Android 11: hosts file is ignored by some processes - General Questions and Answers

Hey,
I was wondering why my LAN firewall reports such a lot of blocked querys from my mobile phone (Pixel 3 with 06/2021 patches) to ad domains from Google, even I've installed AdAway in root mode.
I t seems that AdAway / the local hosts file works in generally. When I try to open e.g. ad.doubleclick.net in Firefox I'm getting the AdAway blocked page.
But it looks like that one or more system/Google processeses ignoring the file. Otherwise I should not see any queries from my phone to the original IP address of the domain in my application firewall.
Does anybody knows if this is a known behaviour/issue?
Jas

Related

[APPQ] Adfree stopped. Anything work?

Rooted N1 and adfree used to work great. Updated host file and noticed it no longer works with any browser. Anything available that works to block ads?
Sent from my Nexus One using XDA App
I use this hosts file method. Works fine for me.
It still seems to be working for me. Have you tried rebooting your phone?
Big_O said:
Rooted N1 and adfree used to work great. Updated host file and noticed it no longer works with any browser. Anything available that works to block ads?
Sent from my Nexus One using XDA App
Click to expand...
Click to collapse
The Android system still uses the hosts file for DNS lookups before using your internet connection's DNS server. Therefore ALL apps installed on the system will respect the entries placed in the hosts file. The only way around this is if ads in apps used actual IP addresses rather than hostnames or websites with ads used links with IP addresses pointing to the ads rather than resolvable hostnames.
You can't block or redirect an IP address via the hosts file (this would be reverse DNS), it only handles hostname resolution.
I re-rooted the N1 and re-installed adfree. It's working again. Noticed the install edited the system host file automatically without the need to adb or manually edit anything. Adfree is excellent and worth rooting just for this app.

Android chrome and ads

What options exist today to block ads on chrome on Android rooted or not rooted? I'm not sure if any of those hosts modifying apps are kept up to date for root anymore. I could change DNS to something like noad zone but they track your IP and lookups anyway and in the DNS model you have no control over it on each site
Bump

Nord VPN not blocking ads

Guys,
Loving my Nord, only had for a few days and not rooted yet, so using Nord VPN to try and block Chrome ads.
However, despite it working flawlessly on other devices, Nord just won't block ads on any site on my OPN.
I'm using the latest apk from Nords website, and got Cybersec enabled. Any ideas??
Nope but in case you want to try something else, I am using dns66 and that works perfectly. I usually root and use adaway. But I wanted to try a non root solution at least untill I decide to root.
Blokada works as well without root
Thanks both.
I usually root and use Adaway too. But I'm a paid Nord VPN subscriber and really would have expected it to work as advertised, but seems to block absolutely nothing just now.
nstirton said:
Thanks both.
I usually root and use Adaway too. But I'm a paid Nord VPN subscriber and really would have expected it to work as advertised, but seems to block absolutely nothing just now.
Click to expand...
Click to collapse
Have you enabled "private dns" on the phone? It might override the adblocking features of Nord VPN. Usually a lot of adblocking blocks by mapping for instance ads.facebook.com to 127.0.0.1 via DNS. But if you enable private DNS on the phone it's not using Nord VPNs DNS but the private DNS supplier via https.
Thanks for the tip, but no not using a custom DNS.
I guess on other phones I've not relied on the VPNs ad blocking abilities as I've always been rooted using Adaway.
Maybe it's just really bad at blocking ads - ie none at all?!
So, for what it's worth, finally have this fixed....
Whilst I hadn't set up a private / custom DNS, it seems that since I copied over settings from my previous phone (PH-1 R.I.P.) there WAS a redirect in place. I'd only checked DNS within the VPN, not on the phone.
So, VPN active and ads gone!

Best Adblocking solutions for rooted phone, no VPN?

I know the title is rather generic and not strictly related to OP7, but I didn't know where else to post, and as this applies to my OP7, I thought to post here.
OP7
OOS 10.0.7
Rooted, Magisk+TWRP
So far I have been using Blokada to stop ads and it's been a bliss, but the limitation of Android to only run one VPN at a time makes using another VPN a compromise.
Recently I decided to use NordVPN, but as the situation stays now, I must choose between really no ads (Blokada), or NordVPN, but rely on Nord's as filtering which isn't really doing much.
Can you recommend me some reliable Adblocking solutions for rooted phone that can work in parallel with NordVPN and do equally good job as Blokada is doing? I need to block apps across the whole system (apps, websites).
P.S. using YouTube Vanced, so that one is sorted.
Energized magisk module, energized.pro for info on which version best suits you
Adguard dns without any app
Isn't DNS ad-blocking problematic? I've been reading that apps and websites can detect ad- locking DNS and act strangely.
Also, some ISP may not like some DNS... What has been your experience with DNS Adblocking so far?
Hi
I'm using OP7T OOS Beta 7 at the moment. I've been using Blokada for a short time and liked it a lot. But a minor was indeed not being able to combine it with a VPN from another provider. So I tried Blokada VPN. I had the feeling that it was working smoother than the VPN I'm always using. And I like the way they handle accounts. So you could use Blokada and VPN together if you pay for the VPN from Blokada.
So what stopped me using it? Having a long time subscription at NordVPN. I'm not using a vpn much lately. My setup is as follows:
- setup private dns under settings-networks-private dns: dns.adguard.com
- setup Adaway from FDroid (you need root)
- setup NordVPN. Beware to use the apk from the website and not from the Play Store. Only the apk from the website has working cybersec functionality. It can be used together with Adaway.
I've no problems using a dns server that blocks ads and malware. Neither do I have problems using hosts file based blocking like Adaway. Besides that I'm using browsers like Privacy Browser, Firefox nightly, Bromite and ungoogled chromium. And I try not to use apps with ads.
SvenC said:
- setup private dns under settings-networks-private dns: dns.adguard.com
- setup Adaway from FDroid (you need root)
- setup NordVPN. Beware to use the apk from the website and not from the Play Store. Only the apk from the website has working cybersec functionality. It can be used together with Adaway.
Click to expand...
Click to collapse
Thanks, I made the same setup... Seems less strict compared to Blokada, but this I am sure is just a matter of hosts list in adaway.
Do you recommend any hosts in particular besides the ones already in Adaway?
Also, what kind of apps do you split tunnel in NordVPN? Or no need? Everything working as it should?
derei said:
Thanks, I made the same setup... Seems less strict compared to Blokada, but this I am sure is just a matter of hosts list in adaway.
Do you recommend any hosts in particular besides the ones already in Adaway?
Also, what kind of apps do you split tunnel in NordVPN? Or no need? Everything working as it should?
Click to expand...
Click to collapse
Be sure to update hosts file in Adaway regularly. I haven't changed any sources in Adaway. Just the standard setup. It blocks system wide and I don't want it to be too strict. Maybe I want to reach a domain sometimes on some site without hassle. You can start up "dns log"in Adaway and then just use your phone like you always do. It then monitors every request. After a while you can go back to Adaway to view which requests occurred. From there you can block domains that were allowed. Or allow domains that were blocked.
I'm not using vpn a lot lately as I'm in my home country. I use it especially when I'm abroad in less privacy conscious countries. That's why I haven't split anything. But I would just it more, I would split apps like Signal private messenger which are end to end encrypted, and apps that don't seem to work well going through the vpn tunnel.
If you are really concerned about your privacy/ISP, then you should setup VPN always on, or force apps to use vpn tunnel by using a firewall. Although opinions differ on this. To me that's overkill anyway. Do you have apps still showing ads? Or do you mean ads while browsing websites?
SvenC said:
Do you have apps still showing ads? Or do you mean ads while browsing websites?
Click to expand...
Click to collapse
Yes, some apps are still showing placeholders. Didn't check all apps...but with Blokada I didn't even have the placeholders. Isn't a big nuisance, but if I can find a solution for it, for the better.
As for vpn usage... i just made some network speed tests... what do you see... it was better over the vpn. For some reason my isp was throttling my mobile (weird). So, I decided to allow NordVPN to always connect to the fastest server.
About tunneling, I was interested if any app misbehaves when on vpn (for example Netflix, or banking apps, if you personally encountered some issue).
derei said:
Yes, some apps are still showing placeholders. Didn't check all apps...but with Blokada I didn't even have the placeholders. Isn't a big nuisance, but if I can find a solution for it, for the better.
As for vpn usage... i just made some network speed tests... what do you see... it was better over the vpn. For some reason my isp was throttling my mobile (weird). So, I decided to allow NordVPN to always connect to the fastest server.
About tunneling, I was interested if any app misbehaves when on vpn (for example Netflix, or banking apps, if you personally encountered some issue).
Click to expand...
Click to collapse
I keep apps with ads at a minimum, so probably that's why I haven't any problems like that. I remember having problems setting up Payconiq and Transferwise while on vpn. After finishing the setup, only Transferwise still gives problems while on vpn. I don't have streaming or social apps besides Telegram and Keybase.
That said, if I didn't have a subscription from NordVPN, I would use Blokada and pay for its vpn. Everything in one app. But in case speed is important, probably Nord is a better option.
derei said:
Isn't DNS ad-blocking problematic? I've been reading that apps and websites can detect ad- locking DNS and act strangely.
Also, some ISP may not like some DNS... What has been your experience with DNS Adblocking so far?
Click to expand...
Click to collapse
You may have the same problems you have with VPN apps, I have not had any problems for the moment and I have been using dns adguard for some time ... once there was a problem in the server and they crashed but just set '' automatic dns' 'until the problem is solved. In any case, if you don't have root the only way is vpn or dns
I tried the Magisk module Energized but couldn't make it work. I got an error that it was not compatible although I had systemless hosts installed. Otherwise it seemed promising.
I'm testing another app now: Nebulo. At first sight I like it very much. But don't download it from Google Play cause that's a very limited version. Downloading it from Aurora Droid seems the easiest way. It's like Blokada, but I like it more. You can add packages to block ads. And the choice is large. You have a lot of dns servers to choose from. You can test the speed of the servers. Not just a ping test, but a revolution test. You can use cache to avoid sending the same dns requests over and over to the server; to speed up browsing. And a lot of other settings. Worth taking a look at.
Tried Magisk module energized.pro module on another ROM with success now. Using private DNS settings in android combined with that module. My favorite setup at the moment.

Modify hosts file without root?

OP 8T phone I use for company work, can't root. Is there a way to replace the hosts file with a larger, modified one to block all the spam advertising when browsing? or an Android FireFox add-in that blocks them?
Phone is original unlocked 8T (no TMo bloatware), with TMo 5G SIM.
TIA
No way to replace hostfile without root as far as I know.
Wisiwyg said:
OP 8T phone I use for company work, can't root. Is there a way to replace the hosts file with a larger, modified one to block all the spam advertising when browsing? or an Android FireFox add-in that blocks them?
Phone is original unlocked 8T (no TMo bloatware), with TMo 5G SIM.
TIA
Click to expand...
Click to collapse
Use DNS66 - see https://forum.xda-developers.com/t/app-5-0-dns66-open-source-host-ad-blocker-without-root.3487497/
Thank you for the suggestion of DNS66. I'll pass.
Couple of reasons... It isn't found in PlayStore, you have to side load outside of 'protected' apps. Also, it functions as a private DNS, routing all lookups through a DNS service that resides.... somewhere.
I've found another possible way by using ADB and Android Tools, pull/push files. But don't know if I need to unlock to do this.
Change to any dns with adblocking like dns.adguard.com by setting private dns in android settings.
Wisiwyg said:
Thank you for the suggestion of DNS66. I'll pass.
Couple of reasons... It isn't found in PlayStore, you have to side load outside of 'protected' apps. Also, it functions as a private DNS, routing all lookups through a DNS service that resides.... somewhere.
I've found another possible way by using ADB and Android Tools, pull/push files. But don't know if I need to unlock to do this.
Click to expand...
Click to collapse
Hello
Did you find a way to edit the host file without root on OnePlus 8t ?
Thank you in advanced
you could use surfboard or clash for android to modify hosts ,but it need use VPN
You can use AdAway in VPN mode or
install Ublock Origin Firefox plugin or
use private DNS as suggested by @Rootk1t

Categories

Resources