OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Intrusion Detection and Prevention »
  • social-networking block Tiktok
« previous next »
  • Print
Pages: [1]

Author Topic: social-networking block Tiktok  (Read 5561 times)

dcol

  • Hero Member
  • *****
  • Posts: 635
  • Karma: 51
    • View Profile
social-networking block Tiktok
« on: December 16, 2022, 06:29:18 pm »
I noticed that OPNsense-App-detect/social-networking rules does not include TikTok. Where can I put in a request to add Tiktok to the rules?
Thanks
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6767
  • Karma: 494
    • View Profile
Re: social-networking block Tiktok
« Reply #1 on: December 18, 2022, 02:48:22 pm »
In github, just find those Domains and add a PR
Logged
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

GaryPruitt

  • Newbie
  • *
  • Posts: 1
  • Karma: 0
    • View Profile
Re: social-networking block Tiktok
« Reply #2 on: December 21, 2022, 03:53:34 am »
Could you share a more detailed explanation, please? I'm not that young to understand everything the first time. So, I'd appreciate your help. Actually, if I didn't see this thread, I'd never notice that TikTok is not included. Actually, I've downloaded tik tok only to promote my music studio. Fanhype (https://fanhype.de/tiktok-aufrufe-kaufen/) will help me make it real. My friends advised me about that service, actually. Anyway, I'll be waiting for your replies, guys. Thanks in advance for your help!!!
« Last Edit: December 22, 2022, 11:59:05 am by GaryPruitt »
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6767
  • Karma: 494
    • View Profile
Re: social-networking block Tiktok
« Reply #3 on: December 21, 2022, 06:47:40 am »
This should help :)

https://github.com/opnsense/rules
Logged
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

dcol

  • Hero Member
  • *****
  • Posts: 635
  • Karma: 51
    • View Profile
Re: social-networking block Tiktok
« Reply #4 on: December 24, 2022, 07:51:02 pm »
Here are the instructions to add TikTok to IDS social rules

Add the following to /usr/local/etc/suricata/rules/opnsense.social_media.rules

#alert dns any any -> any 53 (msg:"OPN_Social_Media - TikTok - DNS request for tiktok.com"; dns_query; content:"tiktok.com"; nocase; classtype:social-media; sid:51000060;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - TikTok - Related URL (tiktok.com)"; content:"tiktok.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000061; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - TikTok - Related TLS SNI (tiktok.com)"; tls_sni; content:"tiktok.com";flow:to_server,established; classtype:social-media; sid:51000062; rev:1;)

Then go into IDS>Administration>rules. Type tiktok in the search and enable these rules. Set alert/drop as per your preference.

Be advised, if the URL's for TikTok are different in your country. Edit/Add to above rules.

« Last Edit: December 24, 2022, 07:53:01 pm by dcol »
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Intrusion Detection and Prevention »
  • social-networking block Tiktok
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2