Amahi Wiki - User contributions [en]

Ad-blocking

2015-06-28T08:40:01Z

Scott Falkiner: /* Change DNSMasq config */

{{WorkInProgress}}






This section will document how to run your HDA as a network wide ad-blocking tool, utilising DNS redirects and a small pixel server. 

The work here was based on: https://sfxpt.wordpress.com/2011/02/21/the-best-ad-blocking-method/.

Pixelserv is a webserver which simply serves 1x1 blank pixels. By redirecting web requests for adverts to our pixelserver, ads are replaced by this 1x1 pixel leaving the target webpage intact. This will work on all devices across your network, removing the need for software-based solutions on each device.

A shell script get-adlist.sh will update the list of blocked domains (stored as /etc/dnsmasq.adblock.conf) whever you run it. You can also manually edit the list and remove domains that you wish to see (in the case of wrongly blocked domains).

= Fedora 19 =

Precusors -
*You'll need net-tools installed to use ifconfig
yum install net-tools
* You also need a file editing tool. Vi will suffice, however nano is a bit more user friendly.
yum install nano
* This guide assumes your network interface is named p2p1 and your HDA IP address is 192.168.1.2. Check with ifconfig, and change this guide where neccessary.

==Get Ad List==
This part of the process creates a file on your HDA which identifies where adverts originate from, and where to redirect them to.
* Create a new shell file
nano /usr/local/bin/get-adlist.sh

* Copy and paste the following into it
#!/bin/sh
# Download the DNSmasq formatted ad block list
curl "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq&showintro=0&mimetype=plaintext" | sed "s/127\.0\.0\.1/192.168.1.99/" > /etc/dnsmasq.adblock.conf
# Restart DNSmasq
service dnsmasq restart

* Change permissions on the shell file
chmod -v 755 /usr/local/bin/get-adlist.sh

* Run the shell file
/usr/local/bin/get-adlist.sh

==Change DNSMasq config==
DNSMasq reads the adlist file and redirects DNS requests as configured.
* Add the block list to DNSMasq configuration
echo "conf-file=/etc/dnsmasq.adblock.conf" >> /etc/dnsmasq.conf

* Restart DNSMasq
service dnsmasq restart

==Bind Apache to main IP address==
By default, Apache will try to use all IP addresses. We require an IP address later in the process and so we have to tell Apache only to use the standard HDA address.
* Edit the Apache config file using a file editor:
nano /etc/httpd/conf/httpd.conf

* Add your HDAs IP address to this section in the conf file:
#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
#
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses.
#
#Listen 12.34.56.78:80
Listen 192.168.1.2:80

* Restart Apache
service httpd restart

==Pixel Server==
The pixel server is where we're redirecting adverts to. A simple 1x1 pixel is served on the IP address specified.
* You need to download Pixelserv to the HDA:
wget <nowiki>http://proxytunnel.sourceforge.net/files/pixelserv.pl.txt</nowiki>

* Move and rename the Pixelserv binary:
mv pixelserv.pl.txt /usr/local/bin/pixelserv

* Edit pixelserv using a file editing program of your choice
nano pixelserv

* Change the IP address to a free one of your choice (eg. 192.168.1.99)
$sock = new IO::Socket::INET ( LocalHost => '0.0.0.0',
change to
$sock = new IO::Socket::INET ( LocalHost => '192.168.1.99',

* Change permissions
chmod 755 /usr/local/pixelserv

* Create file /etc/init.d/pixelserv
nano /etc/init.d/pixelserv
and copy the following to it (changing the IP addresses and interfaces where neccessary):
#! /bin/sh
# /etc/init.d/pixelserv
#

# Carry out specific functions when asked to by the system
case "$1" in
start)
echo "Creating Interface "
ifconfig p2p1:0 192.168.1.99
echo "Starting pixelserv "
/usr/local/bin/pixelserv &
;;
stop)
echo "Stopping script pixelserv"
pkill -9 pixelserv &
echo "Killing Interface "
ifconfig p2p1:0 down
;;
*)
echo "Usage: /etc/init.d/pixelserv {start|stop}"
exit 1
;;
esac
exit 0

* Change permissions
chmod 755 /etc/init.d/pixelserv

* To bring the new interface up and start pixelserv
/etc/init.d/pixelserv start

* To stop pixelserv and close the virtual interface
/etc/init.d/pixelserv stop

Enjoy ad-free network on ALL devices!

Ad-blocking

2015-06-28T08:35:00Z

Scott Falkiner: /* Get Ad List */

{{WorkInProgress}}






This section will document how to run your HDA as a network wide ad-blocking tool, utilising DNS redirects and a small pixel server. 

The work here was based on: https://sfxpt.wordpress.com/2011/02/21/the-best-ad-blocking-method/.

Pixelserv is a webserver which simply serves 1x1 blank pixels. By redirecting web requests for adverts to our pixelserver, ads are replaced by this 1x1 pixel leaving the target webpage intact. This will work on all devices across your network, removing the need for software-based solutions on each device.

A shell script get-adlist.sh will update the list of blocked domains (stored as /etc/dnsmasq.adblock.conf) whever you run it. You can also manually edit the list and remove domains that you wish to see (in the case of wrongly blocked domains).

= Fedora 19 =

Precusors -
*You'll need net-tools installed to use ifconfig
yum install net-tools
* You also need a file editing tool. Vi will suffice, however nano is a bit more user friendly.
yum install nano
* This guide assumes your network interface is named p2p1 and your HDA IP address is 192.168.1.2. Check with ifconfig, and change this guide where neccessary.

==Get Ad List==
This part of the process creates a file on your HDA which identifies where adverts originate from, and where to redirect them to.
* Create a new shell file
nano /usr/local/bin/get-adlist.sh

* Copy and paste the following into it
#!/bin/sh
# Download the DNSmasq formatted ad block list
curl "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq&showintro=0&mimetype=plaintext" | sed "s/127\.0\.0\.1/192.168.1.99/" > /etc/dnsmasq.adblock.conf
# Restart DNSmasq
service dnsmasq restart

* Change permissions on the shell file
chmod -v 755 /usr/local/bin/get-adlist.sh

* Run the shell file
/usr/local/bin/get-adlist.sh

==Change DNSMasq config==
This tells DNSMasq the list of domains and where the should be redirected to
* Add the block list to DNSMasq configuration
echo "conf-file=/etc/dnsmasq.adblock.conf" >> /etc/dnsmasq.conf

* Restart DNSMasq
service dnsmasq restart

==Bind Apache to main IP address==
By default, Apache will try to use all IP addresses. We require an IP address later in the process and so we have to tell Apache only to use the standard HDA address.
* Edit the Apache config file using a file editor:
nano /etc/httpd/conf/httpd.conf

* Add your HDAs IP address to this section in the conf file:
#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
#
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses.
#
#Listen 12.34.56.78:80
Listen 192.168.1.2:80

* Restart Apache
service httpd restart

==Pixel Server==
The pixel server is where we're redirecting adverts to. A simple 1x1 pixel is served on the IP address specified.
* You need to download Pixelserv to the HDA:
wget <nowiki>http://proxytunnel.sourceforge.net/files/pixelserv.pl.txt</nowiki>

* Move and rename the Pixelserv binary:
mv pixelserv.pl.txt /usr/local/bin/pixelserv

* Edit pixelserv using a file editing program of your choice
nano pixelserv

* Change the IP address to a free one of your choice (eg. 192.168.1.99)
$sock = new IO::Socket::INET ( LocalHost => '0.0.0.0',
change to
$sock = new IO::Socket::INET ( LocalHost => '192.168.1.99',

* Change permissions
chmod 755 /usr/local/pixelserv

* Create file /etc/init.d/pixelserv
nano /etc/init.d/pixelserv
and copy the following to it (changing the IP addresses and interfaces where neccessary):
#! /bin/sh
# /etc/init.d/pixelserv
#

# Carry out specific functions when asked to by the system
case "$1" in
start)
echo "Creating Interface "
ifconfig p2p1:0 192.168.1.99
echo "Starting pixelserv "
/usr/local/bin/pixelserv &
;;
stop)
echo "Stopping script pixelserv"
pkill -9 pixelserv &
echo "Killing Interface "
ifconfig p2p1:0 down
;;
*)
echo "Usage: /etc/init.d/pixelserv {start|stop}"
exit 1
;;
esac
exit 0

* Change permissions
chmod 755 /etc/init.d/pixelserv

* To bring the new interface up and start pixelserv
/etc/init.d/pixelserv start

* To stop pixelserv and close the virtual interface
/etc/init.d/pixelserv stop

Enjoy ad-free network on ALL devices!

Ad-blocking

2015-06-27T17:58:50Z

Scott Falkiner: /* Fedora 19 */

{{WorkInProgress}}






This section will document how to run your HDA as a network wide ad-blocking tool, utilising DNS redirects and a small pixel server. 

The work here was based on: https://sfxpt.wordpress.com/2011/02/21/the-best-ad-blocking-method/.

Pixelserv is a webserver which simply serves 1x1 blank pixels. By redirecting web requests for adverts to our pixelserver, ads are replaced by this 1x1 pixel leaving the target webpage intact. This will work on all devices across your network, removing the need for software-based solutions on each device.

A shell script get-adlist.sh will update the list of blocked domains (stored as /etc/dnsmasq.adblock.conf) whever you run it. You can also manually edit the list and remove domains that you wish to see (in the case of wrongly blocked domains).

= Fedora 19 =

Precusors -
*You'll need net-tools installed to use ifconfig
yum install net-tools
* You also need a file editing tool. Vi will suffice, however nano is a bit more user friendly.
yum install nano
* This guide assumes your network interface is named p2p1 and your HDA IP address is 192.168.1.2. Check with ifconfig, and change this guide where neccessary.

==Get Ad List==
This part of the process creates a file on your HDA which identifies where adverts originate from, and then redirects their addresses.
* Create a new shell file
nano /usr/local/bin/get-adlist.sh

* Copy and paste the following into it
#!/bin/sh
# Download the DNSmasq formatted ad block list
curl "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq&showintro=0&mimetype=plaintext" | sed "s/127\.0\.0\.1/192.168.1.99/" > /etc/dnsmasq.adblock.conf
# Restart DNSmasq
service dnsmasq restart

* Change permissions on the shell file
chmod -v 755 /usr/local/bin/get-adlist.sh

* Run the shell file
/usr/local/bin/get-adlist.sh

==Change DNSMasq config==
This tells DNSMasq the list of domains and where the should be redirected to
* Add the block list to DNSMasq configuration
echo "conf-file=/etc/dnsmasq.adblock.conf" >> /etc/dnsmasq.conf

* Restart DNSMasq
service dnsmasq restart

==Bind Apache to main IP address==
By default, Apache will try to use all IP addresses. We require an IP address later in the process and so we have to tell Apache only to use the standard HDA address.
* Edit the Apache config file using a file editor:
nano /etc/httpd/conf/httpd.conf

* Add your HDAs IP address to this section in the conf file:
#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
#
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses.
#
#Listen 12.34.56.78:80
Listen 192.168.1.2:80

* Restart Apache
service httpd restart

==Pixel Server==
The pixel server is where we're redirecting adverts to. A simple 1x1 pixel is served on the IP address specified.
* You need to download Pixelserv to the HDA:
wget <nowiki>http://proxytunnel.sourceforge.net/files/pixelserv.pl.txt</nowiki>

* Move and rename the Pixelserv binary:
mv pixelserv.pl.txt /usr/local/bin/pixelserv

* Edit pixelserv using a file editing program of your choice
nano pixelserv

* Change the IP address to a free one of your choice (eg. 192.168.1.99)
$sock = new IO::Socket::INET ( LocalHost => '0.0.0.0',
change to
$sock = new IO::Socket::INET ( LocalHost => '192.168.1.99',

* Change permissions
chmod 755 /usr/local/pixelserv

* Create file /etc/init.d/pixelserv
nano /etc/init.d/pixelserv
and copy the following to it (changing the IP addresses and interfaces where neccessary):
#! /bin/sh
# /etc/init.d/pixelserv
#

# Carry out specific functions when asked to by the system
case "$1" in
start)
echo "Creating Interface "
ifconfig p2p1:0 192.168.1.99
echo "Starting pixelserv "
/usr/local/bin/pixelserv &
;;
stop)
echo "Stopping script pixelserv"
pkill -9 pixelserv &
echo "Killing Interface "
ifconfig p2p1:0 down
;;
*)
echo "Usage: /etc/init.d/pixelserv {start|stop}"
exit 1
;;
esac
exit 0

* Change permissions
chmod 755 /etc/init.d/pixelserv

* To bring the new interface up and start pixelserv
/etc/init.d/pixelserv start

* To stop pixelserv and close the virtual interface
/etc/init.d/pixelserv stop

Enjoy ad-free network on ALL devices!

VPNAndroid

2015-06-24T20:38:17Z

Scott Falkiner:

{{NeedsUpdate}}


= VPN Client - Android - HTC Android G1/Dream =

'''NOTE:''' [https://play.google.com/store/apps/details?id=de.blinkt.openvpn&hl=en OpenVPN for Android] works with the certificates below for ICS 4.0 or greater without rooting your device. There is no additional configuration required to the HDA or your device (Tested on HTC One X and Samsung Tab 2 also on HTC One V). For Sony Xperia ZR (and I suspect most other Android devices) the following was necessary:

# Download the following files to a known location on your Android device 
#* [http://dl.amahi.org/vpn/AmahiHDAClient.crt AmahiHDAClient.crt] 
#* [http://dl.amahi.org/vpn/AmahiHDAClient.key AmahiHDAClient.key] 
#* [http://dl.amahi.org/vpn/ca-cert.crt ca-cert.crt]
# Launch the OpenVPN app, Add Profile and go to the Basic configuration page [[File:OpenVPNAndroid-1-AddProfile.png|180px]] [[File:OpenVPNAndroid-2-ChooseBasic.png|180px]]
# Enter your server address - the Dynamic DNS name works for me, I guess the fixed IP address would as well [[File:OpenVPNAndroid-3-EnterServerAddress.png|180px]]
# Select "User/PW + Certificates" from the list of Types (the certificates alone are not enough) [[File:OpenVPNAndroid-4-SelectType.png|180px]] [[File:OpenVPNAndroid-5-SelectedType.png|180px]]
# In turn, select the CA Certificate, Client Certificate and Client Key files that you downloaded to your device; note that the app will disable the file type it doesn't think will work so beware if you rename these files [[File:OpenVPNAndroid-6-SelectCertKey.png|180px]]
# Enter your username - a general user with access to the shares and apps on your HDA [[File:OpenVPNAndroid-7-EnterUsername.png|180px]]
# Go back to the list of profiles and click on this new profile to start connecting to your HDA: you will be alerted to the fact that OpenVPN for Android can intercept network traffic and asked to trust the application (ensure that your device is not already connected to the same network - test from a different location or turn of wifi and use your mobile data connection) [[File:OpenVPNAndroid-8-TrustApplication.png|180px]]
# Enter your password - you can decide whether or not the application should save the password [[File:OpenVPNAndroid-9-EnterPassword.png|180px]]
# Watch for connection messages to go past as Android notifications and you will also see the OpenVPN log [[File:OpenVPNAndroid-A-Connecting.png|180px]]
# Once you get a successful connection you will see a key in the notification bar; selecting this notification will show the status of the connection ind give you some options for working with it [[File:OpenVPNAndroid-B-Connected.png|180px]]
# You should now be able to open your favourite app used to access files on your HDA, be that the Amahi app, Plex client, OwnCloud, etc. (note that some of these apps may need to be switched between Local and Remote connection type)

This guide is written for a HTC Android G1/Dream phone rooted with Cyanongenmod 5.

[update March 24, 2011: Tested and works with Cyanogenmod 7.0, thus any CM7 compatible phone]

[update August 8, 2011: Tested and works with Cyanogenmod 7.1, thus any CM 7.1 compatible phone]

[update September 9, 2011: Tested and works with MIUI 1.9.2 on a HTC Droid Incredible 2, should work on any MIUI ROM]

[update 22 March 2013: Tested and works with Android 4.2.2 on Nexus Devices]

In your Linux-based OS computer..

* Download the files here and save them in your /home/username/openvpn folder (where ''username'' is your main users name)(to download, right click > save as):
** [http://dl.amahi.org/vpn/AmahiHDAClient.crt AmahiHDAClient.crt]
** [http://dl.amahi.org/vpn/AmahiHDAClient.key AmahiHDAClient.key]
** [http://dl.amahi.org/vpn/ca-cert.crt ca-cert.crt]

Then, from the terminal run

cd /home/username/openvpn
openssl pkcs12 -export -in AmahiHDAClient.crt -inkey AmahiHDAClient.key -certfile ca-cert.crt -name Amahi -out certs.p12

You will be asked for a export password for the certs.p12 file - enter amahi twice.

To automate this process, paste the code from [http://wiki.amahi.org/images/f/f9/Automate.script automate.script] in your favorite editor. Save it & run it with
sh <filename>

You should now have a certs.p12 file in your /home/username/openvpn folder, copy this certs.p12 file to the root of your sdcard on the Android phone.

Now on the Android phone..

<pre><nowiki>
Menu -> Settings -> Location & Security -> Install from SD card
</nowiki></pre>

This will show you certs.p12, select this and enter the password amahi, after it has extracted the certificates, you will be asked to name the certificate, enter Amahi.

Now on the Android phone

<pre><nowiki>
Menu -> Settings -> Wireless & networks -> VPN settings -> Add VPN -> Add OpenVPN VPN
</nowiki></pre>

VPN name = Amahi

Set VPN server = yourHDAnickname.yourhda.com

User authentication = Yes

Set CA certificate - Amahi

Set user certificate - Amahi

Menu -> Advanced -> LZO compression = Yes

Back

Menu -> Save

You should now see an Amahi entry, click on this to connect. It may ask you for the certificate access password. Then it may ask for your username and password that you use to loginon your HDA. You should see that you are connected, enjoy your VPN connection to your HDA server.

= VPN Client - Android 2.2 - DROID X (Verizon Wireless) =
Contact me in the forums if you need help setting this up. If you have a later version of Android such as Gingerbread (Android 2.3) then you can't use this tutorial for setting up openvpn. You can however use the openvpn configurations if your phone is already set up with openvpn.

[[User:Sag47|Sag47]] 00:51, 5 April 2011 (PDT)

This tutorial is not for the feeble minded. I tried writing it as best as I could to keep it a "How to VPN" article and not a "How to root my droid" topic.

The default Droid X from Verizon does not come with openvpn installed. It's a little annoying and you have to be a little tech savvy to get it working. I am outlining instructions here for how I connected my Droid X to my Amahi HDA.

Some prerequisites:
* Your phone must be rooted.
* I am running Android 2.2 so these instructions may become outdated. I also recommend you be running Android 2.2 Froyo on your Droid X
* You should have adb installed (or running a more advanced bash terminal on Android like Better Terminal Emulator Pro app)
* Install the following apps
** OpenVPN Installer
** OpenVPN Settings

Create a directory on your SDCARD called openvpn or if in the terminal /sdcard/openvpn.

Follow the general [[VPNLinux]] instructions but place all of the configurations and certificates in the openvpn folder on your sdcard.

Install openvpn using the "OpenVPN Installer" app and select /system/bin each time the app asks for a location to place a binary.

You can run one of the following commands to grab the mount point of your system folder. (Run commands through adb or in a terminal on your Droid)
<pre><nowiki>
df | grep system
cat /proc/mounts | grep system
cat /proc/mounts
</nowiki></pre>

My device is mounted on /dev/block/mmcblk1p21 so that is the device I am using in this tutorial. Download tun_alt.ko as recommended in [http://forum.xda-developers.com/showpost.php?p=11109394&postcount=25 this post]. Copy it to the root of your sdcard.

Now we install the kernel module. Run the following command sequence (through adb or a terminal on your Droid).
<pre><nowiki>
su
mount -o rw,remount /dev/block/mmcblk1p21 /system
mv /sdcard/tun_alt.ko /system/lib/modules/tun.ko
cd /system/lib/modules
chown root\: tun.ko
chmod 644 tun.ko

#now lets test it
insmod /system/lib/modules/tun.ko
</nowiki></pre>
If you don't see any output and the "OpenVPN Installer" app successfully installed openvpn then you should be set up.

Double check your configuration in /sdcard/openvpn. Once you know everything is good then run the "OpenVPN Settings" app. It should automatically detect your configuration.

Enable OpenVPN. Select your config to turn on the tunnel. Then you should see a prompt in your notification status prompting for a password. My Droid X connected to the network after that.

There's one final step. If you remember you manually ran the insmod /system/lib/modules/tun.ko command but when you reboot your phone the module will no longer be loaded.

Go into the settings for the "OpenVPN Settings" app and modify the TUN module settings.
* Set "Load module using" to insmod.
* Set "Path to tun module" to /system/lib/modules/tun.ko

Reboot your phone and test the configurations. It should be a one click process within the "OpenVPN Settings" app.

[[Category: VPN]]

Ad-blocking

2015-06-24T17:47:35Z

Scott Falkiner: /* Pixel Server */

{{WorkInProgress}}






This section will document how to run your HDA as a network wide ad-blocking tool, utilising DNS redirects and a small pixel server. 

The work here was based on: https://sfxpt.wordpress.com/2011/02/21/the-best-ad-blocking-method/.

Pixelserv is a webserver which simply serves 1x1 blank pixels. By redirecting web requests for adverts to our pixelserver, ads are replaced by this 1x1 pixel leaving the target webpage intact. This will work on all devices across your network, removing the need for software-based solutions on each device.

A shell script get-adlist.sh will update the list of blocked domains (stored as /etc/dnsmasq.adblock.conf) whever you run it. You can also manually edit the list and remove domains that you wish to see (in the case of wrongly blocked domains).

= Fedora 19 =

Precusors -
*You'll need net-tools installed to use ifconfig
yum install net-tools
* This guide assumes your network interface is named p2p1 and your HDA IP address is 192.168.1.2. Check with ifconfig, and change this guide where neccessary.

==Get Ad List==
* Create a new shell file
nano /usr/local/bin/get-adlist.sh

* Copy and paste the following into it
#!/bin/sh
# Download the DNSmasq formatted ad block list
curl "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq&showintro=0&mimetype=plaintext" | sed "s/127\.0\.0\.1/192.168.1.99/" > /etc/dnsmasq.adblock.conf
# Restart DNSmasq
service dnsmasq restart

* Change permissions on the shell file
chmod -v 755 /usr/local/bin/get-adlist.sh

* Run the shell file
/usr/local/bin/get-adlist.sh

==Change DNSMasq config==

* Add the block list to DNSMasq configuration
echo "conf-file=/etc/dnsmasq.adblock.conf" >> /etc/dnsmasq.conf

* Restart DNSMasq
service dnsmasq restart

==Bind Apache to main IP address==

* Edit the Apache config file using a file editor:
nano /etc/httpd/conf/httpd.conf

* Add your HDAs IP address to this section in the conf file:
#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
#
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses.
#
#Listen 12.34.56.78:80
Listen 192.168.1.2:80

* Restart Apache
service httpd restart

==Pixel Server==

* You need to download Pixelserv to the HDA:
wget <nowiki>http://proxytunnel.sourceforge.net/files/pixelserv.pl.txt</nowiki>

* Move and rename the Pixelserv binary:
mv pixelserv.pl.txt /usr/local/bin/pixelserv

* Edit pixelserv using a file editing program of your choice
nano pixelserv

* Change the IP address to a free one of your choice (eg. 192.168.1.99)
$sock = new IO::Socket::INET ( LocalHost => '0.0.0.0',
change to
$sock = new IO::Socket::INET ( LocalHost => '192.168.1.99',

* Change permissions
chmod 755 /usr/local/pixelserv

* Create file /etc/init.d/pixelserv
nano /etc/init.d/pixelserv
and copy the following to it (changing the IP addresses and interfaces where neccessary):
#! /bin/sh
# /etc/init.d/pixelserv
#

# Carry out specific functions when asked to by the system
case "$1" in
start)
echo "Creating Interface "
ifconfig p2p1:0 192.168.1.99
echo "Starting pixelserv "
/usr/local/bin/pixelserv &
;;
stop)
echo "Stopping script pixelserv"
pkill -9 pixelserv &
echo "Killing Interface "
ifconfig p2p1:0 down
;;
*)
echo "Usage: /etc/init.d/pixelserv {start|stop}"
exit 1
;;
esac
exit 0

* Change permissions
chmod 755 /etc/init.d/pixelserv

* To bring the new interface up and start pixelserv
/etc/init.d/pixelserv start

* To stop pixelserv and close the virtual interface
/etc/init.d/pixelserv stop

Enjoy ad-free network on ALL devices!

Ad-blocking

2015-06-24T17:46:28Z

Scott Falkiner:

{{WorkInProgress}}






This section will document how to run your HDA as a network wide ad-blocking tool, utilising DNS redirects and a small pixel server. 

The work here was based on: https://sfxpt.wordpress.com/2011/02/21/the-best-ad-blocking-method/.

Pixelserv is a webserver which simply serves 1x1 blank pixels. By redirecting web requests for adverts to our pixelserver, ads are replaced by this 1x1 pixel leaving the target webpage intact. This will work on all devices across your network, removing the need for software-based solutions on each device.

A shell script get-adlist.sh will update the list of blocked domains (stored as /etc/dnsmasq.adblock.conf) whever you run it. You can also manually edit the list and remove domains that you wish to see (in the case of wrongly blocked domains).

= Fedora 19 =

Precusors -
*You'll need net-tools installed to use ifconfig
yum install net-tools
* This guide assumes your network interface is named p2p1 and your HDA IP address is 192.168.1.2. Check with ifconfig, and change this guide where neccessary.

==Get Ad List==
* Create a new shell file
nano /usr/local/bin/get-adlist.sh

* Copy and paste the following into it
#!/bin/sh
# Download the DNSmasq formatted ad block list
curl "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq&showintro=0&mimetype=plaintext" | sed "s/127\.0\.0\.1/192.168.1.99/" > /etc/dnsmasq.adblock.conf
# Restart DNSmasq
service dnsmasq restart

* Change permissions on the shell file
chmod -v 755 /usr/local/bin/get-adlist.sh

* Run the shell file
/usr/local/bin/get-adlist.sh

==Change DNSMasq config==

* Add the block list to DNSMasq configuration
echo "conf-file=/etc/dnsmasq.adblock.conf" >> /etc/dnsmasq.conf

* Restart DNSMasq
service dnsmasq restart

==Bind Apache to main IP address==

* Edit the Apache config file using a file editor:
nano /etc/httpd/conf/httpd.conf

* Add your HDAs IP address to this section in the conf file:
#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
#
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses.
#
#Listen 12.34.56.78:80
Listen 192.168.1.2:80

* Restart Apache
service httpd restart

==Pixel Server==

* You need to download Pixelserv to the HDA:
wget <nowiki>http://proxytunnel.sourceforge.net/files/pixelserv.pl.txt</nowiki>

* Move and rename the Pixelserv binary:
mv pixelserv.pl.txt /usr/local/bin/pixelserv

* Edit pixelserv using a file editing program of your choice
nano pixelserv

* Change the IP address to a free one of your choice (eg. 192.168.1.99)
$sock = new IO::Socket::INET ( LocalHost => '0.0.0.0',
change to
$sock = new IO::Socket::INET ( LocalHost => '192.168.1.99',

* Change permissions
chmod 755 /usr/local/pixelserv

* Create file /etc/init.d/pixelserv
nano /etc/init.d/pixelserv
and copy the following to it (changing the IP addresses where neccessary):
#! /bin/sh
# /etc/init.d/pixelserv
#

# Carry out specific functions when asked to by the system
case "$1" in
start)
echo "Creating Interface "
ifconfig p2p1:0 192.168.1.99
echo "Starting pixelserv "
/usr/local/bin/pixelserv &
;;
stop)
echo "Stopping script pixelserv"
pkill -9 pixelserv &
echo "Killing Interface "
ifconfig p2p1:0 down
;;
*)
echo "Usage: /etc/init.d/pixelserv {start|stop}"
exit 1
;;
esac
exit 0

* Change permissions
chmod 755 /etc/init.d/pixelserv

* To bring the new interface up and start pixelserv
/etc/init.d/pixelserv start

* To stop pixelserv and close the virtual interface
/etc/init.d/pixelserv stop

Enjoy ad-free network on ALL devices!

Ad-blocking

2015-06-24T17:37:56Z

Scott Falkiner:

{{WorkInProgress}}






This section will document how to run your HDA as a network wide ad-blocking tool, utilising DNS redirects and a small pixel server. 

The work here was based on: https://sfxpt.wordpress.com/2011/02/21/the-best-ad-blocking-method/.

Pixelserv is a webserver which simply serves 1x1 blank pixels. By redirecting web requests for adverts to our pixelserver, ads are replaced by this 1x1 pixel leaving the target webpage intact. This will work on all devices across your network, removing the need for software-based solutions on each device.

A shell script get-adlist.sh will update the list of blocked domains (stored as /etc/dnsmasq.adblock.conf) whever you run it. You can also manually edit the list and remove domains that you wish to see (in the case of wrongly blocked domains).

= Fedora 19 =

Precusors -
*You'll need net-tools installed to use ifconfig
yum install net-tools
* This guide assumes your network interface is named p2p1 and your HDA IP address is 192.168.1.2. Check with ifconfig, and change this guide where neccessary.

==Get Ad List==

nano /usr/local/bin/get-adlist.sh

#!/bin/sh
# Download the DNSmasq formatted ad block list
curl "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq&showintro=0&mimetype=plaintext" | sed "s/127\.0\.0\.1/192.168.1.99/" > /etc/dnsmasq.adblock.conf
# Restart DNSmasq
service dnsmasq restart

chmod -v 755 /usr/local/bin/get-adlist.sh

/usr/local/bin/get-adlist.sh

==Change DNSMasq config==

echo "conf-file=/etc/dnsmasq.adblock.conf" >> /etc/dnsmasq.conf

service dnsmasq restart

==Bind Apache to main IP address==

* Edit the Apache config file using a file editor:
nano /etc/httpd/conf/httpd.conf

* Add your HDAs IP address to this section in the conf file:
#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
#
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses.
#
#Listen 12.34.56.78:80
Listen 192.168.1.2:80

* Restart Apache
service httpd restart

==Pixel Server==

* You need to download Pixelserv to the HDA:
wget <nowiki>http://proxytunnel.sourceforge.net/files/pixelserv.pl.txt</nowiki>

* Move and rename the Pixelserv binary:
mv pixelserv.pl.txt /usr/local/bin/pixelserv

* Edit pixelserv using a file editing program of your choice
nano pixelserv

* Change the IP address to a free one of your choice (eg. 192.168.1.99)
$sock = new IO::Socket::INET ( LocalHost => '0.0.0.0',
change to
$sock = new IO::Socket::INET ( LocalHost => '192.168.1.99',

* Change permissions
chmod 755 /usr/local/pixelserv

* Create file /etc/init.d/pixelserv
nano /etc/init.d/pixelserv
and copy the following to it (changing the IP addresses where neccessary):
#! /bin/sh
# /etc/init.d/pixelserv
#

# Carry out specific functions when asked to by the system
case "$1" in
start)
echo "Creating Interface "
ifconfig p2p1:0 192.168.1.99
echo "Starting pixelserv "
/usr/local/bin/pixelserv &
;;
stop)
echo "Stopping script pixelserv"
pkill -9 pixelserv &
echo "Killing Interface "
ifconfig p2p1:0 down
;;
*)
echo "Usage: /etc/init.d/pixelserv {start|stop}"
exit 1
;;
esac
exit 0

* Change permissions
chmod 755 /etc/init.d/pixelserv

Enjoy ad-free network on ALL devices!

Ad-blocking

2015-06-24T17:29:10Z

Scott Falkiner: /* Get Ad List */

Ad-blocking

2015-06-24T17:27:01Z

Scott Falkiner: /* Change DNSMasq config */

Ad-blocking

2015-06-24T17:26:41Z

Scott Falkiner: /* Get Ad List */

Ad-blocking

2015-06-24T17:26:02Z

Scott Falkiner: /* Change DNSMasq config */

Ad-blocking

2015-06-24T17:25:34Z

Scott Falkiner: /* Get Ad List */

Ad-blocking

2015-06-24T17:25:15Z

Scott Falkiner: /* Get Ad List */

Ad-blocking

2015-06-24T17:24:08Z

Scott Falkiner:

Ad-blocking

2015-06-24T17:16:03Z

Scott Falkiner:

Ad-blocking

2015-06-24T17:15:20Z

Scott Falkiner:

Ad-blocking

2015-06-24T17:11:28Z

Scott Falkiner:

Ad-blocking

2015-06-24T17:05:22Z

Scott Falkiner:

Ad-blocking

2015-06-23T21:01:38Z

Scott Falkiner:

Ad-blocking

2015-06-23T20:24:26Z

Scott Falkiner: Ad-blocking on the HDA for the entirety of the network.