Page 1 of 2 12 LastLast
Results 1 to 10 of 19
  1. #1
    Untangler
    Join Date
    Feb 2016
    Posts
    78

    Default IS there any point to ad blocker

    I guess 90% of traffic is https now.

    Is it even worth untangle maintaining this app?

  2. #2
    Untangle Ninja f1assistance's Avatar
    Join Date
    Apr 2009
    Location
    Holly Springs, NC
    Posts
    1,495

    Default

    While it is a perimeter tool...yes, there are more effective powers available within your sentinel...
    Vanguard Untangle...because nothing's worse than doing nothing!
    -------
    2, Pentium (R) Dual-Core CPU E5300 @ 2.60GHz 2599.968, 2089.96MB RAM
    And building #7 didn't kill itself!

  3. #3
    Untangle Ninja jcoehoorn's Avatar
    Join Date
    Mar 2010
    Location
    York, NE
    Posts
    1,798

    Default

    First of all, even with HTTPS, the Ad Blocker can still see the SNI (Server Name Indication) field and do a reverse-DNS lookup from the IP.

    That said, I don't run Ad Blocker on the gateway for my work installation. It interferes with too many legitimate sites and causes too many support tickets. Additionally, at home where I only have a few stations to worry about, ad blockers built into your web browser are much better positioned than the gateway to evaluate content for ad-ishness. They can get additional information from the browser not only about more than just the request... not only the full URL, but things like it's position in the DOM, the javascript code responsible for the request, etc.

    In other words, Untangle's Ad Blocker can still be useful... but other options are generally going to be better. The same applies to competing gateway products.
    Last edited by jcoehoorn; 03-14-2020 at 02:30 PM.
    Five time Microsoft ASP.Net MVP managing a Lenovo RD330 / E5-2420 / 16GB with Untangle 15.1.0 to protect 500Mbits for ~450 residential college students and associated staff and faculty

  4. #4
    Untangle Ninja
    Join Date
    Feb 2016
    Posts
    1,130

    Default

    Quote Originally Posted by garethsnaim View Post
    Is it even worth untangle maintaining this app?
    I agree with f1assistance that Ad Blocker isn't your best ad blocking solution, but as long as Untangle maintains SSL Inspector and it largely works for the Web, I think Ad Blocker has value. I'm showing 1234 (cool number) ads blocked, and no less important to me, 4996 cookies blocked so far in March. Ad Blocker provides me with that first line of defense, even if it's not a strong line. If it's just getting the low hanging fruit, I'm fine with that.
    f1assistance likes this.

  5. #5
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    25,263

    Default

    I find the Web Advertisements category in Web Filter more effective, but I don't block there... I generally rely on uBlock origin on the endpoint because there are too many systems that require ads or they break now.
    f1assistance likes this.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  6. #6
    Untangler
    Join Date
    Feb 2016
    Posts
    78

    Default

    I looked at ssl inspector but could not get my head around the wiki instructions. Whilst the internet worked I could not do searches on google and apparently i have to install a certificate on every device using the network. Not ideal

    My ad blocker has been running for months, its apparently found no ads to block, hence my question. I think i'll uninstall it.

  7. #7
    Untangle Ninja
    Join Date
    Feb 2016
    Posts
    1,130

    Default

    Ad Blocker has the advantage over Web Filter of being more granular when it comes to ad blocking. It's possible to define exceptions for ad/cookie blocking alone, whether out of necessity or by choice.

    That said, I currently have no exceptions from necessity. Mileage varies.

  8. #8
    Newbie
    Join Date
    Apr 2020
    Posts
    10

    Default

    Quote Originally Posted by jcoehoorn View Post
    First of all, even with HTTPS, the Ad Blocker can still see the SNI (Server Name Indication) field and do a reverse-DNS lookup from the IP.

    That said, I don't run Ad Blocker on the gateway for my work installation. It interferes with too many legitimate sites and causes too many support tickets. Additionally, at home where I only have a few stations to worry about, ad blockers built into your web browser are much better positioned than the gateway to evaluate content for ad-ishness. They can get additional information from the browser not only about more than just the request... not only the full URL, but things like it's position in the DOM, the javascript code responsible for the request, etc.

    In other words, Untangle's Ad Blocker can still be useful... but other options are generally going to be better. The same applies to competing gateway products.

    My AdBlocker is doing almost nothing. I'll get more blocks from the Web Advertisements from the Web Filter. Is it possible to do some way of DNS blocks?

    And are there any (i think json?) lists available to get more out of Ad Blocker?

  9. #9
    Untangle Ninja
    Join Date
    Feb 2016
    Posts
    1,130

    Default

    Quote Originally Posted by Martinvdm View Post
    My AdBlocker is doing almost nothing.
    I'm not sure Ad Blocker can take advantage of SNI. SNI is an explicit feature of Web Filter but not Ad Blocker. If it isn't a feature of Ad Blocker, then your Ad Blocker installation may not be able to see much.

    I have wondered if Untangle users with an operational Ad Blocker could simply pass along the list from Ad Blocker / Top Blocked Ad Sites, and those sites could be blocked (outside of Ad Blocker). But I have no idea what the unintended consequences might be.

  10. #10
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    25,263

    Default

    That's because it can't, Ad Blocker is HTTP only. You need HTTPs Inspector to break into the session for it to work there, and that's more headache than it's worth honestly.

    Also, the list is a freebie thing found on the interwebs...

    So yeah paid feature works better than the freebie... who knew!

    I ad block with browser plugins, far more reliable and easier to undo the damage when sites misbehave.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2