LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 08-15-2008, 08:49 AM   #1
linuxcbon
Member
 
Registered: May 2006
Posts: 56

Rep: Reputation: 16
Get rid of advertisement and stats ips ?


Hi,

when opening www.gmx.net and typing netstat -epaoFc | grep seamonkey, these got called :
img.web.de
img.ui-portal.de
js.ui-portal.de
213.248.125.73
216.34.207.71
217.72.195.157
217.72.200.153
etc.
(seems random)

The only real ip for www.gmx.net is 217.72.204.254 (found with ping), the rest is for advertisements and statistics...

I use hosts files and I enter ips manually by looking at netstat.

There is a way to allow or block a range of ips, like :
iptables -I INPUT -m iprange --src-range 80.230.0.0-80.255.0.0 -j DROP

Do you have other tips and tricks ?
/etc/hosts.deny ?

Cheers
 
Old 08-15-2008, 09:21 AM   #2
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,687

Rep: Reputation: 54
Quote:
Do you have other tips and tricks ?
...for achieving what?

I use the NoScript and the Adblock Plus extensions for firefox and all is fine for me.
 
Old 08-15-2008, 09:44 AM   #3
linuxcbon
Member
 
Registered: May 2006
Posts: 56

Original Poster
Rep: Reputation: 16
I dont use firefox.
 
Old 08-15-2008, 10:26 AM   #4
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,687

Rep: Reputation: 54
so you said...
Quote:
when opening www.gmx.net and typing netstat -epaoFc | grep seamonkey,
Those extensions are available for seamonkey too.

What you didn't say: to achieve what?
[edit] ...I know - its in the threads title...

Last edited by jomen; 08-15-2008 at 10:36 AM.
 
Old 08-15-2008, 10:40 AM   #5
linuxcbon
Member
 
Registered: May 2006
Posts: 56

Original Poster
Rep: Reputation: 16
I don't want to use extensions or other programs.
I will use /etc/hosts

By the way : do you know range of ips I should ban ?
Like dangerous ips, spamming ips etc ?

Last edited by linuxcbon; 08-15-2008 at 10:44 AM.
 
Old 08-15-2008, 10:44 AM   #6
jiml8
Senior Member
 
Registered: Sep 2003
Posts: 3,171

Rep: Reputation: 116Reputation: 116
Well, then, you have sort of limited what "tricks and tips" other people can give you.
 
Old 08-15-2008, 10:46 AM   #7
linuxcbon
Member
 
Registered: May 2006
Posts: 56

Original Poster
Rep: Reputation: 16
Feel free to give tips.
I feel free to use what I like.

What about banning a range of ips ?
 
Old 08-15-2008, 10:49 AM   #8
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,687

Rep: Reputation: 54
Indeed - there is no such thing as spamming IP's or dangerous IP's - and if they are (dangerous,spamming...) today - they may not be tomorrow.
It is a never ending and tedious work not to use such extensions to the browser and still get the same result.

/tips

Last edited by jomen; 08-15-2008 at 10:50 AM.
 
Old 08-15-2008, 11:18 AM   #9
linuxcbon
Member
 
Registered: May 2006
Posts: 56

Original Poster
Rep: Reputation: 16
How often do they change ?

I noticed these come often for ads :
193.93.124. TELEFUN
207.36. affinity.com
212.129.63. TELEFUN
213.248.125. Akamai
80.231.197. Verisign
etc.
 
Old 08-15-2008, 03:33 PM   #10
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
In /etc/hosts make those addresses point to 127.0.0.1 as in the examples shown here: http://www.mvps.org/winhelp2002/hosts.htm

Of course, this will be a labour of love as you'll have to do it manually every time you find one.
 
Old 08-15-2008, 04:39 PM   #11
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,247
Blog Entries: 5

Rep: Reputation: 191Reputation: 191
malware block lists..

* Dshield.org recommended block list (http://feeds.dshield.org/block.txt)
* EmergingThreats rules (many contain IP addresses): (http://www.emergingthreats.net/rules/)
* EmergingThreats RBN IP (http://doc.emergingthreats.net/pub/M...NetworkIPs.txt)
* Spamhaus Drop List (http://www.spamhaus.org/drop/drop.lasso)


http://www.adsblacklist.com/

Quite a few of the content filtering systems can block ad sites, for a minor subscription fee.
Easier for me to pay them for automatic updates than to try and maintain it myself.


You have Verisign in your list.. Verisign was not an advertising site last time I checked. they are a SSL Certificate provider

Last edited by farslayer; 08-15-2008 at 04:43 PM.
 
Old 08-15-2008, 05:32 PM   #12
linuxcbon
Member
 
Registered: May 2006
Posts: 56

Original Poster
Rep: Reputation: 16
For instance I blocked 80.231.197.203 (verisign), is it a stats server ?
 
Old 08-15-2008, 06:25 PM   #13
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
http://www.verisign.com/verisign-inc/index.html - I can't believe you haven't heard of the security certificate provider Verisign.
 
Old 08-15-2008, 07:10 PM   #14
linuxcbon
Member
 
Registered: May 2006
Posts: 56

Original Poster
Rep: Reputation: 16
If I open www.myspace.com then 80.231.197.203 among others is called.
 
Old 08-15-2008, 07:36 PM   #15
jomen
Senior Member
 
Registered: May 2004
Location: Leipzig/Germany
Distribution: Arch
Posts: 1,687

Rep: Reputation: 54
...so?
Why shouldn't verisign get called?
BTW:
I does not get called for me - which shows that you can - by going this way - very proably easily lock out legitimate sites and create problems instead of solving...what exactly? (never mind - don't answer that)
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Getting things straight: Apache, SSL, Multiple External IPs / Internal IPs robin.com.au Linux - Server 21 10-14-2007 12:39 AM
advertisement: Don't install Linux? [KIA]aze General 15 02-24-2007 02:24 PM
how to define a specific range of IPs and/or multiple IPs in an iptables rule?... TheHellsMaster Linux - Security 9 09-20-2004 11:06 AM
Advertisement blocking thegreatgatsby Linux - Software 2 09-23-2003 01:09 PM
Router Advertisement Deamon qnguyendang Linux - Networking 2 02-12-2003 06:12 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:24 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration