Preparing dictionaries that list resources to block [Документация VAS Experts]
Документация VAS Experts Документация VAS Experts-mobile
in

Settings

  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks
  • Show page
  • Old revisions
  • Export to PDF
  • Fold/unfold all
  • Backlinks

    • Differences

    This shows you the differences between two versions of the page.

    Link to this comparison view

    Both sides previous revisionPrevious revision
    Next revision    		Previous revision
    en:dpi:dpi_options:opt_filtration:making_dictionary:start [2023/12/19 13:26] – [Preparing dictionaries that list resources to block] elena.krasnobryzhen:dpi:dpi_options:opt_filtration:making_dictionary:start [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1
    Line 1: Line 1:
    -====== Preparing dictionaries that list resources to block ====== 
    -{{indexmenu_n>4}} 
    -Preparing a dictionary with a list of resources to block takes two steps. Firstly, one creates a text file with a list of resources. Secondly, one converts this file into an internal format by means of a special utility. 
      
    -<note>The conversion is carried out with two utilities: 
    -  * ''url2dic'' - for URL, SNI CN 
    -  * ''ip2bin'' - for IP 
    - 
    -Blacklist Checker Utility - ''checklock''. Use the utility via CLI: you need to specify the address or port address in the command line.</note> 
    - 
    -===== File format with a list of URLs to block: ===== 
    - 
    -Each line contains one URL (with no <nowiki>http://</nowiki> prefix). For example: 
    -<code>1magehut.com/users.php?act=gallery&gal=81&page=4 
    -3dmx.net</code> 
    - 
    -To convert into the internal format 
    -<code>cat my_url_list.txt|url2dic my_url_list.dic</code> 
    - 
    -To convert into the internal format with automatic conversion of domains and URL-letters written in the national alphabet in utf-8 encoding: 
    -<code>cat my_url_list.txt|url2norm|url2dic my_url_list.dic</code> 
    - 
    -===== File format with a list of names to block in SSL certificates: ===== 
    - 
    -Each line contains one [[cn_info|name]]. For example: 
    -<code>*.facebook.com 
    -www.vasexpertsdpi.com</code> 
    - 
    -To convert into the internal format: 
    -<code>cat my_cn_list.txt|url2dic my_cn_list.dic</code> 
    - 
    -===== File format with a list of public SNI (HTTPS domains) ===== 
    -Each line contains one SNI (without <nowiki>http://</nowiki> prefix), it is allowed to use *, for example: 
    -<code>qiwi.ru 
    -*.qiwi.ru</code> 
    - 
    -To convert into internal format 
    -<code>cat my_sni_list.txt|url2dic my_sni_list.bin</code> 
    - 
    -===== File format with a list of IP addresses to block: ===== 
    -  
    -Each line contains one IP then space then the port's number: 
    -<code>78.47.115.34 443 
    -95.211.6.92 443</code> 
    - 
    -To convert into the internal format: 
    -<code>cat my_ip_list.txt|ip2bin my_ip_list.bin</code> 
    - 
    -<note>**SSG 12.4+** Added the ability to use CIDRs, addresses, and ports for IPv4 and IPv6 blacklists and whitelists.\\ If CIDR or address is set, all TCP ports are blocked (UDP with the setting ''[[en:dpi:dpi_components:platform:subscriber_management:subsman_cmd:start#configuring_tcp_and_udp_protocol_blocking|udp_block=3]]'')</note>