5 ms·

Does anyone know of a way to run uBlock Origin as an HTTP(s) proxy? I'd really like to be able to provide uBlock Origin style functionality to mobile and other

Does anyone know of a way to run uBlock Origin as an HTTP(s) proxy? I'd really like to be able to provide uBlock Origin style functionality to mobile and other browsers on my network that can't easily run uBlock. Historically privoxy could do some of what uBlock does, but development on privoxy seems to have declined...

imglorp 5y ago
Pihole? I think they share some block lists.
- freedrock87 5y ago
  Only does DNS blocking
nix0n 5y ago
If you have Android, the easiest way to run uBlock Origin is to install it for mobile Firefox.
- vanilla_nut 5y ago
  Precisely. On iOS, I've recently been enjoying Hyperweb, which you can add some of uBlock Origin's blocklists to. My experience so far has been great, though I'm aware that their blocking is probably based on Safari's neutered "content blocker" API so it isn't quite as fast or efficient.
  - ASalazarMX 5y ago
    I've been very happy with the free tier of Lockdown Privacy, which blocks ads in every app, not only Safari. It creates a dummy VPN which can filter. Not as powerful as uBlock Origin, but it blocks in-app ads too.
    - vanilla_nut 5y ago
      Ah, not an option for me since I already use a VPN to access services on my home network like my pi hole. I tried Lockdown a while back, and I do remember it worked pretty darn well. But my pi hole works great, too, as far as DNS-level blocking is concerned. And it's nice to know that my network traffic is safe from my mobile provider :)
- boring_twenties 5y ago
  Yes, unfortunately it won't help you if you use any apps that display arbitrary websites in the system webview. E.g. a reddit client.
  - bentcorner 5y ago
    If you set it as the default browser, well-behaving apps that use Chrome Custom Tabs will use firefox in these situations.
  - xigoi 5y ago
    https://f-droid.org/packages/org.blokada.fem.fdroid https://f-droid.org/packages/org.blokada.fem.fdroid
favourable 5y ago
Have you considered pi-hole[0], NextDNS[1], or AdGuard[2]? [0] https://pi-hole.net/ https://pi-hole.net/ [1] https://nextdns.io/ https://nextdns.io/ [2] https://adguard.com/en/welcome.html https://adguard.com/en/welcome.html
- geoffeg 5y ago
  I have pi-hole, and while DNS filtering does eliminate a majority of annoyances on the web, there's still a large amount that I need uBlock for.
  - vdfs 5y ago
    DNS filtering is the only option outside the browser because of SSL
    - Chabsff 5y ago
      That's not necessarily true. SSL/TLS does not prevent all MITM, it prevents unwanted MITM. To be fair, I don't think you can install certificates on a Chromecast for example, so it might not be practically feasible for all devices, but a blanket "SSL makes that impossible" is not correct.
      - qwertyuiop_ 5y ago
        SSL/TLS does not prevent all MITM, it prevents unwanted MITM. That’s news to me. Can you expand on this ? I always assumed if an API Endpoint for example is served on TLS it’s secure till the termination. No ?
        nicoburns 5y ago
        You can always choose to install your own root certificates, at which point your browsers will trust any certificates issued by them (which could be your own mitm proxy)
LinuxBender 5y ago
Yes and no. One could create a Squid SSL-Bump (MITM) proxy and create ACL's that operate closely to uBlock. There won't be full parity between the two so uBlock would still provide some benefit to the client. The method of using Squid as a MITM proxy method assumes one can install and trust a server public key into the clients. Squid will limit what HTTP protocols one could use. e.g. h2, alpn won't be supported. If one does not mind those limitations and having to maintain a small list of sites to bypass MITM due to public key pinning then Squid can have rules for anything the client or server can see. Domains, URL's, Content-Type, Size, Methods, Ports, you name it. One could save some bandwidth on static content as an additional benefit.
quesera 5y ago
Is Privoxy development velocity the best metric? Once the framework is in place, the interesting action is in filter configuration, right? https://www.privoxy.org/ https://www.privoxy.org/ says latest release is about two months ago.
CodeHz 5y ago
You could try adguard (android version), but it is paid. And the biggest problem is most of sites are already upgraded to https, it needs MITM attack, but lots of applications won't accept any user certificate... (so adguard needs be installed to let those apps bypass its proxy, that's mean, you cannot just host a central proxy server to filter all ssl traffic)

imglorp 5y ago

Pihole? I think they share some block lists.

freedrock87 5y ago
Only does DNS blocking

nix0n 5y ago

If you have Android, the easiest way to run uBlock Origin is to install it for mobile Firefox.

vanilla_nut 5y ago
Precisely. On iOS, I've recently been enjoying Hyperweb, which you can add some of uBlock Origin's blocklists to. My experience so far has been great, though I'm aware that their blocking is probably based on Safari's neutered "content blocker" API so it isn't quite as fast or efficient.
- ASalazarMX 5y ago
  I've been very happy with the free tier of Lockdown Privacy, which blocks ads in every app, not only Safari. It creates a dummy VPN which can filter. Not as powerful as uBlock Origin, but it blocks in-app ads too.
  - vanilla_nut 5y ago
    Ah, not an option for me since I already use a VPN to access services on my home network like my pi hole. I tried Lockdown a while back, and I do remember it worked pretty darn well. But my pi hole works great, too, as far as DNS-level blocking is concerned. And it's nice to know that my network traffic is safe from my mobile provider :)
boring_twenties 5y ago
Yes, unfortunately it won't help you if you use any apps that display arbitrary websites in the system webview. E.g. a reddit client.
- bentcorner 5y ago
  If you set it as the default browser, well-behaving apps that use Chrome Custom Tabs will use firefox in these situations.
- xigoi 5y ago
  https://f-droid.org/packages/org.blokada.fem.fdroid https://f-droid.org/packages/org.blokada.fem.fdroid

favourable 5y ago

Have you considered pi-hole[0], NextDNS[1], or AdGuard[2]? [0] https://pi-hole.net/ https://pi-hole.net/ [1] https://nextdns.io/ https://nextdns.io/ [2] https://adguard.com/en/welcome.html https://adguard.com/en/welcome.html

geoffeg 5y ago
I have pi-hole, and while DNS filtering does eliminate a majority of annoyances on the web, there's still a large amount that I need uBlock for.
- vdfs 5y ago
  DNS filtering is the only option outside the browser because of SSL
  - Chabsff 5y ago
    That's not necessarily true. SSL/TLS does not prevent all MITM, it prevents unwanted MITM. To be fair, I don't think you can install certificates on a Chromecast for example, so it might not be practically feasible for all devices, but a blanket "SSL makes that impossible" is not correct.
    - qwertyuiop_ 5y ago
      SSL/TLS does not prevent all MITM, it prevents unwanted MITM. That’s news to me. Can you expand on this ? I always assumed if an API Endpoint for example is served on TLS it’s secure till the termination. No ?
      - nicoburns 5y ago
        You can always choose to install your own root certificates, at which point your browsers will trust any certificates issued by them (which could be your own mitm proxy)

LinuxBender 5y ago

Yes and no. One could create a Squid SSL-Bump (MITM) proxy and create ACL's that operate closely to uBlock. There won't be full parity between the two so uBlock would still provide some benefit to the client. The method of using Squid as a MITM proxy method assumes one can install and trust a server public key into the clients. Squid will limit what HTTP protocols one could use. e.g. h2, alpn won't be supported. If one does not mind those limitations and having to maintain a small list of sites to bypass MITM due to public key pinning then Squid can have rules for anything the client or server can see. Domains, URL's, Content-Type, Size, Methods, Ports, you name it. One could save some bandwidth on static content as an additional benefit.

quesera 5y ago

Is Privoxy development velocity the best metric? Once the framework is in place, the interesting action is in filter configuration, right? https://www.privoxy.org/ https://www.privoxy.org/ says latest release is about two months ago.

CodeHz 5y ago

You could try adguard (android version), but it is paid. And the biggest problem is most of sites are already upgraded to https, it needs MITM attack, but lots of applications won't accept any user certificate... (so adguard needs be installed to let those apps bypass its proxy, that's mean, you cannot just host a central proxy server to filter all ssl traffic)