Can't block domain

[sbsnb]

I'm trying to block character.ai at the router. URL filter doesn't work because it's just bypassed by default browser configs and DoT. I tried using Skynet, but the IP for character.ai falls within a built-in CDN whitelist, so that doesn't work. I tried using dnsmasq to set server=/character.ai/0.0.0.0, but that doesn't seem to have any effect on the clients even though dnsfilter is enabled and set to "router."

How can I block this damned domain?

Thanks in advance.

 

[Treadler]

I'm trying to block character.ai at the router. URL filter doesn't work because it's just bypassed by default browser configs and DoT. I tried using Skynet, but the IP for character.ai falls within a built-in CDN whitelist, so that doesn't work. I tried using dnsmasq to set server=/character.ai/0.0.0.0, but that doesn't seem to have any effect on the clients even though dnsfilter is enabled and set to "router."

How can I block this damned domain?

Thanks in advance.

Diversion.

 

[sbsnb]

Man. So we gotta have 5 layers of firewall to block a domain. Seems inefficient.

Thanks.

 

[KevTech]

What were you placing in the filter?
If you just block character it should work.

 

[dave14305]

server=/character.ai/0.0.0.0

Where did you get this syntax example from? Try:

local=/character.ai/

 

[sbsnb]

Where did you get this syntax example from? Try:

local=/character.ai/

Thanks. I will try that.

What were you placing in the filter?
If you just block character it should work.

Unfortunately that blocks everything with that word in the URL, even https://www.foo.com/test.html?characterset=ISO-8859-1, as as I understand it.

 

[KevTech]

Unfortunately that blocks everything with that word in the URL, even https://www.foo.com/test.html?characterset=ISO-8859-1, as as I understand it.

I tested this and it was not blocked as characterset is not character.

 

[jrichard326]

Diversion with character.ai added to denylist:

 

[sbsnb]

I tested this and it was not blocked as characterset is not character.

I thought URL filter filtered everything "containing" the keyword. Are you saying it only works on an exact match on the domain and not the whole URL?

 

[jrichard326]

I thought URL filter filtered everything "containing" the keyword. Are you saying it only works on an exact match on the domain and not the whole URL?

I am not using any of the filter settings under the Firewall tab. The screenshot is of DIVERSION with uiDivStats. I didn't test it other than entering character.ai in my browser and Diversion blocked it straight away. I suggest that you give it a try.

I haven't a clue what that site is.

​

​

 

[Treadler]

I am not using any of the filter settings under the Firewall tab. The screenshot is of DIVERSION with uiDivStats. I didn't test it other than entering character.ai in my browser and Diversion blocked it straight away. I suggest that you give it a try.

I haven't a clue what that site is.

​

​

This is the way.

 

[dave14305]

I thought URL filter filtered everything "containing" the keyword. Are you saying it only works on an exact match on the domain and not the whole URL?

If it's an HTTPS connection, the URL path and parameters will be encrypted. Only the FQDN will be visible to the firewall.