yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot!!!!!

This is a good example why the half of the solution is not working. When you do a ping to the Server you will see your distance is to big and this causes that the Server will have incredible high latency.

Chrome is definitly working with it but because on the SSL design the "long distance" or because the server are to slow this feature is not working at the moment.

I need to say sorry at the moment because actually I have no chance to fix this. Therefore I would need a stronger hardware and the most important thing is a better and quicker Internet connection. On your side everything is installed within the right way.

If you can do me a favor you can give this a try on a PC or Laptop.

Btw. as long as I have the money I keep this project up. I don't give up to find some Investor because I hope one day I have the chance to show the entire power of keweon. ;)

Thanks a again and thanks a lot for this feedback!!
[Android Software/Hacking General [Developers Only]] hariharanM25:
Not at all an issue if it's due to distance and need to do some improvements also. I will wait no pbm for me. I know u will reach good heights. I just thought i might have done something wrong. And i have told u many times.. Don't ask sorry to us..u r dng everything great. Next time i will have to ask u stop saying sorry with a gun pointing at ur head:laugh:
[Android Software/Hacking General [Developers Only]] MrT69:
:laugh: :laugh: :laugh:

It really hurts when you know what is possible but you can do only a tiny part of it. And patience is unfortunately not my strength at all. That makes me so crazy.

No worry, I would never point a gun at my head because suicide is just a permanent solution for temporary problems. This fu**ing speed and latency is just a temporary problem but I'm pretty sure there are a lot of other options. :laugh:

Anyway, thanks a lot!!!!!!!
[Android Software/Hacking General [Developers Only]] MrT69:
Can you do me a favor?

Can you check if you get a valid HTTPS connection to this URL?

https://asecdns.de

It might be that I have an Idea for this slow problem. Not sure if this is working. But first I need to check if this will work for you.

There is a Let's Encrypt certificate behind this URL but it's just for a Test.
[Android Software/Hacking General [Developers Only]] hariharanM25:
Yeah I'm getting it mate.. Sorry for late. Slept. Ha ha
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Me too from South Africa
[Android Software/Hacking General [Developers Only]] jyoti.id:
Wow. Im amazed by Keweon. Is it really possible that only installing the Certificate can block ads. Dns changer app is not running ( as you can see from the statusbar, no vpn connected )

!!! If so, then none will be happy more than me because i hate using dns changer because of battery consumption!
[Android Software/Hacking General [Developers Only]] MrT69:
A certificate only can't do it. A Root certificate is just a stupid thing which do nothing but to verify the validation of a SSL Tunnel. Nothing more.

It would be an amazing thing to provide such a solution but this is not possible at all.

When you block ads by hosts files you have 2 option because of the HTTPS errors. You can do it manually and confirm every error message by click on it. The keweon Certificate works with DNS or hosts files. By using this every error will be automatically confirmed by the Certificate. That's the trick ?
[Android Software/Hacking General [Developers Only]] hariharanM25:
I'm from India mate. Nice to meet u
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Same here nice meeting you

---------- Post added at 01:35 AM ---------- Previous post was at 01:34 AM ----------

Nice meeting you also
[Android Software/Hacking General [Developers Only]] jyoti.id:
I'm sorry, but i didn't get you ? so technically it's a no! Right? ?
[Android Software/Hacking General [Developers Only]] :
Yes, only the certificate can't block ads, you need to use the dns servers provided to do that. Or you can modify your hosts file using an app like AdAway, although keweon can do the same but on a wireless level (it works for all devices connected on a wifi network). Also keweon doesn't need to be updated manually.
[Android Software/Hacking General [Developers Only]] jyoti.id:
????? Happy to have a good explanation from you ? btw, what's the status of that private dns thing in android 9?
[Android Software/Hacking General [Developers Only]] MrT69:
It's working but not within the way I want.

I have too many time outs and at the moment I don't know why.

Actually I'm searching a PHP nerd. But I guess without some money there is no chance to find someone.

Still working on it but I guess it will take longer as expected.
[Android Software/Hacking General [Developers Only]] jyoti.id:
? No problem sir. Take your time. I just wanted to know the status ??
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Thank you for your great work :)

while using my mobile data dns works fine but when i use my institution's wifi( I've to use it) I can access all sites except youtube on both windows and mobile, i simply can't connect to youtube.

any solution for this issue ?
[Android Software/Hacking General [Developers Only]] MrT69:
If YouTube is not working then I would have a lot of complain about this. Which country you are?

Do you have also installed the Certificate? Can you try it again with Certifiate and also open it within the Browser.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
I'm from india, I've noticed that I can't open youtube with any custom dns server(i tried cloudflare and yours) while connecting to our Institution's wifi in mobile as well as windows but all sites are working with all custom dns while connecting to mobile data.

Any solution for this issue ? I know problem is not from dns side but any hack for this issue ?

eidt : I installed certificate on both mobile and windows but issue is there
[Android Software/Hacking General [Developers Only]] MrT69:
At the moment I can't offer an solution for this. The only way to prevent this thing is installing DoH Service. During the next week I will focus this and I hope I get it working until end of the week.

I have a lot of worldwide contacts in the meantime but I never heard about YouTube censorship within India.

It's incredible what some provider will do with there users.
[Android Software/Hacking General [Developers Only]] :
https://play.google.com/store/apps/details?id=com.bothwing.allpicfinder

This app can't work without ads...

If ads are blocked with keweon dns, It says "can't load ad"..

https://play.google.com/store/apps/details?id=com.bushiroad.kemofure

https://drive.google.com/file/d/1r0X_eR3Lhfem9orKDJv2gKrWLQNgynBq/view?usp=drivesdk

And some japanese unity game apps like this can't work properly can't get free reward..

but due to these kind of limit and force ad system, it isn'r good for Keweon's improvement...
[Android Software/Hacking General [Developers Only]] MrT69:
Let me check this. At the moment I only can recommend to used DNS Changer App and use this Apps within the exception list.

My Girlfriend was also using an App which is a so names Advertisersing Game. This kind of Games can't work any more.

Let me check if it's working. One last question.

Are u using also the Adblock Certificate and if not can you install it and give it a try again?
[Android Software/Hacking General [Developers Only]] :
I'm using keweon magisk module only without certificate. So I install certificate and no. Apps are still not working.

Thx for your kind reply!!
[Android Software/Hacking General [Developers Only]] MrT69:
https://play.google.com/store/apps/details?id=com.frostnerd.dnschanger

Thats the advantage of DNS Changer App from Frostnerd. In worst case it's a good thing for problems like this.

I have already tested the first App and it's not working either. I need to take a deeper look how they have done this.

Challenge accepted ??
[Android Software/Hacking General [Developers Only]] :
This means that your institution is blocking youtube. You can use Tor to circumvent that (or use a VPN).
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
yeah but while using custom dns only , coz with automatic dns setting i can access youtube while connecting to institution's wifi.

So I can't understand what is the problem

edit: tor is also blocked and most of vpns are also blocked, I use socks proxy to hide ip sometimes :(
[Android Software/Hacking General [Developers Only]] :
Wow, I've never heard of that. This is interesting, why don't you ask the IT department if they know what's going on? They shouldn't mind since you just want to watch youtube. And if you get an answer please post it here, because I really want to know what's going on.
[Android Software/Hacking General [Developers Only]] :
Oh!!!!!

---------- Post added at 05:58 AM ---------- Previous post was at 05:47 AM ----------

Could I ask just one more app?

https://play.google.com/store/apps/details?id=com.dcinside.app

This korean app keep shows me ad in banner...
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
i think problem is from youtube side or my device side because if my institution is blocking then why they would block only youtube they can block all sites with custom dns setting if they don't want us to use custom dns.
[Android Software/Hacking General [Developers Only]] MrT69:
If you have even the same provider on WIFI and on Mobile network they might have different rules. I'm pretty sure they are doing this for customer tracking. They can't track in deep what you are doing within the Internet but they can see which sites you are visiting.

This was also a reason why I have problems to find an Investor. I have had some offers but they are working with Query counting. Query counting is never ever an option because this will be used for Analytics things.
[Android Software/Hacking General [Developers Only]] MrT69:
It's hard so say something about this via remote. I need to see the problem to check what's going wrong. If YouTube will block the DNS server then a lot of other users will have the same problems.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
yeah sir, you are doing great work but they want to earn money with analytics so it is tough to find investor, but sure you will find investor :fingers-crossed: and good work will be carried on :fingers-crossed:
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Yeah i found that institution is blocking youtube. I'm attaching ss of my settings in shadowsocks settings .

I can access youtube and other sites if i disable dns forwarding ( given in ss) but if i enable dns forwarding i can't access a single website
[Android Software/Hacking General [Developers Only]] -Happy Feet-:
Hello,

With keweon activated I can't use apps from Telekom Germany. I would login to the customerportal with the app but I get "unknown error".

DNS server disabled the login works.

This was my setup:

1. DNS number 5

2. DNS number 1
[Android Software/Hacking General [Developers Only]] MrT69:
To sort this out I would need you to connect to my Home DNS Server. Without loging it's not possible to find because I have no account.

PM 4 you!
[Android Software/Hacking General [Developers Only]] -Happy Feet-:
Already answered.
[Android Software/Hacking General [Developers Only]] MrT69:
I don't know what this App is doing to connect to DNS. The problem is it was a need to lock down the server to protect them because I can't use a physical Firewall for them. DNS is a damn sensible technology and even tiny attacks against them might have a huge impact. Remember 20/21 October 2016. The worldwide half Internet was down because of one (!) wrong configured DNS Server. That's also the reason why it's almost impossible to HOST public DNS Server which are running as OpenResolver.

Because of this port forwarding to my DNS causes some troubles. If I would disable this my DNS servers are under fire. I have had seen this at the very first project start here in XDA. It has taken 3 hours and then the Servers are dead.

Sorry for this. I know why but I can't disable this.
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot!!!

For me it makes no sense to prevent logging and on the other hand I need to do it just for the Service. That's nonsense.

One day someone will see this and he understand my vision. Being patient is not my favorite strength. :eek:
[Android Software/Hacking General [Developers Only]] MrT69:
keweon - DoH (DNS over HTTPS) Status

The Server is actually working with a few small restrictions.

Whatsapp is working but no Browser and no other Apps.

Hmmmmm... I guess more security is not possible ??
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Is it possible to include cosmetic filtering ?
[Android Software/Hacking General [Developers Only]] MrT69:
Depends what you will understand with this.

Give me an example please.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
By removing space because of unloaded ads , but i think it is not possible because we are working on domain level
[Android Software/Hacking General [Developers Only]] MrT69:
The most of this will be done from the Certificate.

I can remove a lot of things but if I would remove all then it would be required to install an Agent or a Plugin or something like this.

That's something I try to prevent.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
ok thank you for ans :good:
[Android Software/Hacking General [Developers Only]] MrT69:
My pleasure.
[Android Software/Hacking General [Developers Only]] GorfDroid:
Delete me
[Android Software/Hacking General [Developers Only]] MrT69:
Who has experience with installing DoH Server with Phyton or Cargo?

It seems me and Phyton has serios problems. It's not a problem with all the other things. The one and only which is causing troubles is this Phyton thing.

Is anyone able to support?

Apache, Haproxy or Nginx is not a problem at all.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
How can we know which domains are connected and which are not ? I want to find if google analytics is blocked or not .

I'm asking for Android .
[Android Software/Hacking General [Developers Only]] MrT69:
Very easy. Go to http://www.kloth.net/services/dig.php and there you can double check.

It would be also an Idea from me to create a Interface where you can check direct on the Database what blocked and what is not blocked but for this I have no resources to do.

Take a look at the screen. For diagnostic on PC you can use also the DNS Query Sniffer from Nirsoft.

If you see one of these IP Addresses then it is blocked:

195.201.221.5

45.32.152.171

5.189.169.177

They are all same and this IP's belongs to me but they are different versions and edtions.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Using DNS still ads in Apkmirror
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Thank you for ans but I've question ,

I'm using keweon and i open the site https://www.androidauthority.com/ and i check ublock origin in off mode to see which domains are connected , in that ublock origin shows that all domain are connected including google analytics, how is it ? I can't understand.
[Android Software/Hacking General [Developers Only]] MrT69:
This is a tiny secret.

With PHP it is possible to read which DNS Server you are using. Now imagine what will happens if the Ads industries will enable such a Javascript. If you are using the keweon DNS Server they are able to detect and then you will be blocked.

For performance reasons I have disabled this feature on my "Root Server Instance" because this will cost "a lot of performace". At the moment they can use it for detecting the HetznerDNS Server and block this server.

But the keweonDNS Server will always respond within the right way. If they even think about to do this I would easily switch to Google or Cloudflare or whatever Server. I don't care. I'm just waiting for this because if they really do this then this would become damn funny.

This is some kind of user protection. When you are using keweon you are 110% protected against anything. OK, not at the moment because I can't do all the things I want to do. This is just a question of money, not a question of "is it possible to do".

I guess you are fine when "no one" is able to read what will happens on your side. And "no one" means no one. This "no one" includes also you.

Exactly this is my understanding of a real privacy protection.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Thank you but I don't understand some part of your answer, I'm explaining what i understood about your answer to my question , correct me if i'm wrong,

I think that google analytics is connected but not to my browser(my ip) but to some ip which you have assigned, those ips are block hole which do nothing. So that's why ublock origin say connected to g-analytics.
[Android Software/Hacking General [Developers Only]] MrT69:
That's something I don't know.

It might be that ublock see this because it's not "blocked". You have a valid public IP address and you might even have a valid HTTPS tunnel with the Certificate.

That's the reason why this tool assumes you are connected. From this point of few uBlock is right. It is not blocked because the web is answering. On the other hand this kind of solution is required because some sites see this and they will use google-analytics and a few others domains for Adblock detection. 2 different IP Addresses on one hosts will show that I'm still trying it to do it better. Don't forget the current live system is unfortunately also some kind of test system for me. I don't have any other options :)

They just need to implement something which will read the IP Address. If URL is keweon IP Address then it's blocked. But at the moment it's too early for a cooperation and I'm to small to become a partner for this incredible tool. It also might be that my IP Addresses will change. If I ever will find an Investor this would become a different IP address because I would use much more stronger physical hardware for this.

Domain Blocking with simple YES and NO is more and more an outdated technologies. Do you really believes the Ads industries will do nothing against this things? Best examples are AMAZON and FACEBOOK. They are already working with so many cross-domain checks and connections. If you block one site this will have impact to different other sites. Blocking pixel and graph from Facebook will have a deep impact to a lot of other sites and they are not longer working.

EDIT:

Btw, thanks a lot for your questions. I really love it when someone is thinking deeper into the system. I hope that I can answer all your questions!!!!!
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Your IP is still your IP. You may be using Keweon to resolve DNS; the IP remains the same. Only when you're connecting via a VPN or using IP spoofing methods, your IP will appear to be different.

I don't believe G-analytics is on the blacklist (@MrT69?) but even when it is, if you're logged into a Google account, Big G will follow you everywhere. If you don't want them to follow you, simply add their opt-out plugin from this page or have another plugin block tracking.
[Android Software/Hacking General [Developers Only]] vatsal_chandan:
Thank you for your all answers :o I'm also learning because I'm student of IT and we have course on Computer Network System which includes DNS, DHCP , TCP etc, That'y why my interest is more ;)

Yeah others will also follow amazon and fb because their whole business runs on ads and tracking and analytics .
[Android Software/Hacking General [Developers Only]] MrT69:
With keweon I'm trying to do it within a different way and as already explained there are a lot of other options possible.

In 1996 to 1998 I was playing around with Software Cracking, Keygens and all this kind of stuff. I was young, I had fun and I learned a lot of things during this time.

SkidRow, Razor1911 and PhrozenCrew. Big names from an awesome time. Exactly this knowledge is the reason why everything is running as it is.

A lot of more things are possible but as I already wrote within the first thread it is not the holy grail. [MENTION=4841620]Timmmmaaahh[/MENTION] is complete right. The only 100% protection for your privacy and Data is to unplug all cables and cancel your internet subscription.

Yes, Google is almost blocked by keweon within different ways. Although it is Google there are working a lot of people who has a good knowledge and deep technical skills.

I spend round about 2 yrs only to try to understand the Google infrastructure. I was trying to understand how it works and why things happens when I block them within this or that way.

It was wasting time. No chance to understand. If you believe only by simple blocking things at Google you are able to prevent Google to collect data that's ridiculous.

Google and of cause others knows about hosts blocking. If you really block everything which will only think about to collect data the Internet will become not longer useable for you.

I have blocked a lot of this and other things. And day by day I'm learning how to do it better.
[Android Software/Hacking General [Developers Only]] realista87:
hi mrT69 i tested your dns! i live in ITALY and i used also some benchmark tools like DSNjumper and DNSbenchmark and i discovered that the response time is LOWER on your .DE server respecting the primary one

(104.207.131.11 is faster than 176.9.62.58) what do you think i would do? use the secondary as primary and the primary as secondary? or is always better to use the primary because it has always a better and more updated list of blocked domains?

here in italy(marche) just to compare your dns with other ADBLOCK DNS..... your dns is a lot faster than ALTERNATE DNS and ADGUARD DNS...... but another one dns, BLOCK-THIS is even more fast than your being as fast as google dns in my benchmarks.

but of course i follow more your dns project and i will use keweon instead of block-this , you are doing a great job here! i hope you can reply me because the secondary server(DE) is faster than primary for italy....

PS: the italian site androidworld.it is not accessible using the dns... can you check it?even if i force tu enter even if "unsafe" i can't see the site