The document provides instructions for setting up web blocking on an OpenWRT router using DNS redirection or host files. It involves: 1) Connecting via SSH and editing the /etc/persistent/rc.poststart file to add redirection commands 2) Editing the firewall and DNSmasq configuration files to redirect DNS requests to the local router for blocking at the DNS level 3) Rebooting the router to apply the changes and then testing blocked domains.

1. Created by wichets@e-spacecorp.net ● E-SPACE TECHNOLOGIES CORPORATION ● T 092 392 1991
บล๊อกเวปไซท์หรือ บล๊อก ads บน Open WRT โดยใช้หลัการของ DNS หรือ ไฟล์Host บน PC
สาหรับ Ubiquiti NanoStation M5 หรือ airOS จะต้องประยุกต์ใช้ rc.poststart
1. connect ssh to router/ap
2. vi /etc/persistent/rc.poststart
---add the necessary commands in there--
3. chmod -R 744 /etc/persistent/
4. cfgmtd -w -p /etc/
5. reboot

2. Created by wichets@e-spacecorp.net ● E-SPACE TECHNOLOGIES CORPORATION ● T 092 392 1991
บล๊อกเวปไซท์ บน Open WRT โดยระบบ dns
1. ทาการสารองไฟล์ cp /etc/firewall.user /etc/firewall.user.save
2. เปิดไฟล์เพื่อแก้ไขเพิ่มเติม vi /etc/firewall.user
ทาการเพิ่มคาสั่ง iptables 2 บรรทัดนี้ลงไปในไฟล์ firewall.user
เพื่อredirect port 53 ทั้งudp และ tcp มาใช้บริการ DNS ที่ตัว Access Point ก่อน
--the necessary commands in there—
iptables -t nat -I PREROUTING -p tcp --dport 53 -j REDIRECT --to-ports 53
iptables -t nat -I PREROUTING -p udp --dport 53 -j REDIRECT --to-ports 53
3. รันคาสั่ง save พิมคาสั่ง save แล้ว enter
4. ทาการสารองไฟล์ cp /etc/dnsmasq.conf /etc/dnsmasq.conf.save
5. เปิดไฟล์เพื่อแก้ไขเพิ่มเติม vi /etc/dnsmasq.conf แล้วแทรกข้อมูล Sample: dnsmasq.conf แล้วทาการ save ไฟล์ :qw!
6. รันคาสั่ง save พิมพ์คาสั่ง save แล้ว enter
7. Reboot แล้วทดสอบออกเน็ตด้วยโดเมนที่ทาการบล๊อก
Sample: dnsmasq.conf
# updated dnsmasq.conf file
address=/facebook.com/127.0.0.1
address=/youtube.com/127.0.0.1
address=/207.net/127.0.0.1
address=/247realmedia.com/127.0.0.1
address=/247realmedia.com/127.0.0.1
address=/2mdn.net/127.0.0.1
address=/2o7.net/127.0.0.1
address=/33across.com/127.0.0.1
address=/51yes.com/127.0.0.1
address=/abmr.net/127.0.0.1
address=/adbrite.com/127.0.0.1
address=/adbureau.net/127.0.0.1
address=/adchemy.com/127.0.0.1
address=/addthis.com/127.0.0.1
address=/addthisedge.com/127.0.0.1
address=/admeld.com/127.0.0.1
address=/admob.com/127.0.0.1
address=/adocean.pl/127.0.0.1
address=/adsonar.com/127.0.0.1
address=/advertising.com/127.0.0.1
address=/advertserve.com/127.0.0.1
address=/afy11.net/127.0.0.1
address=/aquantive.com/127.0.0.1
address=/atdmt.com/127.0.0.1
address=/atwola.com/127.0.0.1
address=/axf8.net/127.0.0.1
address=/blueseek.com/127.0.0.1
address=/bravenet.com/127.0.0.1
address=/bravenet.com/127.0.0.1
address=/channelintelligence.com/127.0.0.1
address=/cmcore.com/127.0.0.1
address=/cnzz.com/127.0.0.1
address=/coremetrics.com/127.0.0.1
address=/corp.kaltura.com/127.0.0.1
address=/cqcounter.com/127.0.0.1
address=/crowdscience.com/127.0.0.1
address=/decdna.net/127.0.0.1
address=/decideinteractive.com/127.0.0.1

3. Created by wichets@e-spacecorp.net ● E-SPACE TECHNOLOGIES CORPORATION ● T 092 392 1991
address=/doubleclick.com/127.0.0.1
address=/doubleclick.net/127.0.0.1
address=/edgecastcdn.net/127.0.0.1
address=/esomniture.com/127.0.0.1
address=/fastclick.net/127.0.0.1
address=/fimserve.com/127.0.0.1
address=/flingwebads.com/127.0.0.1
address=/footprint.net/127.0.0.1
address=/foxnetworks.com/127.0.0.1
address=/googleadservices.com/127.0.0.1
address=/googlesyndication.com/127.0.0.1
address=/gravity.com/127.0.0.1
address=/hitbox.com/127.0.0.1
address=/hittail.com/127.0.0.1
address=/imiclk.com/127.0.0.1
address=/imrworldwide.com/127.0.0.1
address=/insightexpress.com/127.0.0.1
address=/insightexpressai.com/127.0.0.1
address=/intellitxt.com/127.0.0.1
address=/invitemedia.com/127.0.0.1
address=/ivwbox.de/127.0.0.1
address=/kaltura.com/127.0.0.1
address=/leadback.com/127.0.0.1
address=/mercent.com/127.0.0.1
address=/metriweb.be/127.0.0.1
address=/misstrends.com/127.0.0.1
address=/mookie1.com/127.0.0.1
address=/myads.com/127.0.0.1
address=/netconversions.com/127.0.0.1
address=/nexac.com/127.0.0.1
address=/nextaction.net/127.0.0.1
address=/nielsen-online.com/127.0.0.1
address=/nuggad.net/127.0.0.1
address=/offermatica.com/127.0.0.1
address=/omniture.com/127.0.0.1
address=/omtrdc.net/127.0.0.1
address=/paypopup.com/127.0.0.1
address=/pm14.com/127.0.0.1
address=/quantcast.com/127.0.0.1
address=/quantserve.com/127.0.0.1
address=/realmedia.com/127.0.0.1
address=/revsci.net/127.0.0.1
address=/rightmedia.com/127.0.0.1
address=/rmxads.com/127.0.0.1
address=/ru4.com/127.0.0.1
address=/rubiconproject.com/127.0.0.1
address=/scorecardresearch.com/127.0.0.1
address=/sitemeter.com/127.0.0.1
address=/smartadserver.com/127.0.0.1
address=/statcounter.com/127.0.0.1
address=/tacoda.net/127.0.0.1
address=/targetingmarketplace.com/127.0.0.1
address=/themig.com/127.0.0.1
address=/tradedoubler.com/127.0.0.1
address=/valueclick.net/127.0.0.1
address=/xiti.com/127.0.0.1
address=/yesadvertising.com/127.0.0.1
address=/yesadvertising.com/127.0.0.1
address=/yieldmanager.com/127.0.0.1
address=/yieldmanager.net/127.0.0.1
address=/yldmgrimg.net/127.0.0.1
address=/youknowbest.com/127.0.0.1
address=/zango.com/127.0.0.1
address=/zedo.com/127.0.0.1
#End of file