yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
Germany is already in Progress.

The problem is that the German BSI make an weekly Inventory on all German IP Adresse to investigate if it's an Open Resolver. On the one hand a good thing because Open Resolver could break down the entire Internet and on the other hand this will cause a lot of troubles for me because I need harder security to prevent this.

It's already done but I need to do more and deeper tests. I guess Germany (and France) will be online on next Thursday or Friday.

At the moment I recommend UK and NL for use in Europe until Germany and France is Online.
[Android Software/Hacking General [Developers Only]] adewisman:
thank you for contacting me, I seem can not send a message to your wa but I sent some details on your telegram account, and I couldn't pm you on xda too, thank you.

Edit : confirm playstore working with Netherlands server.

iptables -t nat -A OUTPUT -p udp --dport 53 -j DNAT --to-destination 45.77.138.206 && \ iptables -t nat -A OUTPUT -p tcp --dport 53 -j DNAT --to-destination 45.77.138.206

Im using a magisk module to run the iptables command on reboot, if anyone interested to test it too kindly grab it here : https://drive.google.com/file/d/0B-pSptpnbKwlREktUVY0Unc3YlU/view?usp=drivesdk
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
how do i check if it works or it has changed?
[Android Software/Hacking General [Developers Only]] adewisman:
Im testing it using https://dnsleaktest.com/ (attached) and https://thepcspy.com/blockadblock/ (adblocker test) , its working beautifully on my end, great works.
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
ok..wil check now..
[Android Software/Hacking General [Developers Only]] MrT69:
Hi folks!

Please don't compare my DNS Servers with any current standard Servers. For security reasons I locked them down within a damn hard way and if the servers will see any non Standart use every request will be dropped.

Why?

DNS itself is a very sensible Technologie and with a wrong and false configured server you can break down the entire Internet. (Amplifier, DDoS, Mitigation)

At the fist start here at XDA it was a need to change 3 times the Provider because right after the release idiot's running attacks against the server.

Frustrating thing.

The current system a very low budget system but it's working. It's working for local PCs, Mobile Devices and Tablets and for Soho/WiFi Router for to run keweon with one step on every device at home.

Please understand that all other additional things are not possible. This is only related to the reason that I'm running everything on low budget VPS.

As former employee from Level3 they made me an offer to store the entire Infrastructure within the Data Center. Only for the security and even for an Ex employee the would charge 4000 Euro per Month (!) only for this. No kidding - just only for Security. No Rack, Hardware or anything else.

Please understand that I need a heavy security on the servers because I want to keep them longer Online for all of us.

Thanks a lot and any recommendations, tips and help are always welcome.
[Android Software/Hacking General [Developers Only]] MrT69:
Data Center outage Monday at 2 PM GMT +1

The HTTP/HTTPS Termination Server would be offline for round about 2 to 3 hours tomorrow morning. Currently the system is not redundant because this will cause to many costs.

All further updates, informations and technical Details and Staus of Server and Data center be available for the future on this website:

http://status.keweon.center

Impact:

Adblock and Security is still given. The website and the ads Termimation will not look very pretty.

Personal Note:

Need to think about an AMAZON Load Balancer. Has anyone experience about the price of this?
​
[Android Software/Hacking General [Developers Only]] MrT69:
Ads Termination improvements (HTTP & HTTPS):

- installed Loadbalancer from scratch

- enhanced backend infrastructure

- extended backend infrastructure to 50 Servers

- adjust https response time

- Version upgrade of "Zero SSL Session Broker"

- Reduced memory usage

- Reduced initialization response

- enhanced "Zero SSL Session Responder"

- extended SSL Ciphers

- improved the Domain response

- dropped packet inspection

- enhanced firewall security

- reduced response time

The Server should now run more stable. It's still a VPS environment but I hope to keep the system now more stable with all the changes.

The websites should now look much more pretty and the load of the websites should also processed faster by using the keweon Root Certificate.

Thanks to all tester.
[Android Software/Hacking General [Developers Only]] MrT69:
System Upgrade:

To run keweonDNS on a virtual environment is not the best solution. I know this and please see this as an Proof of Concept.

I see that the VPS sometimes will not do what they should do. Therefore I will do a RAM upgrade and hope that this system will get more stable and faster. I also hope that the performance will increase.

During the coming weekend it is a need to reboot each Server two times. Until they are back again it will take round about 90 seconds for each reboot.

This will not have an impact if you stay i.e. on Facebook or on any other site.

If you are open a website at this moment you will get an timeout. Please wait a moment, take a smoke or order an cup of coffee and everything is fine again within less than 5 Minutes.

I hope the system will become stronger with this.

Thanks in advance
[Android Software/Hacking General [Developers Only]] MrT69:
System Update:

A lot of false positive removed. Thanks to all supporter.

YouTube, PlayStore and a lot of other Site and Apps working now.

Lost the focus on Update because the Server testing need a lot of time.

At 3 AM GMT +1 (6 hours from now) everything will work as expected.

Thanks again for being patient.
[Android Software/Hacking General [Developers Only]] MrT69:
Right now it's half past 6 in the morning here in Germany and I'm on the way into the office. I will come back to you this evening and I want to make some tests.

If it's OK for you I will send you Whatsapp or Telegram contact which is a bit faster than the communication here.
[Android Software/Hacking General [Developers Only]] MrT69:
Important Anouncement

1. False Postitive Support

The support solution "sending false positive" by mail is not working as expected. My mail system block to many mails and I can't reduce the security. Either I'm to stupid or it's not possible. Don't know what's going wrong but it's not possible to complete disable this.

I will release a website where you can commit false/positive ASAP. It will not be a pretty solution but a working one.

2. HOSTS File in progress

For several reasons I decided last night to support HOSTS files within the future. I guess during the weekend I will find a solution to provide a secure solution for you.

If I would extract the entire Database to a HOSTS file and clean it up this might be not the best Idea. This file would have a size of 4.8GB. The next problem is the hosting space. If someone of you is able to help - let me know.

3. Website of keweon

The website is almost done. I will release the german website and the english translation will need a few additional day's. It's not my english. ;) A good friend will help to translate it.

If you are interested to help and translate it into other languages than german or english it would be a dream. Think about it and more will comming soon.
[Android Software/Hacking General [Developers Only]] problemathic:
when will be the release of the hosts file bro. cant wait for it.
[Android Software/Hacking General [Developers Only]] MrT69:
Hey Mr. Impatient ;)

I guess this is what you are waiting for. I have no clue if this is enough or if this is to less.

Give it a try and let me know when you have checked it. If you have in addition the keweon Root Certificate installed you will be double protected.

Comments, recommendations and all other things are welcome. If something is not woking - let me know.

Would be impressed if it's working at the first shot ;)

Policy and terms of permissions:

I give a s*it on it. Do whatever you want to do. If you think to change the IP Address, feel so free and do whatever you want to do.

FOR ALL DEV's:

It would be an honor to me if you use it. Please wait the next 2 weeks until every error is removed. If you see any error, let me know.

FOR ALL OTHER's

Enjoy it & do whatever you want.
[Android Software/Hacking General [Developers Only]] problemathic:
wowow. bro paste this in the OP for everyone else to know :) this is great now keweon running also in hosts. nice. by the way bro, thank you very much for this and for the endless efforts you have done to us. forever be remembered.

---------- Post added at 11:22 PM ---------- Previous post was at 11:11 PM ----------

1st reboot a bit laggy bro but now all is fine ? adless browsing now.
[Android Software/Hacking General [Developers Only]] MrT69:
Try to reduce it to less entries the next time. ;)
[Android Software/Hacking General [Developers Only]] problemathic:
no bro. more entries means good right? i like it this way. better than this to have ads ?
[Android Software/Hacking General [Developers Only]] MrT69:
This is only because of you!

And I hope it will become stronger.

Million time thanks to all of you.

Million times thanks to XDA.

https://m.youtube.com/watch?v=6hgIpfw8PL0​
[Android Software/Hacking General [Developers Only]] Ch4t4r:
Using the hosts file on non-root Android

On rooted Android devices or non-Android devices (like your custom DNS server using PiHole for example..) it's quite easy to use the supplied host file.

I'm going to focus on using the hosts file on a non-rooted Android device here using the DNS Changer app.

Download the app.

Download the hosts file somewhere to your device

Unzip the hosts file

Join the beta program in the Play Store (scroll down in the Play Store entry) or download the latest dev version here

(Skip this if not using the Play Store variant) It might take a couple of minutes before the Play Store will download the Beta version for you, so please wait..

Open the app

Head to the settings, scroll down and click on 'Advanced Settings' (the last entry)

Enable the advanced settings + the 'local rules' setting

Go back to the main menu

Click on 'Rules' in the side navigation bar

Click the Gear icon in the bottom left corner, then click on '+' for a new entry

Click 'Import' in the dialog

Select the hosts file in the dialog opening

Click on 'done'

Lean back and wait...

If you now start the app the hosts file will be used (only when the app is running [the dummy VPN is connected]).)

Of course you are also able to import any other hosts/dnsmasq/adblock file this way (MOAB for example, or someonewhocares)

As this is a beta version please inform me of bugs/requests (the features is tested on my devices but Android behaves very differently from device to device) - you can always reach me at support@frostnerd.com. Thanks.

Daniel
[Android Software/Hacking General [Developers Only]] storm68:
Tried as per your post above. Blocked everything. Lol. Wouldn't load pages etc....
[Android Software/Hacking General [Developers Only]] Ch4t4r:
Would you be so kind and head to the settings, enable debug there and send me the logs after some time? And do you have a connection when disabling the 'local rules' feature in the advanced settings?
[Android Software/Hacking General [Developers Only]] storm68:
Yes I connect just fine. Something somewhere is blocking access. As if it's putting up a firewall. I'll try to get a log for you when I get a chance. Thanks
[Android Software/Hacking General [Developers Only]] notjoken958:
Could not connect to anything using this method. Unchecked rules in advanced settings and turned off advanced settings, able to connect to web sites again.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Yup, its the app, not the host file. I just turned the advanced settings on (didn't put any host file) & afterwards cant connect to fb/saavan, etc. & Turned it off. Boooom!! ?
[Android Software/Hacking General [Developers Only]] Ch4t4r:
Well, like I said it's a beta feature thus I would be very glad about every kind of feedback I get :D The app grew about 40% with this update (which is a lot of code).

The rules feature is very experimental as it uses low level APIs - I tested it on my devices and emulators though. But as we all know Android is very dependent on the manufactureres implementation.
[Android Software/Hacking General [Developers Only]] MrT69:
Can absolutely confirm this.

Full Adblock on Amazon works on HTC and within the Browser. Exactly the same settings on Samsung device and the Amazon App on Samsung devices will not longer work.

Interesting feature ;)
[Android Software/Hacking General [Developers Only]] MrT69:
TO ALL THE HACKERS WHICH TRY TO

ATTACK MY SERVERS THIS MORNING

​

Can you do me a favor and wait until the entire system is moved to Amazon? I don't want to extend the security to the first weeks because this will cause troubles to the users.

Your attack will hurt the wrong side. Google, Microsoft, Facebook, Yahoo & all the entire global Ads & Malware Industrie would love it if you break everything down. Please think about this. You will do only them a big favor.

I hope you can wait because you are acting for the wrong side if you attack keweon.

Thanks a lot!!
[Android Software/Hacking General [Developers Only]] problemathic:
the f. the hell happen bro? any damaged been done?
[Android Software/Hacking General [Developers Only]] MrT69:
It seems it was a failed amplification attack. 1,6 GB Traffic within seconds. And the server has done a reboot because of to much traffic. My security works ?

The servers are to weak for almost everything. Even when I want to log it's technically not possible at the moment.

But it seems it's OK for now. Hope they don't do it again.

Damn. I could just cry.
[Android Software/Hacking General [Developers Only]] problemathic:
****ty bastards. why would even they bother attacking those who re helpful to the community. maybe they belong to adblock companies bro.
[Android Software/Hacking General [Developers Only]] MrT69:
PLEASE SHARE THIS

OMG Botnet infection is actualy causing a lot of troubles. After a deeper investigation I have had found this domains where the OMG crap is acting:

buxhere.com
carschina.com
dropthishost-01965d1e-6399-4aed-8843-b15754cdfd0e.biz
dropthishost-09b92f57-2f16-42b7-a72f-a56c4fc96578.biz
dropthishost-25bdefb9-7524-4e82-aaca-4d6349709e81.biz
emnotifying.com
fdpgb3.com
host-domain-lookup.com
host127-0-0-1.com
host192-168-1-2.com
iprotectya.com
ivedottedya.com
kerrabez.com
mm.my
nsvjn987.com

Extend your HOSTS files wherever you have some IoT connection. Use it, share it & if you have further informations let me know this please.

Fortinet has already done a deeper investigation done on this. CLICK HERE

Thanks to all and sorry that I can't offer an RSS Feed for all of this. Hope you enjoy this anyway.

EDIT:

I recommend to block the IP Address 54.234.123.22 and 188.138.125.235 by inbound/outbound
[Android Software/Hacking General [Developers Only]] problemathic:
bro hosts ?
[Android Software/Hacking General [Developers Only]] MrT69:
Silicon Valley Scheduled Maintenance

2018-03-06

Event Type: Network Upgrade

Start Time: 2018-03-06 13:00:00 UTC

End Time: 2018-03-06 15:00:00 UTC
[Android Software/Hacking General [Developers Only]] problemathic:
bro need your module on supersu ? for my little brother running kitkat. magisk not supported! do you have any for supersu?? id be glad to test it out.
[Android Software/Hacking General [Developers Only]] MrT69:
Sorry, I have no additional modules. I guess you need to ask someone else.

I can only recommend to use a "resolve.conf" - but I have no idea if this is working. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
SERVICE UPDATE

Unfortunatley my mail system is to save for sending mails from every account. I was searching an interim solution for providing you an option for false/positive or sites which needs to be unlocked.

If you have seen sites which needs to be blocked than mail a TEXT file or an attachment to this address:

Blackli.wovqusywx173aog9@u.box.com

If you see some false/positive than send the TEXT file to this address:

Whiteli.g2o05glywjqt8zfy@u.box.com

I hope you know box.com where it is possible to send files by mail. At the moment I can't offer a better solution because on the one hand you need to have an easy option to send this to me and on the other I need to prevent that someone thinks to do some stupid things.

I was testing a website where you can submit all this problems but right now it's not working as it should. Thinking about file size, spam, virus, security and all of this things. Nothing is working without an own server and this is currently to expensive for me.

My provider also can not disable the security for only this mail address or he doesn't want it but for me it's important to offer you an working solution.

WHY?

I have adjusted the algorythm for filtering. I still need some tests but it seems I can activate this on this Friday or latest at Sunday evening.

A lot of things will change after the weekend:

- more global ads provider

- deeper local ads blocking (a lot of countries are still in progress)

- harder filter for JAPAN and AUSTRALIA

- Crypto (Ads) Blocking for Desktops (now detectable)

- Crypto (Ads) Blocking on Mobile Devices

- more fake software (JAVA, FLASHPLAYER, etc.)

- less tracking than now

- less ads than now

- more privacy

- additional Spyware and Malware blocking

- higher Ransomware protection

- extended the AntiVirus engine

- deeper investigations

- higher security

- and round about 20 additional things I can't remember right now

I also started working on Microsoft Windows to block things we don't want. This is a very tricky thing because I don't want to block essential things as like as Windows Updates and other important things.

The website is in review because a few people told me that my wording is to agressive for some people. I know this because political correctness is not my favorite thing.

Damn... can't tell you how much I hate web site coding. ;)

Anyway, get prepared, copy and share the support mail addresses. The procedure is the same as you allready know it right now.

1. Find somthing what's going wrong

2. Copy and paste the URL or Address into a TXT file

3. Separate it by a '#' sign and add a tiny comment

4. If it's false positive and you want to open it than send the TEXT file to:

whiteli.g2o05glywjqt8zfy@u.box.com

5. If you see something which needs to be blocked send the TEXT file to:

blackli.wovqusywx173aog9@u.box.com

Only TXT files and ZIP files can be processed. Any other file will be deleted.

Don't copy the content to the mail body. The mail will be not stored or read.

Only the attachments will be processed.

Hopy you enjoy this and sorry for all the troubles.
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
Bro here it is. I have tested it on my device. Just flash it through recovery and start using it via terminal. With this one there's no need to reboot the device after changing the dns ?. Also the certificate is pre-included so no need to install that separately. Let me know if you find any bug.
[Android Software/Hacking General [Developers Only]] problemathic:
wooh. thank you so much bro. will test this now. is this updated bro? our brother mrt69 got recently had a server update. and again thank thank thank you so much.

---------- Post added at 11:21 PM ---------- Previous post was at 11:05 PM ----------

bro 1st attempt fails. it says dns have changed succesfully but when i pinged i.hate.ads it says unkown host. tested on dns leak test and showed my carrier provider then i rebooted my phone. run su and keweon again and boom it says default :laugh: and choosed again a server now its working. maybe a bug??

---------- Post added at 11:26 PM ---------- Previous post was at 11:21 PM ----------

i enjoyed this journey of blocking ads bro.
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
Hmmm ..... That's new !! Inform me if something like that happens again.
[Android Software/Hacking General [Developers Only]] problemathic:
sure bro. after i ported another rom for this device. but now its working fine now. 1st attempt dont know what happened there but again thank you for making this work on as a recovery flashable not just a magisk module. youre getting better bro.
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
Haha ... Thnx a lot :good:
[Android Software/Hacking General [Developers Only]] MrT69:
Sydney Scheduled Maintenance

2018-03-08 by vutr.com

Event Type: Network Upgrade

Start Time: 2018-03-08 17:00:00 UTC

End Time: 2018-03-08 18:00:00 UTC
[Android Software/Hacking General [Developers Only]] J4jks:
many sites are showing certificate error eg., DDG, searx.me

I'm using the magisk module to change to Keweon, I've root certificate also installed

Refreshing sometimes solves this issue but sometimes pages doesn't load.
[Android Software/Hacking General [Developers Only]] MrT69:
Make a list and send them to me for Whitelisting.

Copy all into a TXT file and mail this file to this address and the next day it's working.

Whiteli.g2o05glywjqt8zfy@u.box.com
[Android Software/Hacking General [Developers Only]] problemathic:
okay. for everyone else new on this and scrolling for comments. I TELL YOU this is the best solution out there. not perfect but well because there is nobody perfect. RECOMMENDED!! USE THIS. ROOT OR NOT ROOT.
[Android Software/Hacking General [Developers Only]] GamaShani:
Hello to all, I recently run a test on www.dnsleaktest.com

to confirm whether I am able to use the keweon properly or not.

The results are below..

Could someone tell me that does I am able to reap all the benefits of Keweon or something else is to be done by me?

By the way, I was also getting the ping response properly as mentioned in the post previous to this from i.hate.ads ..
[Android Software/Hacking General [Developers Only]] problemathic:
your good to go bro.
[Android Software/Hacking General [Developers Only]] MrT69:
The announced Update is not in place. For technical reason it was required to move it to the next weekend.

A short circuit causes that my Laptop & TV is broken and 2 Test Server are blown up because of this.

It was a real frustrating weekend and this week will become a damn expensive week for me.

:(

EDIT:

If you send some false/positiv or somthing like that to White/Blacklist this will not procesd the next day's.

Latest on Thursday everything should be fine again.
[Android Software/Hacking General [Developers Only]] MrT69:
New Jersey Scheduled Maintenance

Start Time: 2018-03-14 09:00:00 UTC

End Time: 2018-03-14 11:00:00 UTC
[Android Software/Hacking General [Developers Only]] problemathic:
Bad day bro. But we all here. All that supports keweon.
[Android Software/Hacking General [Developers Only]] MrT69:
The Hard Disks and all data are fine. A good reason for an Hardware upgrade. 2 HP Z820 are already ordered. They are used parts and so damn incredible fast.

All source codes are triple backed up. From this point of view there is no reason for a Code Red Alert ?

Most important is that my servers still working. At the moment it's a bad feeling because I have no real access to them and the only Internet access is by mobile Phone. Strange thing to be almost offline.

2 more days and I'm back again. ?
[Android Software/Hacking General [Developers Only]] levone1:
Hi. Trying to use via vpn on Sailfish os. I entered server information and imported certificate, but when i try to connect, i need to fill in 3 fields, (screenshot). Do you know what goes there?

Thanks
[Android Software/Hacking General [Developers Only]] levone1:
update - got it working using SecureFishnet app... Thanks

upsate - actually not. .. Going to keep working on it.