Tuesday, April 23, 2019

block ads at router level

    Hello. After i put online my dns blackhole i have 2 more things to do. 1. Set up a https local proxy for my dns for using dns over https and 2. try to find if is possible to set up a basic adblock at router level.

    It turned up that task nr. 2 is very easy. All you have to do is accessing your router interface (mine is tp-link) and use parental control or access control menu. I used Access Control menu. You have to enable Internet Access Control first. Default filter policy must be "disable the packets.....". Then you use Add New button to add a new rule. For every rule there will be 4 hosts you can block - at least with my router make. For every rule you can add up to 4 host to block and, guess what, those 4 host will be sites and domains that serves adds. After you name the rule and added hosts to block you must use Save button. I didn't tested how many rules i can have, all i have needed was to test if i can do that.

    It's up to you to create how many rules you want and add hosts for every rule.
Search for most major domains that serves adds and block those dommains.

    The main advantages using this method is that is working with every device connected to that specific router and you get rid of tracking cookies served by blocked domains.

 The main cons with this method is that you cannot set too many rules because a router has a limited memory capacity.

   If you want more rules or blocked domains appart for what Access Control can offer, you can use Parental control menu in router interface.

  So far, most reliable and simple method for blocking ads is to use an addon like "NoScript" in combination with ublock or other ads blocker. NoScript addon is a must for efficient ads block.

Monday, April 22, 2019

dns blackhole with bind nameserver

   Setting a DNS blackhole to block malicious sites is not hard and is not new. The new term "PI hole" is nothing else than a pi machine running a dns server with additional files for settings.
    If you don't want to buy a new machine only for setting ap an adblocker you can use your own machine and a personal dns server. Read the following, is very easy to do, nothing special complicated.
    I use bind nameserver on linux but you can use whatever operating system, i think bind nameserver is running on windows too.
   Nothing special here, we want to block some sites at DNS server level so to all apps running on machines using that specific dns server aren't capable of reaching those sites.

  Appart from configuration files bundled with bind nameserver, you need only two more files and a little modification in named.conf file.

  In named.conf file add this at the end:
include "/etc/bind/blocked.conf.zones";

  Create a new file in /etc/bind an name that file blocked.conf.zones

My blocked.conf.zones file is like this:

 zone "pagead2.googlesyndication.com" { type master; notify no; file "/etc/bind/null.zone.file"; };
zone "googleadservices.com"  { type master; notify no; file "/etc/bind/null.zone.file"; };
zone "myphonenumbers-pa.googleapis.com" { type master; notify no; file "/etc/bind/null.zone.file"; };

    We need to create a new file in the same directory /etc/bind. Name that file null.zone.file

    My null.zone.file  file is like this:

$TTL    600
@                       1D IN SOA       localhost root (
                                        42              ; serial
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                        1D IN NS        @
                        5 IN A          127.0.0.1
        ;     *       IN      A          127.0.0.1



    And that's it! Nothing more, nothing less!

    For every site you want to block you need to add a new line in blocked.conf.zones file, i.e. if you want to block adservices.com site you will have to add a new line and write
zone "adservices.com" { type master; notify no; file "/etc/bind/null.zone.file"; };

That's it!

If you want a large list with malicious sites you can search on duckduckgo, there's a lot of lists there!

=========

    One more step, don't forget to set your dns server to match your local dns server. (instead of 8.8.8.8 or 4.2.2.1 or other internet nameservers you have to use 127.0.0.1 or localhost or whatever interface you are using in bind settings. Listen ports, net interfaces and access control list (i.e. who can use your dns server) - all these settings made for bind nameserver are up to you and must be configured by you - every machine has a specific environment. Fortunately, these settings are not complicated at all and you can do it after 5 minutes reading on internet.

=============
  Tested and working on entire LAN, for pc's and phones!@

Saturday, March 23, 2019

reclamatie confidentialitate melisa țolea

    Interesant, mai multe clipuri video mai vechi de pe youtube prezentând-o în acțiune (interpretând melodii) pe melisa țolea au fost blocate din cauza unei reclamații privind confidențialitatea.
    Am avut si eu un clip cu ea, de la un festival pentru copii din 2015, și am primit mailul privind blocarea videoclipului în România. Probabil că angajații de la youtube au considerat că melisa nu are destulă notorietate internațională, așa că în mail n-au specificat și alte țări unde videoclipul este blocat.
   Din curiozitate, am căutat si am găsit pe youtube mai multe videoclipuri cu melisa blocate în urma aceleiași reclamații tip privind confidențialitatea.
    Singura explicație pe care o găsesc este că melisei, sau persoanei care se ocupă de imaginea ei, pur și simplu nu i-a plăcut cum arăta sau cum cânta în acele clipuri - deoarece nu toate clipurile vechi sunt blocate.
    În final, oricât ai bloca anumite clipuri vechi, tot așa cânți, nu devii mai bun, iar cei care te plac te plac indiferent cum ai cântat acum nu știu câți ani. 
   

Monday, December 10, 2018

WudfRd.sys blue screen error solved easy

    Another blue screen error solved! One of the message was SYSTEM_SERVICE_EXCEPTION STOP 0×0000003B WudfRd.sys, restarted the pc and this time the message was DRIVER_IRQL_NOT_LESS_OR_EQUAL STOP 0×000000D1 WudfRd.sys.
    Ok, i know for sure my windows 10 is good. I shut down the pc, remove ram modules,reset bios, putback the ram's in a different order, start the pc and... everything is good now!
    Also, after bios reset you can try to start the pc with only one of ram module inserted at a time for to verify if that partticular module is good!
    Hope  this post will help you!

Monday, December 3, 2018

asrock motherboard slow boot solved

    Lately i have repaired a pc with an old asrock mainboard and a combination of sata and ide hard disks!
    Boot process was painfully slow, about 2 minutes to reach the os bootloader! Have to say that os is booting from ide hdd and the IDE hard disk was single and master on the ribbon connector!
    The problem was that the hdd jumper was set on "master with slave present" pair of pins!
    After i completly removed the jumper from hdd, boot process was returned to normal again, and i think that slowliness on boot was because the BIOS  searching  in vain for a slave on the ide ribbon.
    I hope this information help you - in case you still have IDE hdd coupled on asrock mainboard!

Saturday, September 8, 2018

microsoft edge

 Microsoft Edge este aplicatia de navigare pe internet intalnita in windows 10.
 Scurt pe doi: nu ma asteptam sa functioneze asa de rapid si de bine. In plus, poti instala, la fel ca in firefox si chrome, suplimente pentru blocarea reclamelor, iti poti sincroniza setarile intre dispozitive etc...
 Decat sa folosesti rahatul de Chrome Browser, produs de cea mai mare companie de spionaj de pe glob...google, mai bine folosesti Firefox sau Edge. Edge functioneaza mai rapid decat firefox.

Thursday, September 6, 2018

clonezilla unknown partition table format error

 I had this error while i was trying to clone an old hdd. None of the solutions found on the net worked.
  The solution that worked was to repair entirely the boot sector of the disk using an windows install dvd and entering the command line.
  I used the following commands:

 bootrec /fixmbr

 bootsect /nt60 sys /force /mbr

 bcdboot c:\windows

 diskpart
 select disk 0
 list partition
 select partition x
 active
 exit

 (where partition x is the partition with windows os installed)
//
edit: if that's not working for you, then you need to verify/modify the partition table, something wrong is there.

 you can download/read a pdf file from HERE  and you will find how to safe verify/modify a partition table.