You are not logged in.

#1 2017-08-31 22:44:04

mkkot
Member
From: Poland
Registered: 2009-12-20
Posts: 287

I have a VPN, now I need site filtering

Hello,
I have just set up a strongswan VPN on Linux for my Blackberry device. Then I downloaded https://github.com/StevenBlack/hosts and figured out that this will not actually work as I expected. Seems that strongswan is not using /etc/hosts at all.

So I have a VPN and now I need to tell my Linux to block certain sites. I read that using iptables is not generally a good idea for this. Any other recommendations?

Offline

#2 2017-08-31 23:14:35

fukawi2
Ex-Administratorino
From: .vic.au
Registered: 2007-09-28
Posts: 6,223
Website

Re: I have a VPN, now I need site filtering

strongswan is the VPN application -- I'm not sure what exactly you're expecting it to use /etc/hosts for?  To be clear, you want to block sites on your Blackberry, via the VPN?

Offline

#3 2017-09-01 05:53:49

brebs
Member
Registered: 2007-04-03
Posts: 3,742

Re: I have a VPN, now I need site filtering

mkkot wrote:

Seems that strongswan is not using /etc/hosts at all.

I expect you're wanting to "push" DNS, so that your BlackBerry uses your VPN server as a DNS server also.

I need to tell my Linux to block certain sites.

Too vague. This can be related to both DNS lookups, and iptables firewalling.

Offline

#4 2017-09-01 15:41:16

mkkot
Member
From: Poland
Registered: 2009-12-20
Posts: 287

Re: I have a VPN, now I need site filtering

My main objective is to block adverts. Since I can't do it on my Blackberry and the only way to use "proxy" there is actually using VPN with IKEv2, I set up a VPN with this (after 3 days of fighting). So now I have all my traffic from Blackberry on Linux and the only thing I need is some filtering mechanism.

Offline

#5 2017-09-01 16:06:16

brebs
Member
Registered: 2007-04-03
Posts: 3,742

Re: I have a VPN, now I need site filtering

Populating /etc/hosts will only take effect on the BlackBerry, if both:

* The Blackberry is using the Linux VPN server as its DNS server
* The Linux VPN server is configured as a DNS server, to answer DNS requests from the Blackberry

Offline

#6 2017-09-01 16:07:31

mkkot
Member
From: Poland
Registered: 2009-12-20
Posts: 287

Re: I have a VPN, now I need site filtering

Thanks a lot. That will be the easiest way I guess? smile

Offline

Board footer

Powered by FluxBB