt

hosts-file.net misleading marketing
https://hosts-file.net/mmt.txt

hosts-file.net hijack sites
https://hosts-file.net/hjk.txt

hosts-file.net forumspam
https://hosts-file.net/hfs.txt

hosts-file.net fraud sites
https://hosts-file.net/fsa.txt

hosts-file.net exploit sites
https://hosts-file.net/exp.txt

hosts-file.net malware sites
https://hosts-file.net/emd.txt

securemecca
http://securemecca.com/Downloads/hosts.txt

Cameleon hosts
http://sysctl.org/cameleon/hosts

BBCan177 pfBlockerNG
https://gist.githubusercontent.com/BBcan177/4a8bf37c131be4803cb2/raw

Eladkarako (huge)
http://hosts.eladkarako.com/hosts.txt

StevenBlack
https://github.com/StevenBlack/hosts/raw/master/hosts

YousList
https://github.com/yous/YousList/raw/master/hosts.txt

Since this app uses a VPN connection does this mean the DNS requests are encrypted?

Is the application GPL or Apache licensed?
Is there a formerly version that still is licensed unde an apache or mit license?

We could possibly commit stuff than... thats why i ask

Minor, but there's no version number in the help/about screen.

Sometimes you just want to block a set of hosts, but not have multiple entries. It would be nice to have a multi-line editor for that.

I'm on the latest version, the internet connectivity speed is too slow when I enable all the DNS filters. Apps are taking long time to load pages. Browsing died is decreased.
When I enable ISC (US) DNS and disable all other DNS everything is back to normal.

Hi,

It would be nice if you can add features like Noroot firewall in it. Actually i wanted to block apps from connecting network.

DNS66 (v0.1.3) always have 'recconnecting error' when I use firefox with wifi connection. It alway occur when I load a webpage.

(However, DNS66 run normally when I use 4g connection or other web browsers.)

My device is Note5 on Marshmallow.

Power button won't turn on in 7.1 on the Pixel

works fine on the 5X

Allow specifying a path for the location field.

Hi,

I was using DNS66 on my previous phone just fine. On Google Pixel, I tried DNS66 0.1.2 and the long press on the power button does nothing. I feel a little vibration with the longpress but it still says "stopped." Same thing with 0.1.2 and 0.1.3 on 7.1.1. I've tried refreshing, activating/reactivating DNS servers and block lists, restoring to default, reinstalling the app, but nothing. Also tried turning off battery optimization in android settings but no luck. If I turn on "start on boot" and restart phone and go into the app it just says "Reconnecting..." without changing; long press again does nothing. Force-close app and it goes back to the normal "stopped" behavior described above.

So I just spent several hours trying to debug an issue where Play Store wasn't downloading any app, including an hour long phone call with Google's support rep. Turns out, it was DNS66! Disabling it instantly fixed the issue. This is unacceptable. Any ideas why this is happening?

How many hosts are blocked, which hosts where blocked last, possibly the entire tail of the logcat for the app. Would also help in debugging.

The DNS option works fine, but even if I enable all the lists in the settings, ads are still visible.

The host file parser currently requires "127.0.0.1 host" or "0.0.0.0 host" with varying amounts of spaces, and some comments. It should also support lists that do not contain IP addresses.

Of the default configuration, http://mirror1.malwaredomains.com/files/justdomains is such a file, although it defaults to ignored.

Hi,
i am having a bug that was previously reported and closed where starting dns66 gives a recconecting error. I've uninstalled and reinstalled the app but the problem persists.

This project seems like the perfect place to implement a HTTPS Everywhere type feature for Android. Thoughts?

We should allow not blocking only host names but also IP addresses. That's easy to do: Route the IP into the VPN, and then respond with an ICMP "Destination Unreachable" packet for each packet to the IP address.

The service accidentally accesses the config when the config may be null, causing it to crash when the service is restarted without the app running.

Ads are blocking successfully, Now it needs some options like,
● different types of filters.
● whitelist option, for whitelisting (particular apps and sites/domains.)
● ad block count,.
● firewall and malware protection.
● One tap button to activate and deactivate.
● advance protection option to block youtube and similar site ads etc.
● And simple UI like adclear.

http://m.imgur.com/7jgY019
Not sure about it, just reporting. To let you know.

We should allow stuff like **.example.com

One of the things I hear from time to time is a wish for the apks on github to include self-updating support. Currently, I am completely not setup for that: The apks here, just like the ones on my personal f-droid repo at http://jak-linux.org/fdroid/repo are built by fdroid (I just manually upload the apks here).

That said, it's something to keep in mind.

Would be nice to know what does green/grey/red dots colors mean! Green seems to mean "enabled" and red "disabled" (and who can be sure of this?), but grey is not obvious.

It's just me or show notification flag does not work?
S7 edge 6.0.1

My net gear genie app is not connecting when Dns66 is enabled. When I disable dns66 the app will connect. I tried default settings of dns66 but the result was same.

Below is the screenshot of error message I got when I try to connect .

Dns66 version : Latest build

Screenshot : http://imgur.com/p4W6VTV

https://dns.watch/ seem to be non-logging uncensored DNS servers making them a great addition to the default list. Opinions welcome!

Is there any way to block pop up ads and vibrating ads? I mean when i try to download files from some sites my phone starts vibrating and a pop up will come like saying your phone is in danger or phn got virus scan now/install antivirus or maybe install this app to remove virus from your phone, click here to download games and movies etc like pop up and vibrations.

●DNS66 version : 0.1.3
●Operating system : Android Marshmallow 6.0.1

●Below i listed some of that kind of sites●

https://dropapk.com/munh0ciu8h89

http://ul.to/9mfxlw6x

https://dailyuploads.net/ifsksrv94c1r

https://filescdn.com/fwy5vrgsysq7

https://uplod.ws/ny5w868j53k7

https://userscloud.com/7ww5ltgaf6kt

http://hugefiles.net/4o2sy9b5gxnx

Try to download files from that pages you will get vibrating and pop-up ads

An option to disable the notification banner would be great.
It takes up a lot of space that i could use for more important notifications.

When I switch on the internet connection DNS66 takes about 25 sec to start is VPN (time checked using timer) . Reconnecting also takes that much time. In between that time gap ads are shown. Try to make it start at the time of switching ON the net connecting on the phone.

We currently do not really have a source for the icon that we can modify. It would be great to have an icon with an SVG source that we can actually reasonably modify.

Android 7.1 also introduces round icons, we should have one too.

Thank you for making this app. A VPN connection is the only way I can use alternate DNS servers for whatever odd reason that might be.

However would it be possible to change the power icon to make it easier to determine if the service is running? For example, change the color to green if it is running and red for off?

Add a toggle button in the pull-down shade/menu for android 7.0+ (similar to how PIA app does)

When a email is received with a photo attached, they wont show or load when connected to the dns66 vpn.

This might be a dumb question: do you "see" the whole traffic my phone passes through the VPN? I know you can't see https traffic.

Any chance that one can be implemented?

Also, I do have a question about the name. Why is it called dns66?

The app currently cannot talk to IPv6 servers or emulate them.

DNS66 should allow specifying DNS servers with non-standard ports. This would allow it to interact with a DNSCrypt proxy running on the device (which helps #11) without root being required to run the proxy.

We should update host files on a regular interval. It might make sense to write a SyncAdapter for that.

Trying to open fhem on http://raspi:8083 does Not work. Without dns66 running, it works.

Hi, great work here. I help maintain AdAway
which was just updated to support android 7.x and latest root methods (systemless).
It does an incredible job and by the nature of its functionality virtually no battery drain etc. In fact blocking ads will help the device load pages/apps faster, etc.
It's one downside is it requires root. Root is getting more difficult to obtain on more devices. Though dns66 can surely stand on its own, I'm wondering if you'd consider any integration with AdAway? This way the large user base of AdAway, if they move to a device without root, would fall back to this functionality. Basically if AdAway can get root rights it does what it does today, if it can't it'll use this method to block hosts. Same hosts files can be used etc. I feel like it'd be a great integration so users just have a one stop app that will get rid of ads or just unwanted hosts. Could even re-brand AdAway66. Let me know your thoughts, open offer.

We can exempt apps from adblocking using addDisallowedApplication() on the VpnService Builder.

Shows this VPN Notification on my device.
Was this forked from https://github.com/dbrodie/AdBuster ?

Currently we just show a circle that is either red, grey, or green. This is bad in two ways:

Red-Green Color blindness

Red-Green color blindness is fairly common, so I think this makes it unnecessarily hard for affected people to see if something is allowed or denied.

Suggested Improvement: Make it more like a switch. So, instead of only having coloured circles, have them positioned in a pill-like oval form. Left=red=denied, Center=grey=ignored, Right=green=allowed.

Vision loss

We don't provide any textual information what that button is, rendering it useless to people with vision loss.

Suggested improvement: Set the standard Android attributes for descriptive texts.