Solved Site blacklist

[poumtatalia]

Hi is there a way on my OS to blacklist some sites. Ex I want to make sure that no user on my machine visit facebook.
Thx.

 

[zigzag3143]

Hi is there a way on my OS to blacklist some sites. Ex I want to make sure that no user on my machine visit facebook.
Thx.

It would help if you told us about your network setup. Do you have a router? if so blocke facebook there


Ken

 

[baarod]

Hi is there a way on my OS to blacklist some sites. Ex I want to make sure that no user on my machine visit facebook.
Thx.

This is not a secure way but you can add a line to C:\Windows\System32\drivers\etc\hosts like this:

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handled within DNS itself.
#	127.0.0.1       localhost
#	::1             localhost

0.0.0.0 facebook.com
0.0.0.0 www.facebook.com

Or get http://download.live.com/familysafety

 

[Barman58]

One system that I have used quite often is the service provided by OpenDNS.

This provides an alternate to the DNS servers used by default by your ISP, in addition, which relates to your request, is a site blocking service.

You can block sites by a general group - EG. all social networks or you can set it to allow one and block others.

The service is totally free for home users and is quick to set up, also as the blocking is done in the DNS server, and if you set the DNS settings in your router (password protect the Router administration page ). it is not changeable by the actual users.

OpenDNS | Internet Navigation And Security

 

[poumtatalia]

Thanks, I used the very simple host file, it works fine and smooth.

 

[jimbo45]

Hi there
Most decent Routers in their security set ups allow you to block IP addresses.

This is IMO a better solution as this will work with ALL computers connected to your network --wirelessly or via a cable --whether Windows, Mac or Linux.

You also don't have to do anything if you re-install the OS either

Pic enclosed of Netgear router --others are much the same I'd guess.

You can also establish rules etc etc.

IMO blocking via the Hardware setup on the router is far better as a knowlegeable user could easily get round the Hosts file restriction by using a "Proxy" to access blocked sites if you've only done it in software.

Using Content filtering on the hardware would be much harder to "break" as the user would have to logon to the router in order to change anything. Hopefully you've secured THAT password.

The best way of all actually is to ONLY allow your users to connect to the internet THROUGH YOUR OWN PROXY but this needs a bit of set up and organisation.

Failing that I'd use the ROUTER's HARDWARE blocking mechanism.

The logs will also tell you what IP addresses were used so you can tighten up any "After the fact" security breaches too.

Cheers
jimbo

 

[looked]

Hi is there a way on my OS to blacklist some sites. Ex I want to make sure that no user on my machine visit facebook.
Thx.

This is not a secure way but you can add a line to C:\Windows\System32\drivers\etc\hosts like this:

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handled within DNS itself.
#    127.0.0.1       localhost
#    ::1             localhost

0.0.0.0 facebook.com
0.0.0.0 www.facebook.com

Or get Windows Essentials: Other Programs - Microsoft Windows

It didn't work, I added the web address and the E-mail address on 2 separate lines so the browser cna still acces the web site.

Hi there
Most decent Routers in their security set ups allow you to block IP addresses.
Pic enclosed of Netgear router --others are much the same I'd guess.
You can also establish rules etc etc.

Cheers
jimbo

It didn't work, Netgear router here.
I added the web address plus the E-mail address.

I started receiving "persistent and harassing" spam from a new web social service "nirvam dot it", E-mail "nirvam at nirvam dot it".
They are sending me two and even three mails every day it doesn't matter if I label it as spam in Gmail, they still keep coming.
I never visited their service nor I knew about them before getting their SPAM!
So simple question, how to I block them and eventually how do I report/blacklist them without dealing with them directly?

How can I kill them, how to report them for illegally harvesting E-mail addresses?

 

[carwiz]

The updated Host file won't take affect until you reboot.

 

[UsernameIssues]

It didn't work, I added the web address and the E-mail address on 2 separate lines so the browser can still access the web site.

Several websites suggest disabling the Windows service named DNS Client if you are going to use a HOSTS file. You should also close your browser to make sure that the info that it has cached is cleared. Make sure that the browser has left RAM. This can take a minute or so after the Window has closed. Once you restart your browser, it should read the contents of your HOSTS file.

Restarting the computer (as carwiz mentioned) should clear the DNS cache too - if you opt not to disable the DNS Client service. Let's just hope that you won't be editing/restarting/testing the HOSTS file too often

If you can show us what your HOSTS file entries look like, then maybe we can spot any errors. I'm not sure how you can add/block e-mail addresses to a HOSTS file. More about that later*.

It didn't work, Netgear router here.
I added the web address plus the E-mail address.

I started receiving "persistent and harassing" spam from a new web social service "nirvam dot it", E-mail "nirvam at nirvam dot it".
They are sending me two and even three mails every day it doesn't matter if I label it as spam in Gmail, they still keep coming.
I never visited their service nor I knew about them before getting their SPAM!
So simple question, how to I block them and eventually how do I report/blacklist them without dealing with them directly?

How can I kill them, how to report them for illegally harvesting E-mail addresses?

*I do not think you can block e-mails via the HOSTS file or via router settings. Those blocks are meant to prevent a computer on your network from getting data from a domain (a website like facebook.com). The e-mails that you are getting are coming to you thru Google's domains/website. If you blocked Google's mail servers, you could not get any e-mails.

It might be best to get a new e-mail address.

 

[carwiz]

Or get a new mail handler. Windows Live Mail works. It allows blocking. And you can use it to gather all your email accounts to one handler. The trouble with many of the mail account servers is that you will get mail even if your account is close to a "shotgun" broadcast. This is where you might have an account called "JoeBlue" and the broadcast will go to accounts starting with J O E or J O E B L... It's just how mail servers resolve names. Also, the return address in a message may not be where it actually came from.

I know the Host file works for blocking inbound domains. I use it quite extensively. You can't block email addresses with it but you can block a web domain. If you rebooted and it didn't work, the domain wasn't entered correctly. Or you don't understand how the host file works. It's for a browser and I know it works for MS IE versions.

 

[oneeyed]

What is your email reader ?

The best solution is to add a blacklist rule in it. Simply clicking on spam while it might work isn't as reliable as adding rules manually. For example you could add a rule to send all mails containing "nirvam" to the trash, whatever the sender's email address is.

 

[looked]

Several websites suggest disabling the Windows service named DNS Client if you are going to use a HOSTS file.

Could you please explain what is it and how it works?

You should also close your browser to make sure that the info that it has cached is cleared. Make sure that the browser has left RAM. This can take a minute or so after the Window has closed. Once you restart your browser, it should read the contents of your HOSTS file.

Restarting the computer (as carwiz mentioned) should clear the DNS cache too - if you opt not to disable the DNS Client service. Let's just hope that you won't be editing/restarting/testing the HOSTS file too often

If you can show us what your HOSTS file entries look like, then maybe we can spot any errors. I'm not sure how you can add/block e-mail addresses to a HOSTS file. More about that later*.

Done it but it didn't work I believe that I failed to edit the hosts file correctly.
By the way, my browser can open the web site but "ping" failed:
C:\Users\blink>ping www dot nirvam dot it (I had to edit the web address because once saved in the form it displayed the site description)

Pinging nirvam.it [89.186.92.211] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 89.186.92.211:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

I do not think you can block e-mails via the HOSTS file or via router settings. Those blocks are meant to prevent a computer on your network from getting data from a domain (a website like facebook.com). The e-mails that you are getting are coming to you thru Google's domains/website. If you blocked Google's mail servers, you could not get any e-mails.
It might be best to get a new e-mail address.

I don't think that changing e-mail address will prevent dishonest harvesters from sending me spam.

Or get a new mail handler. Windows Live Mail works. It allows blocking. And you can use it to gather all your email accounts to one handler. The trouble with many of the mail account servers is that you will get mail even if your account is close to a "shotgun" broadcast. This is where you might have an account called "JoeBlue" and the broadcast will go to accounts starting with J O E or J O E B L... It's just how mail servers resolve names. Also, the return address in a message may not be where it actually came from.

They found my Gmail account and it doesn't have a block option like Live Mail.

What is your email reader ?

The best solution is to add a blacklist rule in it. Simply clicking on spam while it might work isn't as reliable as adding rules manually. For example you could add a rule to send all mails containing "nirvam" to the trash, whatever the sender's email address is.

I'm using Outlook, unfortunately they send the spam to my Gmail account.
Thanks to everyone for help.

 

[oneeyed]

They found my Gmail account and it doesn't have a block option like Live Mail.

Google Mail DOES have a blacklist system. It's actually one of the most powerful filter system in webmails available (makes sense since it's mostly a search engine on your mails). It can sort/forward/erase/label based on things like date/year received, sender, etc... And you can even apply it too all the mails already present in your inbox.

Launch your browser and access your gmail account from there.
Click Settings > Filters > Create a New Filter

You can either create a filter on the sender address (it might miss spam if the spammer uses different addresses) :
Type [email protected] in the "From" field

Or you can filter any mail that contains a specific text anywhere in it (title, sender, main message) :
Type nirvam in the "Has the words" field

Click Next Step and check "Delete it"

Click on "Create Filter"


And you're done ! This will put all these mails directly into the trash folder without even being downloaded or checked by your mail reader, all the work is done by gmail.

More info :
https://support.google.com/mail/answer/6579
https://support.google.com/mail/answer/7190?hl=en

 

[UsernameIssues]

I'll answer your questions - but this will NOT help your e-mail problems. Also, (as was mentioned before) just because an e-mail says that it is from nirvam.it does not mean that the e-mail was sent from nirvam.it. E-MAIL INFO CAN LIE.


re: the Windows service named DNS Client

As I understand it (and I could be wrong):

When an app like IE wants to visit google.com...
...the app asks the DNS Client service,
"What is the IP address for google.com?"

...the DNS Client service asks the HOSTS file*,
"What is the IP address for google.com?"

If google.com IS listed in that file...
...then the DNS Client service tells IE the IP address
...and IE tries to visit that IP address.
The HOSTS file can be used to pass out false IP addresses...
...thus blocking access to the real IP addresses.



If google.com IS NOT listed in that file...
...then the DNS Client service asks a DNS server
(a set of computers on the internet)
"What is the IP address for google.com?"

Once the DNS server replies...
...the DNS Client service tells IE the IP address
...and IE tries to visit that IP address.



The next time the IE wants to know the IP address for google.com...
...IE asks the DNS Client service,
"What is the IP address for google.com?"

...the DNS Client service tells IE the IP address
(using info that it had saved/cached from the last DNS lookup)
...and IE tries to visit that IP address.

So, if you changed the HOSTS file after the DNS Client service had read it, then IE would not be told about the new info in the HOST file because the DNS Client service answered IE's query using cached/saved DNS info.


*not exactly true in all cases, but it will do for this overview.

If you disable the DNS Client service, then IE make it's queries first to the HOSTS file and then to the DNS servers on the internet. IE (and other apps) can also cache/save/remember some DNS info. That is why it is best to exit IE while changing the HOSTS file.


Not that you asked - but here is some info on disabling the DNS Client service:






Change the screen shown above to look like the screen shown below.



"OK" your way out and restart the computer.

Also attached to this post is a HOSTS file that has the website of interest blocked. There is a reason why I listed the website two ways. Let us know if you cannot figure out how to get that file uncompressed and where it needs to be.


PINGING:
Some websites do not respond to pings.


I'll let others help you with filtering out the SPAM.

 

[looked]

Google Mail DOES have a blacklist system. It's actually one of the most powerful filter system in webmails available (makes sense since it's mostly a search engine on your mails). It can sort/forward/erase/label based on things like date/year received, sender, etc... And you can even apply it too all the mails already present in your inbox.

Launch your browser and access your gmail account from there.
Click Settings > Filters > Create a New Filter

You can either create a filter on the sender address (it might miss spam if the spammer uses different addresses) :
Type [email protected] in the "From" field

Or you can filter any mail that contains a specific text anywhere in it (title, sender, main message) :
Type nirvam in the "Has the words" field

Click Next Step and check "Delete it"

Click on "Create Filter"


And you're done ! This will put all these mails directly into the trash folder without even being downloaded or checked by your mail reader, all the work is done by gmail.

More info :
https://support.google.com/mail/answer/6579
https://support.google.com/mail/answer/7190?hl=en

Thanks very much oneeyed, I new about Gmail filter option and I knew you would say that Gmail indeed has it.
The problem is that in the past I messed with it because some spamming contained my e-mail name plus my full name so that it looked like I was the spammer.
After I applied the filter I was no more able to receive ANY e-mails from anyone so my account was rejecting everything.
Anyways, I applied the filter you suggested and thanks for help.

 

[looked]

re: the Windows service named DNS Client

If you disable the DNS Client service, then IE make it's queries first to the HOSTS file and then to the DNS servers on the internet. IE (and other apps) can also cache/save/remember some DNS info. That is why it is best to exit IE while changing the HOSTS file.

Also attached to this post is a HOSTS file that has the website of interest blocked. There is a reason why I listed the website two ways. Let us know if you cannot figure out how to get that file uncompressed and where it needs to be.

Thanks very much for deep explanation although I'm still not 100% clear.
So if I disable the dns service, how will my common browsing activity behave?
Also thanks very much for the hosts file, finally my browser cannot access to that web site anymore ""server not found".

 

[UsernameIssues]

Sorry that I was not clear.
I can be that way at times :-(
It is a complicated topic.


If you disable the Windows service named DNS Client...
...you will probably never notice the difference.
(Try it and see. It won't hurt anything.)


If you decide to leave it running...
...you will probably never notice the difference.
...(because you have a tiny HOSTS file)
...(which you probably won't update/edit/change each day).


If you ever decide to use a bigger host file (about a million entries) [Google HostsMan], then it is best to have the DNS Client service turned off so that you can edit/update the HOSTS file without restarting the computer or manually flushing and reloading the DNS cache.

I delete my HOSTS file (via a script) when I want to visit what it blocks. All I have to do is open a new* browser to get to the website of interest. If I had the DNS Client service running, then I would have to do several more things to visit that website or restart the computer. Once I'm thru with the website, my script updates and replaces my HOSTS file.


The DNS Client service is needed in some corporate environments, but those people should be getting help from their IT staff. Not from these forums.



*new - as in a different browser than the one that told me the site was not available. e.g. If IE cannot get there - then I delete the HOSTS file - start Chrome or Pale Moon as my new browser and visit the website. That way, I can keep my many tabs open within IE. If I run out of browsers or I think that the website is dangerous, I use a browser inside a Virtual Machine.


edit: hmmm, if you Google HostsMan, you might see forum threads arguing against using HOSTS files this way. I'll not debate that here, but feel free to PM me.

 

[looked]

Sorry that I was not clear.
I can be that way at times :-(
It is a complicated topic.

If you disable the Windows service named DNS Client...
...you will probably never notice the difference.
(Try it and see. It won't hurt anything.)

If you decide to leave it running...
...you will probably never notice the difference.
...(because you have a tiny HOSTS file)
...(which you probably won't update/edit/change each day).

If you ever decide to use a bigger host file (about a million entries) [Google HostsMan], then it is best to have the DNS Client service turned off so that you can edit/update the HOSTS file without restarting the computer or manually flushing and reloading the DNS cache.

I delete my HOSTS file (via a script) when I want to visit what it blocks. All I have to do is open a new* browser to get to the website of interest. If I had the DNS Client service running, then I would have to do several more things to visit that website or restart the computer. Once I'm thru with the website, my script updates and replaces my HOSTS file.

The DNS Client service is needed in some corporate environments, but those people should be getting help from their IT staff. Not from these forums.


*new - as in a different browser than the one that told me the site was not available. e.g. If IE cannot get there - then I delete the HOSTS file - start Chrome or Pale Moon as my new browser and visit the website. That way, I can keep my many tabs open within IE. If I run out of browsers or I think that the website is dangerous, I use a browser inside a Virtual Machine.

edit: hmmm, if you Google HostsMan, you might see forum threads arguing against using HOSTS files this way. I'll not debate that here, but feel free to PM me.

Thanks that is a very interesting reading.
I sometimes do add or delete entries in the hosts file like for example when I had to block the nasty and stubborn Skype update service which still runs even if in its settings I chose NOT.
I turned off the dns service and sometimes I'll need to update the hosts file, so is this a good setup for me?
I would love to search and read more about your suggestions but unfortunately I need to keep dealing with my studying and lifestyle.

 

[UsernameIssues]

You will do just fine with the DNS Client service disabled

Some apps try to connect to things on the internet and when they fail, they try to connect to an IP address. Knowing one or more the IP addresses will cause the app to not use the HOSTS file (or the DNS Client server). That app will probably connect. The Windows firewall can be used to block connections to for a specific app. If you do not want the app to connect to anything, block it from everything.

If you want to stop the Skype update service from running, create a fresh topic (when you have the time).

If you need help with firewall settings, create a fresh topic (when you have the time).

Since you own a computer that uses the Windows OS, you are not allowed to have a life

 

[carwiz]

Your Hosts file isn't formatted correctly. You need to specify the local host IP address for each entry. Don't use the HTTP or "www." and don't put any spaces within the host name like you have in " .it".

Here's an example:

127.0.0.1 localhost
127.0.0.1 nirvam.it
127.0.0.1 boobysocks.com