[ale] Blocking ad sites with ipchains

[Gary S. Mackay]

I added another zone to my dns setup for doubleclick.net and then left the
db.doubleclick zonefile with the bare essentials. (ie. SOA, etc. no addresses)
This leaves blank white boxes on my web pages that say not found, but hey,
it's fast and I don't have to put up with their junk. Someday when I have time
I'd like to create a blank image file to return. Anyone?

- Gary

"Glenn C. Lasher Jr." wrote:
> 
> Your suggestion would block *that very server* that resolves from
> doubleclick.net, but not any servers that fit the pattern
> *.doubleclick.net.  There is www.doubleclick.net, ad.doubleclick.net,
> m.doubleclick.net, phase2media.doubleclick.net, ln.doubleclick.net and
> ad.au.doubleclick.net.  Presumably more could be added at any time. BTW,
> these resolve to 199.95.206.201, 208.32.211.200, 206.65.183.25,
> 208.32.211.200, 208.32.211.200 and 203.147.254.136 respectively.
> Obviously, it was desinged to be a pain in the ass.
> 
> On Tue, 2 Jan 2001, Wandered Inn wrote:
> 
> > smn wrote:
> > >
> > > OK, I found it... from the IPCHAINS HOWTO:
> >
> > > I don't want any local process (ie. Netscape, lynx etc.) to connect to
> > > doubleclick.net:
> > >
> > >      # ipchains -A output -d 199.95.207.0/24 -j REJECT
> > >      # ipchains -A output -d 199.95.208.0/24 -j REJECT
> > >      #
> >
> > Old message, but I was looking at doing the same thing and had a
> > question.  When I pinged doubleclick.net just now, the ip retured was
> > 199.95.206.201, so the above would not work.  Question is, could one
> > have had just one line:
> >
> > ipchains -A output -d doubleclick.net -j REJECT
> >
> > When looking at 'man ipchains'  '-d destination' says check out syntax
> > for '-s source' which says the 'source' (destination for -d) can be
> > either an address/mask, hostname, or network name.
> >
> > Or does doubleclick pull some other kind of stunts such as using
> > non-doubleclick domain names.
> >
> > What if you were to put a doubleclick entry into your /etc/hosts file
> > that points to your own server that then points to a null html file??
> >
> > ????
> >
> > OR
> >
> > Would it be better to just write a perl script that strips references to
> > doubleclick from the actual html?  Invoked via a proxy service?
> >
> >
> >
> > --
> > Until later: Geoffrey         esoteric at denali.atlnet.com
> >
> > "Great spirits have always found violent opposition from mediocre minds.
> > The
> > latter cannot understand it when a man does not thoughtlessly submit to
> > hereditary prejudices but honestly and courageously uses his
> > intelligence."
> > - Albert Einstein
> > --
> > To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.
> >
> 
> --
> glasher at nycap.rr.com
> After 163 days, Verizon still couln't deliver Telocity DSL.
> 
> --
> To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.

-- 
----------------------------------------------------------------------
Edison Information Technologies            www.EdisonInfo.com
P.O. Box 554                               Gary at EdisonInfo.com
Milan, OH  44846-0554                      419.499.7040
--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.