From owner-freebsd-questions@freebsd.org Sun Aug 20 19:05:17 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7C014DE6C02 for ; Sun, 20 Aug 2017 19:05:17 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: from mail-yw0-x22c.google.com (mail-yw0-x22c.google.com [IPv6:2607:f8b0:4002:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 398A36F53A for ; Sun, 20 Aug 2017 19:05:17 +0000 (UTC) (envelope-from ultima1252@gmail.com) Received: by mail-yw0-x22c.google.com with SMTP id s143so81643135ywg.1 for ; Sun, 20 Aug 2017 12:05:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=ctraQ90zI841ylp/mSenQSKe0z1EFCFueFYeyjVQ/EY=; b=ZRLUNzYmpsiTw7FSq6Wt4qntrhGWs6C0RtpXljqC/P/25TkUNoWZumLUJ8tuZiHEYl LbQUkBFXFK8ElHqLIOpwNRhCpDCqo/ktfIKGe+eOPglsUfEmnkZX2URZbYJhyasdZTuG bqipC+oXnFZbZuUZDENLnpRivhBjw6WJ5OH8Xp4WEjUQtsC7v2+AdYl6dmckDYxpNEP3 vcEqI2MEJropKt4/JUnO2P//BW6TM04e6dwJ6SZBC7c3m82nRWsMFEm5h7BJ1VLL073k 2+gqBj/CeoQq6VrZLCPV7FtIzRXxkwdKo2SN6n6fSRlXpRgvaVmNOucLrAGhhgrWvNmq dCdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=ctraQ90zI841ylp/mSenQSKe0z1EFCFueFYeyjVQ/EY=; b=IWcZ0AKrGPYOnPM9Y0eDq2MvLbefyyn5WcvawrzIdy9mncoIU6HvkPtNEcrjCQNy2S qB2H38ztGGV7oATxUaHwf/XIkxUTN18SOAUBNLFAUWha9dZAM8CaMvDq98sTc7b0c7cX 4x0UmZPjs0aA1eHVcrUTdiWeLfB7qVMesZi9AM9BaqyccxGynVSng9PTViRnWU7xSwIN 6+rnJbsoX+MHIK5zf2rDkv6GbnPxGZa8EpjRihg2r1BOA6gZZtcshrhTv+aYPvjsW0lv 0/JrR4rmrKvOscGFjtsCjOrdfnQeECI/MP6GpF0ZU/jvlhRBKTSRjNIj1FCIASANsH18 NWgA== X-Gm-Message-State: AHYfb5jt2SIZ3GymxDxUdhSd8VZ2b5OpcTprxOmv3TCGa2huKc+4RYEu i6UvHER4O5XzvAJQLIyA5KtawTZEWJuj0mU= X-Received: by 10.129.170.1 with SMTP id i1mr12355761ywh.253.1503255916109; Sun, 20 Aug 2017 12:05:16 -0700 (PDT) MIME-Version: 1.0 Received: by 10.13.231.71 with HTTP; Sun, 20 Aug 2017 12:05:15 -0700 (PDT) In-Reply-To: <20170820184906.4869.qmail@ary.lan> References: <20170820153621.GA9420@slackbox.erewhon.home> <20170820184906.4869.qmail@ary.lan> From: Ultima Date: Sun, 20 Aug 2017 12:05:15 -0700 Message-ID: Subject: Re: How to block facebook access To: John Levine Cc: FreeBSD Mailing List , rsmith@xs4all.nl Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Aug 2017 19:05:17 -0000 Can also redirect requests to port 53 to your dns resolver. This is a simple task on ipv4 but ipv6 is significantly more difficult to do so. Still haven't figured out how to do this properly on ipv6 but an easy solution is just blocking ipv6 dns requests. On Sun, Aug 20, 2017 at 11:49 AM, John Levine wrote: > In article <20170820153621.GA9420@slackbox.erewhon.home> you write: > >I would hazard a guess that *most* facebook users wouldn't be technically > >savvy enough to use an IP-adres. > > Even if they are, FB will redirect them to a name. They'd either have > to use an external DNS cache or a VPN. I suppose one could preemptively > block port 53 requests out to 8.8.8.8 and 8.8.4.4. > > R's, > John > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions- > unsubscribe@freebsd.org" >