adguardteam / adguardhome Goto Github PK

vinaria cafe

DNS прописаны в
роутере (чистку кеша браузера и dns делал)
952965

При использовании "Семейного" варианта стал блокироваться сайт picarto.tv,
сайт со стримами художников:

1. Проблема проявляется с конкретным сайтом (Picarto.tv) на всех браузерах.
2. Установить ADGuard DNS "Семейный" в свойствах сетевой карты, роутера,
   модема и тп.
3. Скриншоты сравнения ADGuard DNS "Семейный" и Yandex DNS "Семейный"
   прилагаю.

$ nslookup lenta.ru 176.103.130.130
;; connection timed out; no servers could be reached

At the same time it resolves blocked domain:

$ nslookup ad.doubleclick.net 176.103.130.130
Server:     176.103.130.130
Address:    176.103.130.130#53

Non-authoritative answer:
Name:   ad.doubleclick.NET
Address: 127.0.0.1

Examle:
||smartadserver.com^$third-party is converted to ||smartadserver.com
but must be ||smartadserver.com^

Original thread and screenshot are at
https://forum.adguard.com/index.php?threads/12163/page-4#post-103963

After this task is completed:
AdguardTeam/AdGuardDNS#20

For instance:
http://redirect.viglink.com/?u=http%3A%2F%2Fwww.welt.de%2Fpolitik%2Fdeutschland%2Farticle157527399%2FRecht-zu-sagen-Fuer-euch-greift-das-Asylrecht-nicht-mehr.html&key=ddaed8f51db7bb1330a6f6de768a69b8&wtrid=socialmedia.socialflow....socialflow_twitter

Please look into it. What should be done to add it?

DNSCrypt website:
https://dnscrypt.org/

Yandex browser has dnscrypt support, but I am not sure if they allow using a third party DNS server.

1.open opera
2.navigate to www.pcworld.com
3.open any article

Scroll below for ad's missed by your DNS

1368782

Here is how it looks like inside Chrome:

175290: URL_REQUEST
https://pagead2.googlesyndication.com/pagead/gen_204?rt=dart&lid=17&sdkv=h.3.0.0&e=420706011&id&c=1408971686930332&domain=www.youtube.com
Start Time: 2016-07-27 18:05:16.993

t=  1447 [st=    0] +REQUEST_ALIVE  [dt=99609]
t=  1447 [st=    0]    DELEGATE_INFO  [dt=0]
                       --> delegate_info = "NavigationResourceThrottle"
t=  1447 [st=    0]   +URL_REQUEST_DELEGATE  [dt=2]
t=  1447 [st=    0]      DELEGATE_INFO  [dt=1]
                         --> delegate_info = "extension Tampermonkey"
t=  1448 [st=    1]      DELEGATE_INFO  [dt=0]
                         --> delegate_info = "extension Tampermonkey"
t=  1448 [st=    1]      DELEGATE_INFO  [dt=1]
                         --> delegate_info = "extension Adguard AdBlocker (Beta)"
t=  1449 [st=    2]   -URL_REQUEST_DELEGATE
t=  1449 [st=    2]    URL_REQUEST_START_JOB  [dt=0]
                       --> load_flags = 37120 (MAIN_FRAME | MAYBE_USER_GESTURE | VERIFY_EV_CERT)
                       --> method = "GET"
                       --> priority = "HIGHEST"
                       --> url = "https://pagead2.googlesyndication.com/pagead/gen_204?rt=dart&lid=17&sdkv=h.3.0.0&e=420706011&id&c=1408971686930332&domain=www.youtube.com"
t=  1449 [st=    2]   +URL_REQUEST_START_JOB  [dt=99607]
                       --> load_flags = 37120 (MAIN_FRAME | MAYBE_USER_GESTURE | VERIFY_EV_CERT)
                       --> method = "GET"
                       --> priority = "HIGHEST"
                       --> url = "https://pagead2.googlesyndication.com/pagead/gen_204?rt=dart&lid=17&sdkv=h.3.0.0&e=420706011&id&c=1408971686930332&domain=www.youtube.com"
t=  1449 [st=    2]     +URL_REQUEST_DELEGATE  [dt=2]
t=  1449 [st=    2]        DELEGATE_INFO  [dt=1]
                           --> delegate_info = "extension Adguard AdBlocker (Beta)"
t=  1450 [st=    3]        DELEGATE_INFO  [dt=0]
                           --> delegate_info = "extension Adguard AdBlocker (Beta)"
t=  1450 [st=    3]        DELEGATE_INFO  [dt=1]
                           --> delegate_info = "extension Adguard AdBlocker (Beta)"
t=  1451 [st=    4]     -URL_REQUEST_DELEGATE
t=  1451 [st=    4]      HTTP_CACHE_GET_BACKEND  [dt=0]
t=  1451 [st=    4]      HTTP_CACHE_OPEN_ENTRY  [dt=0]
                         --> net_error = -2 (ERR_FAILED)
t=  1451 [st=    4]      HTTP_CACHE_CREATE_ENTRY  [dt=0]
t=  1451 [st=    4]      HTTP_CACHE_ADD_TO_ENTRY  [dt=0]
t=  1451 [st=    4]      URL_REQUEST_DELEGATE  [dt=0]
t=  1451 [st=    4]     +HTTP_STREAM_REQUEST  [dt=99605]
t=  1451 [st=    4]        HTTP_STREAM_REQUEST_STARTED_JOB
                           --> source_dependency = 175294 (HTTP_STREAM_JOB)
t=  1452 [st=    5]        HTTP_STREAM_REQUEST_STARTED_JOB
                           --> source_dependency = 175293 (HTTP_STREAM_JOB)
t=101056 [st=99609]        CANCELLED
t=101056 [st=99609]     -HTTP_STREAM_REQUEST
t=101056 [st=99609] -REQUEST_ALIVE
175293: HTTP_STREAM_JOB
https://pagead2.googlesyndication.com/
Start Time: 2016-07-27 18:05:16.998

t=1452 [st=  0] +HTTP_STREAM_JOB  [dt=317]
                 --> alternative_service = "Uninitialized :0"
                 --> original_url = "https://pagead2.googlesyndication.com/"
                 --> priority = "HIGHEST"
                 --> source_dependency = 175290 (URL_REQUEST)
                 --> url = "https://pagead2.googlesyndication.com/"
t=1452 [st=  0]   +PROXY_SERVICE  [dt=0]
t=1452 [st=  0]      PROXY_SERVICE_RESOLVED_PROXY_LIST
                     --> pac_string = "DIRECT"
t=1452 [st=  0]   -PROXY_SERVICE
t=1452 [st=  0]    HTTP_STREAM_JOB_DELAYED
                   --> resume_after_ms = 300
t=1752 [st=300]   +HOST_RESOLVER_IMPL_REQUEST  [dt=0]
                   --> address_family = 0
                   --> allow_cached_response = true
                   --> host = "pagead2.googlesyndication.com:443"
                   --> is_speculative = false
t=1752 [st=300]      HOST_RESOLVER_IMPL_IPV6_REACHABILITY_CHECK
                     --> cached = true
                     --> ipv6_available = false
t=1752 [st=300]   -HOST_RESOLVER_IMPL_REQUEST
                   --> net_error = -804 (ERR_DNS_CACHE_MISS)
t=1752 [st=300]   +SOCKET_POOL  [dt=17]
t=1769 [st=317]      SOCKET_POOL_BOUND_TO_CONNECT_JOB
                     --> source_dependency = 175308 (CONNECT_JOB)
t=1769 [st=317]   -SOCKET_POOL
                   --> net_error = -102 (ERR_CONNECTION_REFUSED)
t=1769 [st=317] -HTTP_STREAM_JOB
175294: HTTP_STREAM_JOB
https://pagead2.googlesyndication.com/
Start Time: 2016-07-27 18:05:16.997

t=  1451 [st=    0] +HTTP_STREAM_JOB  [dt=99605]
                     --> alternative_service = "quic pagead2.googlesyndication.com:443"
                     --> original_url = "https://pagead2.googlesyndication.com/"
                     --> priority = "HIGHEST"
                     --> source_dependency = 175290 (URL_REQUEST)
                     --> url = "https://pagead2.googlesyndication.com/"
t=  1451 [st=    0]   +PROXY_SERVICE  [dt=0]
t=  1451 [st=    0]      PROXY_SERVICE_RESOLVED_PROXY_LIST
                         --> pac_string = "DIRECT"
t=  1451 [st=    0]   -PROXY_SERVICE
t=101056 [st=99605] -HTTP_STREAM_JOB

tested on windows and adguard pro on iOS

Example:
http://m.ciudad.com.ar/espectaculos/luciano-castro-visito-sabrina-rojas-showmatch-duelo-abdominales-marcelo-tinelli_76469

I would like to report that the default IPs for Adguard DNS seem to be blocking the Nvidia Geforce Experience program from downloading my graphics card drivers, I had to disable Adguard DNS to start the download, and I tested this again by re-enabling Adguard DNS and the download would fail.

Today there was a Geforce Game Ready Driver 372.54 that the Nvidia Geforce Experience alerted me about, but it can not be downloaded through the program while Adguard DNS is enabled.

DnsCrypt list https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv

Information about Adguard DNS https://gist.github.com/nkartyshov/29f82b5967ffba233ed161a3afe640c9

https://forum.adguard.com/index.php?threads/adguard-dns-beta.12162/page-3#post-95135

DNS прописаны в
роутере (чистку кеша браузера и dns делал)
952965

https://adguard.com/ru/adguard-dns/instruction.html#android

customer id 1369168:

"If I try to access any of the four DNS servers via http it asks to login. You should not expose DNS servers like that. Even if I can't login as I don't know the password, I can see the server run on "nginx/1.2.1". Chances are someone can try to find an exploit"

What exactly causes this?

Affected domain:
vmf.edge-apps.net

DNS прописаны в
роутере (чистку кеша браузера и dns делал)
952965

Source:
https://forum.adguard.com/index.php?threads/adguard-%D0%9F%D0%A0%D0%9E-%D0%B4%D0%BB%D1%8F-ios-v1-0-%D0%B1%D0%B5%D1%82%D0%B0.12328/#post-95468

Example:
https://kinovo.me/3419-mehanik2-2016.html

I am not sure about DNS though, it may be broken by other products as well.

1. I have only used Adguard DNS (176.103.130.130, 176.103.130.131) with a
   few websites because I have to disable it just to search for items on
   http://www.walmart.com/ , and so this is the first website that I have
   noticed with a problem when using Adguard DNS so far; but I have not gotten
   to test Adguard DNS on many websites yet.
2. I can only give steps for one of the problems because if Adguard DNS is
   enabled before searching for an item, I can not get to the other problem,
   and so all you have to do is go to http://www.walmart.com/ , go to the
   search area, type in what item you want to search for, and try to start the
   search (clicking the magnifying glass icon on the right side of the search
   area or hitting the enter key on your keyboard) but it will not work with
   Adguard DNS enabled. I have tested this in the latest Google Chrome and Microsoft Edge on
   Windows 10.
3. I do not think that the default Adguard DNS IPs/DNS servers should be set
   to block trackers (the spyware list), that list is more likely to break
   websites usually so that is one of the reasons that I do not use it even
   with the Adguard extension or other adblocking extensions to decrease the
   chance of breaking some functionality on websites, and so I think that the
   default IPs/DNS servers for Adguard should only focus on blocking ads and
   malicious/phishing/scam/grayware/adware/et cetera websites.
   1285994

// Our agent has tested this at his end and was unable to reproduce the issue.

2016-09-23 00:01:29,051 ERROR server.DnsRequestWorker Error while processing DNS request java.lang.IllegalArgumentException: invalid IPv6 address at org.xbill.DNS.AAAARecord.<init>(AAAARecord.java:35) at com.adguard.dns.server.EnforceSafeSearchFilter.modifyDnsRequest(EnforceSafeSearchFilter.java:96) at com.adguard.dns.server.DnsRequestWorker.run(DnsRequestWorker.java:70) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745)

Adguard DNS fails to load timesofindia.indiatimes.com website links which uses constantly updated Anti-Adblocker technologies and there is no alternative other than disabling Adgurad DNS to browse such sites.

http://timesofindia.indiatimes.com/us-elections-2016/Trump-threatens-remittance-blackmail-to-fund-border-wall-with-Mexico/articleshow/53964815.cms

Hope Adguard able to overcome sites that uses Anti-Adblockers.

Thank You.

Source:
https://forum.adguard.com/index.php?threads/adguard-dns.13530/#post-100180

Пропущена реклама слева страницы.
http://i80.fastpic.ru/big/2016/0809/e8/c76645bed781c386c5166e40ca6f5ae8.png

Оригинальный тред: https://forum.adguard.com/index.php?threads/adguard-dns-%D0%91%D0%B5%D1%82%D0%B0.12163/page-3#post-95100

При использовании Adguard DNS (адреса прописаны в роутере) происходит блокировка загрузки файлов приложением JDownloader с rusfolder.com

Другие файлообменики работают нормально.

В браузерах (Яндекс, Сафари) такой проблемы не наблюдается, при использовании Adguard DNS. Только в приложении JDownloader.

Служба поддержки приложения JDownloader сообщила, что это связано с блокировкой api.adverigo.com/127.0.0.1:80

Действительно, при удалении адресов Adguard DNS, работа JDownloader с rusfolder.com восстановилась.

http://ali.pub/4qz93
http://alipromo.com/redirect/cpa/o/rs2r2dq1pv9qb9x63pezck1zqjook2d3/?to=http%3A%2F%2Fru.aliexpress.com%2Fitem%2F5m-300-LED-SMD3528-60leds-m-Flexible-LED-Strip-Light-60led-m-IP65-Waterproof-White-Blue%2F1688086875.html%3Fspm%3D2114.13010608.0.134.YLNrAR&material=cashback

Tested with

176.103.130.130
176.103.130.131

on a router.

952965

1. http://kinozal.tv/
   The following requests

http://jsc.marketgid.com/k/i/kinozal.tv.599051.js?t=11662719
http://mxtads.com/6922931762

should be blocked by rules from DNS filter

||mxtads.com
||marketgid.com

2. 4pda.ru + Ace Stream Web Extension
   https://chrome.google.com/webstore/detail/ace-stream-web-extension/mjbepbhonbojpoaenhckjocchgfiaofo?utm_source=chrome-app-launcher-info-dialog
   Counter is not blocked by
   ||mstat.acestream.net
http://mstat.acestream.net/metrika.js

Read here the details:
https://blog.adguard.com/en/adguard-dns-beta/#comment-2846431854

We should do something about it.

I live in Japan, Taiwan, Hongkong ~~ Used Adguard DNS for nearly 2 months. My friends and I love it, but one issue is ping to the Adguard DNS Server too slow ~~
Hope can add some server in Asia country

I like the idea of the Adguard DNS, and I was trying the Family Protection servers. However, I've encountered too many links (like hyperlinks from emails) that won't load.

For now, I've switched to the OpenDNS Familyshield servers.

I suggest you add a block page when a page is blocked by the DNS server, and provide a link for reporting a page/domain that is believed to be blocked in error.

Test web page like this:
https://www.opendns.com/welcome/

I suggest adding such a test block to the DNS overview page:
https://adguard.com/en/adguard-dns/overview.html

Something like this:
https://monosnap.com/file/MFbYhCTOK0WrPIXlNxJD1mGM9xjS21

Use a command like this:
nslookup ya.ru 176.103.130.130

The question is how to get through to US servers?

For the family protection DNS, it would be really good to enforce Google SafeSearch. Google tells how to do this at the DNS level here: https://support.google.com/websearch/answer/186669?hl=en

[edit] Also YouTube restricted mode: https://support.google.com/a/answer/6214622

By the time of release we should add the following servers:
1 NY
1 SF
2 Netherlands

2016-08-03 09:43:37,800 ERROR server.DnsRequestWorker Error while processing DNS request java.net.MalformedURLException: For input string: "mail4.fast.net.id" at java.net.URL.<init>(URL.java:630) at java.net.URL.<init>(URL.java:493) at java.net.URL.<init>(URL.java:442) at com.adguard.dns.server.DnsFilter.createFilterContext(DnsFilter.java:154) at com.adguard.dns.server.DnsFilter.isBlock(DnsFilter.java:130) at com.adguard.dns.server.DnsFilter.filter(DnsFilter.java:88) at com.adguard.dns.server.DnsRequestWorker.run(DnsRequestWorker.java:55) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745) Caused by: java.lang.NumberFormatException: For input string: "mail4.fast.net.id" at java.lang.NumberFormatException.forInputString(NumberFormatException.java:65) at java.lang.Integer.parseInt(Integer.java:492) at java.lang.Integer.parseInt(Integer.java:527) at java.net.URLStreamHandler.parseURL(URLStreamHandler.java:217) at java.net.URL.<init>(URL.java:625) ... 9 more

Happened in stable Win 10.

More info here and in other comments below:
https://forum.adguard.com/index.php?threads/12163/page-2#post-92791

hello guys,i believe that http://www.filecroco.com/ site is clean and no need to block it with Ad Guard dns it just contains free software to download and not a harmful site.

best regards

It appears that dnscrypt process was down on both US servers:
AdguardTeam/AdGuardDNS#46

For a privacy Service like this it would be very nice to see. May let people allow to connect anonymously and even use it if behind firewall or as a bridge for people have ipv6 only connection with issue of ipv4 resolver connectivity as found in other issue for example add Hiddenservice address like adguard1dns5443.onion as a DNS/-Crypt resolver
Sure DNS is based on UDP by default and this support only tcp. but as you are dnscrypt enabled! Which is great. It works with your server on port TCP with dnscrypt-proxy -T (command line agrument). That works fine on anycast IP by now.
There is already dnscrypt resolvers offering this hidden for few years.

If fearing latency there still is some improvement along default config, first easiest is local dns cache..

https://adguard.com/en/privacy.html#website

`Information we collect when you use Adguard DNS

When you use Adguard DNS browser sends the following information to our server:

IP-address.
DNS request containing domain name.
We, in our turn, do not log or save any information. Since no information is being saved, nothing is sent to third parties.

Domain www.kiwihealthjobs.co.nz is being blocked for some reason. Possibly something to do with snaphire.com which is the primary domain for the server.

For instance:
https://www.my5.tv/celebrity-big-brother/season-11/episode-14

https://www.grc.com/dns/benchmark.htm

Look at this
http://www.wilderssecurity.com/threads/adguard-dns-beta.387403/#post-2604789