Filtering by the Register of Banned Websites (service 4)

Product Description

Check the black_list_sm parameter in the configuration file /etc/dpi/fastdpi.conf. If it is set to 1, the service is enabled and blocking is not global for all.

On a test subscriber (IP/login), ensure that the service is deactivated:

fdpi_ctrl list --service 4 --ip 192.168.1.60

Output options:
1/0/1 - service removed
1/1/0 - service available

Result processing ip=192.168.1.60 : 1/0/1

— service is deactivated

Set the IP address of the deactivated subscriber in the configuration /etc/dpi/fastdpi.conf:

trace_ip=<IP>

After setting, reload:

service fastdpi reload

Make a request from a test PC to the resource metfen.com
Check the log for the test site:

grep -A5 metfen fastdpi_slave_?.log

or

cat fastdpi_slave_?.log | grep metfen.com -A 5

Output:

HTTP_HOST=_metfen.com_ HTTP_REFERER(0)=_null_ HTTP_USER-AGENT=_Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.65 Safari/537.36_ HTTP_COOKIE=_null_ [TRACE ][001693490086826396][2888570700] CHECK_HTTP : URL=_/_ HTTP_HOST=_metfen.com_ HTTP_REFERER=_null_ blocked=0 new_prg_id=0

As seen in the output, blocked = 0 (no redirection), new_prg_id=0 (no service connected). SSG — does not conduct redirection/blocking.

Capture the requests dump to the banned resource on the deactivated subscriber, e.g., using fiddler. If redirection remains, the issue lies on the blocking page — there is no information on its caching on the browser side, and the browser independently redirects the request without SSG involvement.
To prevent this, use:

Cache-Control: max-age=0, no-cache, no-store, must-revalidate Pragma: no-cache

Request:https://vip-club-vulkan.net/
Actions:SSGDPIhardware mtujumbo frameip mtu

curl

curl -A "user-agent: FastDPI_blcheck" -o /dev/nul https://www.vasexperts.ru/data/lastdump.zip
curl -v -o blacklist.dict https://vasexperts.ru/data/belarus/blacklist.dict

DPIfederal_black_list

federal_black_list

4 service

DPIDPI

DPI

#1 bin2ip /var/lib/dpi/blcacheip.bin > tmp.txt #2 dic2host /var/lib/dpi/blcache.bin|dig +short -f -|grep -E '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' » tmp.txt\\ #3 sort -u tmp.txt > ip.lst

DPIincronexabgp