Add content blocking proxy settings
ameshkov opened this issue · comments
We're going to add the proxy module in v0.102:
#391
Here's the necessary minimum that should be configurable:
- Enable/disable
- Filter lists (consider extending
/#filters) - Certificate (we should generate it by ourselves, we should allow users to download this cert)
- Port, network interface
- Proxy authentication
- Proxy types: HTTP, HTTP over TLS
Proxy types: HTTP, HTTP over TLS
socks5 will not? or will this be for the future?
Transparent Proxy for routers with iptables？just need to listen the port，i will do the iptables config in my luci project
socks5 will not? or will this be for the future?
Transparent Proxy for routers with iptables？just need to listen the port，i will do the iptables config in my luci project
Not at first. But in the future -- of course, we'll add both of these options.
@Archivebase yeah, I guess we can use either this one or #391
Support for socks5 proxy is very important. Thanks a lot.
Issues' i thought to mention
- Related logs #391 (comment)
@R9980 so will we able to have another 'usage log' (hosts - both domains/ip) additional to 'query log' for web user interface with inbound/outbound bandwidth for each hosts?
yes, the proxy server will have a different log
Would this work with a proxy of http://wl.is/ .js file provided by https://www.weblockapp.com by any chance?
Blocks ads with'n apps and including the youtube app that I used several yrs ago.
+1
I'm a bit confused. #391 was closed because it appears tracking of the issue transitioned to this one. One of the posts indicates you had to create https://github.com/AdguardTeam/gomitmproxy and people can try an early release via https://github.com/AdguardTeam/urlfilter/tree/master/cmd Is there an up-to-date quickstart guide that explains how to use AdGuardHome with custom CA proxy?
@mrbluecoat it's not yet integrated into AGH so the only way to experiment with the proxy is to follow the instruction there: https://github.com/AdguardTeam/urlfilter/tree/master/cmd
I.e. you'd need to build it yourself.
Is it feasible to add a VPN server to which all local devices would connect to and that's how HTTPS filtering would work? Just as it happens in AdGuard applications. I guess that would be more sorted than configuring proxy on each device. Moreover, VPN would enable AdGuard Home to deal with IP addresses (for devices connected through VPN) and hence support for firewall rules are also possible.
Looking forward to the feature going live, two years have passed. .
Hi, in https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration#configuration-file, is http_proxy supposed to proxy AdGuard's DNS over HTTPS requests?
I have tested and it won't work reliably
@jm33-m0 http_proxy is only used for HTTP-client. For example your AGH setup has internet access only through proxy.
For example your AGH setup has internet access only through proxy
So it means all upstream DNS (over HTTPS) requests will go through the proxy configured in http_proxy field, but in my test it just ignores my http_proxy and connects to DoH server directly.
I turned to used other solutions in the end, two AGH servers, one of which is used as upstream for the other, both in the same VPN so not affected by DNS poisoning.
Hello.
I just saw this thread.
I am not so familiar with adguard.
Is it now possible to block youtube and other adds with the current version of adguard home over proxy?
Héllo, is it still not integrated in AGH ?
Is there any advice to help testing ?
Nope, not yet integrated. I'll be really-really happy if we do that until the end of the year.
When to integrate this feature?It was postponed many times and I cant wait.
+1
good job
can not wait any more
If you cannot wait -- do it yourself.
@mrbluecoat it's not yet integrated into AGH so the only way to experiment with the proxy is to follow the instruction there: https://github.com/AdguardTeam/urlfilter/tree/master/cmd
I.e. you'd need to build it yourself.
Thanks...
I will have get some tests on this...
Any progress on this?
Is this feature going to implement soon? Thanks!
Is this feature going to implement soon? Thanks!
This plan keeps being postponed
ACME support for people running step-ca would make certificate handling signifcantly easier imho.
See https://smallstep.com/docs/step-ca for further reference.
Is there any ETA for this feature? DNS blocking keeps getting worse, as - obviously - marketers / ad companies know about that.
No ETA, unfortunately. Any work on this feature will have to wait until we fix a number of issues that have long been plaguing AGH in the v0.108 cycle.
something similar with this project out there?
something similar with this project out there?
good-mitm
something similar with this project out there?
something similar with this project out there?
Wow, this is so good!
something similar with this project out there?
That was already recommended.
something similar with this project out there?
I'm using eBlocker for years and I find it's the best solution out there. Especially their malware blocker saved my a... quite a few times.👍
For anyone wants to rollout diy version this looks useful when combining with mitmproxy (especially with youtube recent shenanigan): https://ericdraken.com/pfsense-decrypt-ad-traffic
Waiting anxiously. For now, I recommend eBlocker to anyone interested.
hblock works without an external device. Just run it locally, same effect as a DNS hole.
Is there any progress ??