9 ms·
Block Facebook Servers
- kgog 6y agoI have not used this list but I do block fb and ig servers in pi-hole. Though I will now move to using this list: https://github.com/jmdugan/blocklists/blob/master/corporations/facebook/all-but-whatsapp https://github.com/jmdugan/blocklists/blob/master/corporatio...
- shadykiller 6y agoCan pi hole do device specific blocking ?
- leesalminen 6y agoYes, this was a new feature released fairly recently.
- ig0r0 6y agoYou can enable or disable specific blocklists per device group
- kgog 6y agoYes. I do very aggressive blocking on my Android TV and less so on my work laptop.
- BlueTemplar 6y agoI wanted to use Pi-Hole to block Microsoft servers too... but their updates and blocklists are on github !
- judge2020 6y agoGitHub has their own ASN though (all DNS records I tried resolving pointed to this AS), and you could just not block api.github.com or raw.githubusercontent.com. https://bgp.he.net/AS54113 https://bgp.he.net/AS54113
- CA0DA 6y agoI use this list - one thing to remember is that in the long term you need to update it periodically. I set a yearly reminder to do so.
- 2112 6y agoRelated ( user-side ) : Facebook Container https://addons.mozilla.org/en-US/firefox/addon/facebook-container/ https://addons.mozilla.org/en-US/firefox/addon/facebook-cont...
- davemtl 6y agoThis container is a piece of art. Ever since using this, Facebook no longer has any "Off-Facebook Activity" about me.
- 2112 6y agoHave you managed to verify this or you're just assuming it ? I'm just assuming it, that's why I'm asking. Like have you made a request for your data from Facebook / data brokers and it looks straight ? I trust Mozilla to the fullest and have made no effort to investigate.
- davemtl 6y agoYou can verify it for yourself. Facebook lets you view this information. https://www.facebook.com/off_facebook_activity https://www.facebook.com/off_facebook_activity
- Nextgrid 6y agoFacebook collected this data for years but only recently started disclosing it. There's no reason to trust that they're disclosing all the data they're collecting.
- ramraj07 6y agoI don't trust that this is all they have about me. Wasn't there reports that they were generating dark profiles about people not even on Facebook (by mining contact information from others)?
- ketzo 6y ago
- gorgoiler 6y agoYou could just ignore AS32934: https://www.radb.net/query/?keywords=AS32934 https://www.radb.net/query/?keywords=AS32934 ..? ...which includes the downtown Palo Alto address, hah. It’s linked from facebook.com/peering/ Here’s a list of the IP prefixes: https://bgp.he.net/AS32934#_prefixes https://bgp.he.net/AS32934#_prefixes https://bgp.he.net/AS32934#_prefixes6 https://bgp.he.net/AS32934#_prefixes6
- xurukefi 6y agoProgrammatically retrievable via whois -h whois.radb.net -- '-i origin AS32934' | grep ^route Source: https://developers.facebook.com/docs/sharing/webmasters/crawler https://developers.facebook.com/docs/sharing/webmasters/craw...
- dontchooseanick 6y agoDone, and used daily : https://github.com/smigniot/smigniot.github.io/blob/master/install_20210123_rules.sh https://github.com/smigniot/smigniot.github.io/blob/master/i... For the google part I had to recurse through the AS list first, and perform cidr merging
- megous 6y agoWouldn't ipset be easier to use and potentially faster?
- dontchooseanick 6y agoProbably yes. It seems easier to write. As it's a set of IPs instead of a set of rules it should be faster. Thanks. However I can't seem to find the --match-set option for my Android's iptables version. I Will test.
- megous 6y agoDunno if it's enough, for example: https://whois.arin.net/rest/net/NET-63-150-141-224-1.html https://whois.arin.net/rest/net/NET-63-150-141-224-1.html is Facebook's range not included above.
- rakoo 6y agoWouldn't it be more practical as a ublock list ? It has auto-updating and is easier to set than editing /etc/hosts file
- nix0n 6y agoThese are provided in easylist format (among other formats) which is compatible with uBlock.
- milkey_mouse 6y agoIt is a ublock list, or at least ublock compatible. You can import e.g. https://raw.githubusercontent.com/jmdugan/blocklists/master/corporations/facebook/all https://raw.githubusercontent.com/jmdugan/blocklists/master/... as a custom ublock list and it will work fine. I've had these lists enabled in uBlock for years.
- blackbear_ 6y agoI have (also) been blocking their IP ranges [1] with ufw, just in case they try to bypass DNS. [1] https://gist.github.com/Whitexp/9591384 https://gist.github.com/Whitexp/9591384
- bserge 6y agoI block with dnsmasq on the main router, depending on your needs just using the domain name can be enough. E.g. address=/facebook.com/0.0.0.0 address=/fbcdn.net/0.0.0.0 Also block DoT ports, all known DoH resolvers (real pain in the ass), VPN services and proxy sites for the best results.
- thih9 6y agoThe project's readme [1] also mentions dnsmasq. [1]: https://github.com/jmdugan/blocklists#faq https://github.com/jmdugan/blocklists#faq
- cromka 6y agohttps://github.com/evilneuro/FreeContributor https://github.com/evilneuro/FreeContributor gives 404
- deleted 6y ago[deleted]
- iso1210 6y ago> all known DoH resolvers (real pain in the ass) Yes, the whole point of DoH is to make it harder for us to keep control over our equipment
- thih9 6y agoPrevious discussions: - https://news.ycombinator.com/item?id=11791052 https://news.ycombinator.com/item?id=11791052 (2016) - https://news.ycombinator.com/item?id=16632677 https://news.ycombinator.com/item?id=16632677 (2018)
- November-Echo 6y agoNoob here. Is there any way to create a subscription for this in Little Snitch?
- salzig 6y agoyes, there is a feature like that in little snitch. Go to your rules window, in the bottom left there is plus and by clicking you reveal the option to add "rule group subscriptions" https://help.obdev.at/littlesnitch4/lsc-rule-group-subscriptions https://help.obdev.at/littlesnitch4/lsc-rule-group-subscript...
- salzig 6y agobtw, if any little snitch dev is reading this, please improve on this feature. I'm pretty sure this can be a selling point
- cloud_herder 6y agoYeah but this format is different than the one OP provided, would need to be reformatted into .lsrules format, no?
- DavideNL 6y agohttps://github.com/notDavid/block-facebook-with-little-snitch https://github.com/notDavid/block-facebook-with-little-snitc...
- marketingtech 6y agoUnfortunately this won't do much anymore, as Facebook and others are transitioning to server-side data transmission. Businesses now log data onto their own servers, then transmit it directly to adtech companies so that your device never directly touches the adtech server.
- judge2020 6y agoSource? The first rule of adtech is to not trust your publishers to not defraud you.
- sithadmin 6y agoThe first rule of running a megacorp is to tell your customers to take a hike if they don't like your terms.
- mr-wendel 6y agoNo, that's the second rule. The first rule of running a megacorp is... oh, wait.
- marketingtech 6y agoFB: https://developers.facebook.com/docs/marketing-api/conversions-api/ https://developers.facebook.com/docs/marketing-api/conversio... Google: https://developers.google.com/adwords/api/docs/guides/conversion-tracking https://developers.google.com/adwords/api/docs/guides/conver... This is also why companies like Tealium and Segment are now worth billions of dollars. They provide a single integration point that funnels events to dozens of marketing companies' server-side APIs.
- KirillPanov 6y agoWhy doesn't that qualify these Tealiums and Segments as "adtech servers" worthy of blocklisting? Sounds like they make the blocklist-curators' job easier.
- moneywoes 6y agoIs there an effective way to remove Facebook and Instagram ads on a iPhone? I have tried DNS solutions like blockada however they don’t work
- beervirus 6y agoDelete the apps and use Safari with an ad blocker.
- auraham 6y agoI use Firefox Focus on iOS 11 for Facebook. It worked OK until a few days ago. Now, I cannot see my messages unless I request for a desktop version of the website. Even when that option is turned on, I noticed that the site kicks me out after a couple of minutes, 10 min or so.
- grishka 6y agoInstagram serves ads as part of the feed API response. If you use the app, there's no way to remove them without patching the app. I did do that for Android, but on iOS it's impossible without jailbreak.
- mdasen 6y agoAdGuard can run a local VPN that intercepts HTTPS traffic and blocks ads even within HTTPS traffic. It's a little sketchy since they man-in-the-middle your encrypted traffic in order to do this, but they exclude extended validation certs (the ones where the name shows up next to the lock) and over 1,300 other exceptions (https://kb.adguard.com/en/general/https-filtering https://kb.adguard.com/en/general/https-filtering). That should be able to block a lot more, including ads via apps. This can do a lot more than a normal VPN or DNS blocker because it's actually intercepting and decrypting HTTPS traffic (rather than just passing it through). However, Facebook has been very good at making ads that are hard to block, even if you have access to everything. They've been pretty aggressive about getting around things like uBlock Origin even on desktop browsers. DNS-based blocking also likely wouldn't have much impact on a company that could serve ad content and regular content off the same domain names - or that could just rotate domain names too much. Also, AdGuard's local-VPN/HTTPS-intercepting feature is a pay-for feature (I believe $5/year or a $10 one-time charge).
- fnord77 6y agobruh merge or decline your PRs
- Triv888 6y agoFind all of Facebook's IP addresses here: https://whois.arin.net/ui/advanced.jsp https://whois.arin.net/ui/advanced.jsp Search by organization for Facebook, then click each organization and then, Related Networks
- wooptoo 6y agoI just block Facebook.com in NextDns together with the graph.facebook.com and connect.facebook.net domains. Messenger and WhatsApp still work fine. The same can be done in a hosts file.