ubiquiti:security_gateway:pfblockerng-like_ad_blocking
Table of Contents
Ubiquiti - Security Gateway - pfBlockerNG-like ad blocking
- /config/user-data/update-adblock-dnsmasq.sh
#!/bin/bash # # original writeup: https://medium.com/server-guides/how-to-integrate-ad-blocking-using-a-unifi-usg-a165dc2233c1 # # note this script needs to run as root, but that doesn't mean everything # has to run as root if [ "$(whoami)" != "root" ]; then echo "Script must be run as root" exit 1 fi ad_list_url="https://pgl.yoyo.org/adservers/serverlist.php?hostformat=dnsmasq&showintro=0&mimetype=plaintext" #The IP address below should point to the IP of your router or to 0.0.0.0 pixelserv_ip="0.0.0.0" ad_file="/etc/dnsmasq.d/dnsmasq.adlist.conf" temp_ad_file=$(su -c "mktemp /tmp/nobody.XXXXXX" nobody) #temp_ad_file="/etc/dnsmasq.d/dnsmasq.adlist.conf.tmp" sudo -u nobody curl -s "${ad_list_url}" | sed "s/127\.0\.0\.1/${pixelserv_ip}/" > ${temp_ad_file} if [ -f "${temp_ad_file}" ]; then sed -i -e '/googleadservices\.com/d' ${temp_ad_file} sed -i -e '/doubleclick\.net/d' ${temp_ad_file} sed -i -e '/awin1\.com/d' ${temp_ad_file} cp -f ${temp_ad_file} ${ad_file} chmod 644 ${ad_file} else echo "Error building the ad list, please try again." exit 1 fi rm -f ${temp_ad_file} # before restarting, test the validation so we can remove the ad file if # it's going to cause problems if [ "$(dnsmasq --test >/dev/null 2>&1; echo $?)" == "0" ]; then /etc/init.d/dnsmasq force-reload else rm -f ${ad_file} echo "Removing ad configuration due to validation errors" exit 1 fi
NOTE: Remember to make the script executable.
Check for errors
Run it manually to check for errors.
sudo sh -x update-adblock-dnsmasq.sh
Add the script to root's crontab
sudo crontab -e
56 4 * * 6 /config/user-data/update-adblock-dnsmasq.sh
Check root's crontab
sudo crontab -l
returns:
0 */24 * * * /opt/unifi/ips/bin/getsig.sh 56 4 * * 6 /config/user-data/update-adblock-dnsmasq.sh
ubiquiti/security_gateway/pfblockerng-like_ad_blocking.txt · Last modified: 2020/12/21 16:07 by peter