yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
At this point DNS encryption is not a thing we Plan to implement.

This System is comlete VPS based and a real smal system.

We are using some overloaded security on the servers. If we have success to establish this as an commercial system we will use DNS encryption.

But at the moment we only want to clean up the Black and white lists and for this DNS encryption will cause more troubles than security.

Best regards!
[Android Software/Hacking General [Developers Only]] MrT69:
Technical Focus:

It seems that adblock blocking will become the "Advertising Surprise XXL Feature" for 2016.

May be for all other Adblockers. But this will not work with the keweon System.

We cross the fingers and we wil see :fingers-crossed:

:eek: :eek: :eek: :eek:

Blocking Adblocker which blocking ads to make sure that ads will never blocked

:eek: :eek: :eek: :eek:

If you see any Website which is blocked when you will use an ad-blocker please test this also with the keweon System.

Yahoo is working on this to prevent ad-blocker usage.

We are working on this problem too and for a well-balanced result we take the other side.

Help and let us know when you find such a site!
[Android Software/Hacking General [Developers Only]] MrT69:
Tell us what you think about this:

kinox.to and movie2k.to are now 98% ad free.

We also removed the abo traps when you use this sites on your mobile phone.

Best regards and we hope you enjoy this!
[Android Software/Hacking General [Developers Only]] flummi3000:
What are you doing with all the user data you are collecting with this?

Gesendet von meinem HTC One mit Tapatalk
[Android Software/Hacking General [Developers Only]] MrT69:
Collecting data? From users? Or any connections?

I guess you are german because that's typically german bull****!

Who the hell told you that we collecting data? Collecting user data via DNS Server? Did you saw any data collection?

Do you realy belive that we break the communication to nearly everywhere and than we collect data for what?

Oh damn!! Almost idiots only here in germany!
[Android Software/Hacking General [Developers Only]] brad65807:
Sprint

Anyone know how to change the DNS on android KK?
[Android Software/Hacking General [Developers Only]] MrT69:
Check the Playstore and search "RomToolBox". But this tool requires root.

Unfortunately I'm using currently an iPhone but with this Tool I have had the best experience on android.

With higher versions than KK (4.4) I have no clue how to change the DNS Servers because HTC OneMax with 4.4 was my last android device.
[Android Software/Hacking General [Developers Only]] Shockwave71:
I just use the DNS changer from Playstore. Works fine so far. Thanks for your effort!:D:good:
[Android Software/Hacking General [Developers Only]] MrT69:
Good to know. ;) thanks for the Feedback :good:
[Android Software/Hacking General [Developers Only]] Black Plague:
Just shut-up for godsake if you want to use it use it, or if you don't leave it, why so many complaints, go learn computer networks DNS stuffs and then talk, its just a solution, there are many other adblocking solutions out there. If you are concerned with too much privacy why use Google or xda there's trackers everywhere, its inevitable to avoid. Grow up please.
[Android Software/Hacking General [Developers Only]] Sonic2k:
hi

i'm using your DNS server since a few days, and it works fine.

Webpages are more clear from ads. Nice work :)

But i have a very big problem. Witch spending hours to find an solution, but i can't find anyone.

I'm using Microsoft Office and when i use keweon i will get an certificate error message while sending emails.

This error apears on other mashines in my network too. :( So I'm a little bit ****

Does your system has any erros? When is disable your system, everything works fine...

Can you explain it to me what is going wrong and can you bugfix it?
[Android Software/Hacking General [Developers Only]] MrT69:
This is anproblem which is related to Microsoft and I guess you are not using the keweon Root Certificate on your machines.

Normally you will not see this but because of the fact that we have blocked these addresses you will see this as an HTTPS error. When you click in Outlook email the send button than you send some unknown and encrypted information to the following addresses:

f5.services.visualstudio.com (belongs to MarkMonitor Inc.)

pixel.monitor1.returnpath.net (belongs to Return Path, Inc.)

Return Path Inc. is currently not completely blocked on the keweon DNS but when you take a look at http://www.returnpath.net this will be a self spelling start page and you know why we have blocked the pixel.monitor1.returnpath.net URL.

The keweon Team can confirm that this problem exists within Office 2013 and also within Office 365. But in the meantime this problem should be already solved when you have actual updates applied to Office. I'm pretty sure they will use now other addresses but therefore I would need a lot of time to take deeper investigations.

If someone is interested how to do this let me know this. But you need to have more than only Basic experience within Network sniffing.

Back to your problem I would recommend one of this two solutions or both together:

1. If you are not able to Update your Office installations then use the keweon Adblock Root Certificate because within SAN we block only poison and suspicious addresses. Than this error will not longer happens.

2. If you don't want to use the keweon Certificate than update your Office installation via Windows Update because it seems Microsoft has removed this two addresses within Office a few weeks ago.

But do me a big favour and double check this with a URL sniffer BEVORE you do the Update because keweon is the light side of the force ;) Would be a great thing if you can confirm this.

For URL sniffing I recommend the tools either from NirSoft or use Fiddler. I don't know about your experience within Networking so you can also use Wireshark but this is real hard core. For basic sniffing I recommend the 3 Tools from NirSoft:

HTTPNetworkSniffer

DNSQuerySniffer

NetworkTrafficViewer

1. Point your DNS Servers to Google or any other DNS than keweonDNS

2. Close your Browser and Outlook

3. Start all 3 NirSoft tools together

4. Reopen the Browser (and Outlook)

5. Now you will see all the evil things.

The keweon system is a 100% privacy protection system but it is a hard thing to explain this within a easy way. I hope you will still trust into this system.

Best regards!
[Android Software/Hacking General [Developers Only]] Sonic2k:
thanks a lot for your answer

i checked the communication with dnsquerysniffer and there will be truely a communication to the mentioned addresses !!!

why does microsoft do that? Does they send copies of my e-mails? the next days i will try office 2016. Are there maybe new

addresses to block? Can your system save me?

Sorry if I write stupid questions :) but I'm a litte bit surprised / confused about this Microsoft story.

So I think it will be the best thing I will use your system everywhere to protect me against ads and special company-communication :) thanks a lot for your work
[Android Software/Hacking General [Developers Only]] MrT69:
I don't know what they are doing because it is HTTPS communication and it is prohibited by European law to decrypt any encrypted traffic independent what they are doing.

I will check Office 2013 again and also 2016 within the first January week because of X-mas and New Years. On the one hand it's not done within a day or two because this needs some time and on the other my wife is currently the highest power within my live. And she swears to kill me if I will do this during the X-mas and new year day's. ;)

Anyway, if you find additional things let me know this. I'm happy to know that you are now a new fan of the keweonDNS system.

Thanks a lot and merry X-mas to you!
[Android Software/Hacking General [Developers Only]] Sgace:
Hi,

Thnx for your hard work man. Was looking for something like this. Gonna test at home for a while.

Here is a stupid one just for my understanding:

When i put this in my wifi router every device in my homenetwork will be "protected"?

Cheers
[Android Software/Hacking General [Developers Only]] MrT69:
Yep. That's the reason why I have build this solution.

keweon works device independent and when you use the servers on the router every device is protected which is connected to the WIFI Router.

Unfortunately you can't use this on IPhone's 3G/LTE connection because Apple will not allow the user to change the DNS settings. On every other device you can change the DNS.

Hope you enjoy this!
[Android Software/Hacking General [Developers Only]] MrT69:
​

Based on the Certificate download statistics we have seen that we have currently round about 200.000 (!) users on the keweonDNS System.

I expected round about 5000 or 8000 user. But this number is a real hammer. Because of the fact that we have now over 200.000 users we have decided to launch the keweon System as a global system.

We will talk with some Investors during the next weeks and we hope we can present the new global keweon System within the next 2 or 3 Month. Cross the fingers because we would need at least 63.000 Euro for 2 years to rent the following Data Center locations:

(EU) Paris - France

(EU) Amsterdam - NL

(EU) Frankfurt - DE

(EU) London - UK

(USA) Atlanta - Georgia

(USA) Chicago - Illinois

(USA) Dallas - Texas

(USA) Los Angeles - California

(USA) Miami - Florida

(USA) New York / New Jersey

(USA) Seattle - Washington

(USA) Silicon Valley - California

(JP) Tokyo - Japan

(AU) Sydney - Australia

(SGP) Singapur

(CA) Toronto - Canada

This will finaly mean:

faster System (Multi CPU and SSD per Server)

faster Internet (quicker respond on your site)

100% redundant (no more timeouts during the blacklist updates)

use it on any device

ROM DEVS can use the keweonDNS by default within there ROM's

and a lot of more things

Don't care about the current keweonAdblockRoot certificate.

Our current root certificate will be still valid and we will not change this. This will be still valid even if the System and DNS Server will change.

Happy new year to all and specials thanks to the XDA Team and Admins!!! Without XDA this would be never possible!!!

Best regards and million times thanks again to all of you!
[Android Software/Hacking General [Developers Only]] Sonic2k:
hello i have another question

i have installed the certificate on several systems on the pc and android systems it will work fine.

Now if i make a reboot on my Galaxy tab3 i will get a system message -->

German:

========================================================

Berechtigung überprüfen:

Ein vertrauenswürdiges Zertifikat auf ihrem Gerät ermöglicht Dritten, Ihre Netzwerkaktivitäten einschließlich E-Mails, Apps und sichere Websites zu überwachen.

in English i think it would be this:

========================================================

Network monitoring:

A third party is capable of monitoring your network activity, including emails, apps and secure websites. A trusted credential installed on your device is making this possible.

the message doesn't appear if I confirm it.... till a new complete reboot.

my wife has a galaxy S6 Edge and there, this message won't appear. is there a way that this message won't appear on my tab3?

thanks in advance :)

=========================================================

=========================================================

my Mobile: Samsung Galaxy Tab3 (SM-T211)

Android-Version: 4.4.2

Baseband: T211XXBNJ3

Buildnr: KOt49H.T211XXBOA3

rooted: YES

Firmeware: T211XXBOA3_T211DBTBOB1_T211XXBNJ3_HOME.tar.md5

my wifes Mobile:	Samsung Galaxy 6 EDGE (SM-G925F)

Android-Version:	5.1.1

Baseband:	G925FXXU3QOJB

Buildnr:	CMY47X.G925FXXU3QOJB

rooted:	NO

Firmeware:	orginal --> no. unknown
[Android Software/Hacking General [Developers Only]] MrT69:
I guess this is related to your ROM. I have had installed the certificate to a lot of devices and with no Android devices I received this message.

It seems something went wrong with this firmware.

Check this:

http://xdaforums.com/google-nexus-5/help/howto-install-custom-cert-network-t2533550

Might be an idea to upgrade your ROM and if you do this I would also recommend to do a complete factory reset and start from scratch.

Best regards!
[Android Software/Hacking General [Developers Only]] olinojephanko:
ad1. Ive installed certificate for windows system and i use german and france ipv4 dns but youtube doesnt work, it just shows a blank page in chrome v47/edge, while it works in nightly mozilla with certificate.

any fix?

ad2. i do play lot of games via steam and battle.net..will i be affected somehow?

Thank you and great job
[Android Software/Hacking General [Developers Only]] MrT69:
Do me a favour and use the UK and FRANCE DNS Server please. A friend have had the same problem but they are all the same DNS servers.

He had the problem that it was working in Chrome but not in the other browsers.

That's interesting because all DNS Servers have the exact same configuration.

It would be a great thing if you can send me some feedback if this will work.

I have a lot of users here around but they are almost networking freaks. ;) I have no one who is playing games. Let me know if it's not working & I will PM you my email for faster communication to fix this.

Thanks in advance!
[Android Software/Hacking General [Developers Only]] MrT69:
YOUTUBE UPDATE:

My financial budget is currently very limited. Because of this Youtube is unlocked in a cool way where I do not need to redirect a lot of traffic.

Based on the information's from olinojephanko we have sorted out that you will have some problems when you logged in into Youtube.

Workaround if you open www.youtube.com and will only see a white site because the page will only load to code line 36:

Just open a video from bookmark or from the histroy and then you can browse to www.youtube.com

Open www.youtube.com/feeds or www.youtube.com/channel and then browse to www.youtube.com

Log off from youtube

I know that this is currently only a workaround. I know how to solve this but based on the financial situation it is currently not possible.

Thanks a lot & sorry for this!

Edit:

Received a smal Donation and was able to fix this. There was to much access on this Server.

YouTube is working normal again with a tiny load balancer.

This will mean the System will be used. Thats so cute!

Thanks to all of you!
[Android Software/Hacking General [Developers Only]] MrT69:
Hi!

f-droid.org is now working. If you find more let me know.

Thanks for your feedback!
[Android Software/Hacking General [Developers Only]] dalepothen:
hello can any one help me out i want to install in android 6.0 can and one help me out i saw a crt file for android too so can some give me detailed steps to install thank you
[Android Software/Hacking General [Developers Only]] MrT69:
On your Android Device click on this link:

http://pki.keweon.center/certs/keweonAdBlockCertificate.crt

On IPhone you need to use SAFARI for this. On Android you need also use the default browser.

Do not use Chrome, Mozilla or any other Browser because they will only download the cetificate.

Now follow the instructions on your device and that's all.

Best regards!
[Android Software/Hacking General [Developers Only]] MrT69:
With this construct?

This is not possible at all even when the certificate is installed.

You can take a sniffer or a simple network monitor. There is no communication to one of the Server.

That is one of the reason why it was needed to start this project at XDA. You can be sure that a lot of people using the keweon System just to take a look inside what I'm doing. And you can be sure if I would even think to do evil things they will know it and post it.

Here are a lot of people who knows what to do to search and track.

Because of the certificate this might be a little security issue. But to do some evil things I would need to install additional software. And that's the reason why keweon is DNS based. You will NEVER (!) see a Software or an Update which is required to install.

One question to you. Why do you have concerns that I will or can or might access private data? Is it because of the certificate? Let me know and I will answer it.
[Android Software/Hacking General [Developers Only]] triad88:
Is their a way to install the certificate and dont use pin or password in cyanogenmod 12.1?
[Android Software/Hacking General [Developers Only]] MrT69:
This is what I don't understand. I have the same Problem on my Samsung Tablet.

Why the hell it is required to use a pin?

It is 2 years ago that i have Build my last Rom but the only solution could be that you need to build in the certificate into the ROM.

I don't know if some ROM DEVS can create a patch for this.

For rooted devices it should be possible to create such a thing.

At the Moment I don't have a real solution for this Pin Problem.

Curently I have only IPhone and a non Rooted Samsung Tablet for Testung things. But take this and read the last entry. If this will work it is possible to create a generic Patch:

http://stackoverflow.com/questions/...user-installed-certificate-android-4-0-and-up
[Android Software/Hacking General [Developers Only]] triad88:
Thnx, but thats a bit out of mine league. I dont know about the stuff in above the link. I know flashing and rooting and some simple stuff in terminal. Mine knowledge is basic. :(
[Android Software/Hacking General [Developers Only]] MrT69:
;)

I hope someone with more experience within ROM building can give some Support. As soon as I have a confirmed patch for this I will offer this as flashable Download.

But I guess this will only work on with rooted devices.

Thanks a lot for your feedback!!
[Android Software/Hacking General [Developers Only]] triad88:
i have now installed the patch with pin/pass.

in profiles their is a option that you can switch off pin/password/lockscreen by default.

so when i now switch on mine cell then it directly goes to the screen when i turn it off.

less battery use with the lockscreen,faster access to the cell, and the addblock from Keweon!

i got nothing to hide with mine cell so i find this way better.only when i l lose mine cell the people can wipe everything and use it for them self.
[Android Software/Hacking General [Developers Only]] minori_aoi:
Hi, how about OSX El Capitan? Is it available too? Is this also work to circumvent Internet Censorship? On my ISP, i can't access some website because it's censored, and changing my DNS to Google didn't solve the problem.
[Android Software/Hacking General [Developers Only]] MrT69:
Yep. This also works with the current latest OSX Edition.

Because of the censored thing I would say give this a try. My solution is DNS based, not proxy based and because of this I guess you will still have the same problems.

Give it a test and let me know this if it's working or not. If it's not working give me a PM and I will show you how to bypass the censored ****.
[Android Software/Hacking General [Developers Only]] minori_aoi:
Tried it on Android phone, opening the link asked me to install the certificate. I installed it, and it asked me whether to install it for WiFi or VPN and Apps. I choose WiFi, because I currently use WiFi to connect to Internet. Certificate installation succesful, my phone said.

Tried opening censored website, still not working. Tried opening gsmarena, ads still showed.

I compare it with Firefox for Android and installing uBlock Origin (before installing Certificate). It blocked the ads on GSMarena.

Did I missed something?
[Android Software/Hacking General [Developers Only]] MrT69:
Did you also changed the DNS Servers on your device?

Take Look at my posting #1 and choose 2 DNS Servers of your choice. If you have a rooted device you can change this with RomToolBox light.

The certificate is only for remove the https error message. A lot of advertising will be send via HTTPS and if you browse to one of theses sites you will receive an error message.
[Android Software/Hacking General [Developers Only]] minori_aoi:
OK, followed your step above, I changed my DNS with ROMToolBox Light, but the app said, DNS has changed since Android 4.0+ and might not work (I'm on 5.0.2), applied it anyway, but nope, still not working on Android.

Tried it on my Windows 7 with Firefox. And it worked. Do you know how to make it work on Android KitKat / Lolipop ?
[Android Software/Hacking General [Developers Only]] MrT69:
Let's come to the cute things of keweon.

If you have a (Wireless) Router where you can change the DNS Server than you will have the Protection within your complete LAN with only one Point of change.

For use keweonDNS on your Mobile Device with 3G or LTE u need to set the DNS on your mobile device.

I don't know what app you can use but within a recommendation in a earlier message a user Post to use change DNS.
[Android Software/Hacking General [Developers Only]] MrT69:
After a Server crash the complete blacklist Infrastructure was brocken.

But everything is now back and working again.

It was needed to rebuild all blacklists from scratch and it seems it works better than bevore.

Sorry for this!
[Android Software/Hacking General [Developers Only]] MrT69:
Feedback request

I'm testing the performance for a new provider and I would like to ask users within the USA to send some feedback.

Here are the both IP Addresses for the new keweonDNS Server within the USA:

USA - Dallas (TX) IPv4: 185.92.220.113

USA - Dallas (TX) IPv6: 2001:19f0:5000:94e3:5400:00ff:fe17:4cb5

Would be great if you can tell me what do you think about the performance of this server.

Thanks in advance!
[Android Software/Hacking General [Developers Only]] MrT69:
Hmmm... Dallas must be Level3 data Center. What's about the speed of DNS requests? Would be great if you can check this for one or two days.

I know that virtual DNS Servers are not the best idea but using physical hardware will incredible increase the costs. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
That was bad luck because I added a break ;)

The VPS are only running with with 1 CPU and 1 GB RAM. For public usage it was also required to implement a self-made triple firewall concept and a packet inspection on top.

I have had tried to run them only with a simple firewall concept but it was

required

to implement more security. And I know that there's a tiny difference compared to my firewall with an CISCO ASA. ;)

I have had the luck and know the results from EQUINIX Datacenter in Munich and a CISCO ASA as front end. Exact two years ago from today I launched the first test System. 3 to 8 ms around the globe. Damn!! But from a financial perspective it was a nightmare for me.

Anyway, for demo and testing the current system is OK. Frustrating when I take a look at your numbers but still OK. I guess during the next 2 or 3 Weeks I'm finish with the white/blacklist mess and when you use the keweonDNS on a router the performance is more or less acceptable.

I'm already dealing to find an Investor. It's hard because I don't want to become an advertising gateway or data collector and this is until today always the NO-GO criteria for them. But I never would give up and I will find a way. :good:

thanks a lot m8!
[Android Software/Hacking General [Developers Only]] MrT69:
I will give it a try ;)

Do you have any contact to them or should I use the the public options to get in contact? Please send me a PM if you have any direct contact. :good:

Thanks in advance!
[Android Software/Hacking General [Developers Only]] MrT69:
UPDATE for USA:

It seems the Server was broken. Reinstalled it and also assigned a new IP Address to it. Now it's below 50ms within USA. (superping.com)

IPv4: 45.32.198.153

IPv6: 2001:19f0:6400:8945:5400:00ff:fe17:5dba

Thanks to bencozzy for his feedback! After taking a sleep I notice even for a VPS on a bad line 160ms and more is to high.

Thanks again m8!