OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: Kuzunkhaa on March 28, 2017, 06:15:34 pm

Title: [SOLVED] Proxy don't use "yoyo ads" list.
Post by: Kuzunkhaa on March 28, 2017, 06:15:34 pm

Hello,
I have a problem with the Remote Access Control List of Web Proxy with the "yoyo ads" list.
It is configured like the suggestions of the documentation wiki, but I can't see any domains blocked on my browser.
I have tried to change the link in to "https://pgl.yoyo.org/as/serverlist.php?hostformat=squid-dstdom-regex&showintro=0&mimetype=plaintext" but give me the same "error".
Obviously when adding a domain in to "Access Control List\Blacklist" it is filtered.

Anyone have the same problem or I have to change something on my configuration?

Thank for the help.

Title: Re: Proxy don't use "yoyo ads" list.
Post by: ctkelvin on March 29, 2017, 04:33:59 am

I have the same situation as you mentioned and tested the "Access Control List\Blacklist" with same result like you.

I found this issues starting at version 17.1.

Title: Re: Proxy don't use "yoyo ads" list.
Post by: franco on March 29, 2017, 06:42:25 am

Can you try the same with "http"? It looks like it writes the SSL handshake to the disk oO

Title: Re: Proxy don't use "yoyo ads" list.
Post by: Kuzunkhaa on March 29, 2017, 03:04:40 pm

Quote from: franco on March 29, 2017, 06:42:25 am

Can you try the same with "http"?

Hi franco, it does the same with http links. Sorry I have forgotten to add this info in the previous post.

Quote from: ctkelvin on March 29, 2017, 04:33:59 am

I found this issues starting at version 17.1.

Hi ctkelvin, personally I remember this inconvenience on the last versions of 16.7, but probably is because "yoyo list" doesn't covered some domains.

Title: Re: Proxy don't use "yoyo ads" list.
Post by: franco on March 29, 2017, 03:43:48 pm

Hmm ok, the maybe yoyo doesn't like the fetch with the client? user agent block maybe?

In any case, I've added a ticket:

https://github.com/opnsense/core/issues/1510

Title: Re: Proxy don't use "yoyo ads" list.
Post by: Kuzunkhaa on March 29, 2017, 05:36:00 pm

No user-agents blocked in my proxy configuration.
Recently I have tried another list directly downloaded in .acl and if I try to connect to a domain, covered by that list, the browser respond me with the "proxy block page".
Anyway many thanks for investigating on this issue and if you need to ask some things about my proxy configuration I'm glad to help. :)

Title: Re: Proxy don't use "yoyo ads" list.
Post by: franco on March 29, 2017, 07:20:41 pm

Ad is already looking at this, I am expecting a fix in 17.1.5. I will post updates and test patches here as they become available.


Cheers,
Franco

Title: Re: Proxy don't use "yoyo ads" list.
Post by: Kuzunkhaa on March 29, 2017, 09:10:32 pm

I really appreciate it.

Marco

Title: Re: Proxy don't use "yoyo ads" list.
Post by: franco on March 30, 2017, 09:00:58 am

Hi Marco,

Here is a patch: https://github.com/opnsense/core/commit/e52e251

You can install it by running the following command from a shell:

# opnsense-patch e52e251


Cheers,
Franco

Title: Re: Proxy don't use "yoyo ads" list.
Post by: franco on March 30, 2017, 10:14:48 am

Ad also noted the list you used is not compatible, you need to use this one...

https://pgl.yoyo.org/as/serverlist.php?hostformat=plain&showintro=0&mimetype=plaintext

Title: Re: Proxy don't use "yoyo ads" list.
Post by: Kuzunkhaa on March 31, 2017, 02:24:25 pm

Franco, the patch solve the problem. Thanks for the support.

Quote from: franco on March 30, 2017, 10:14:48 am

the list you used is not compatible

Yes, I know. It was only for a test ;)

Title: Re: Proxy don't use "yoyo ads" list.
Post by: franco on March 31, 2017, 04:50:34 pm

Alright, many thanks for confirming. :)