OpenDNS needs a new 'Ad Network' category to filter out 'Malvertising' Attacks

Comments

13 comments

  • Avatar
    mattwilson9090

    I do agree that no existing category seems to cover malvertising or even the more general category of malware.

    How is this category different from the already existing "Advertising" category? Or are you wanting to be able to block all advertising, not just Malvertising? Why not just name this name category that you want Malvertising to make it clear that it's separate from legitimate advertising? Or how about a more general malware category that includes such things as malvertising?

    0
    Comment actions Permalink
  • Avatar
    disk.doctor

    Hi, thanks for your response.

     

    How is this category different from the already existing "Advertising" category? 

    > In Umbrella, there is no such 'Advertising' category.

     

    Why not just name this name category that you want Malvertising to make it clear that it's separate from legitimate advertising?

    Because Ad Networks distribute 'legitimate' advertising as well as malicious ones.

     

    Or how about a more general malware category that includes such things as malvertising?

    There is already a 'Malware' category in Umbrella.

     

    I get the feeling that my post probably needs to be moved to a different forum location. Mods - help?

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Yes, there is an advertising category. It exists for all OpenDNS services, including umbrella, and anyone can vote to categorize a domain as belonging to the adversting category. However, the advertising category is not available for blocking. So, given that the advertising category *does* exist in Umbrella, how is what you suggested different from it?

    It sounds like your concern is in using OpenDNS to block all advertising, not just malvertising. If that's the case then the category you want already exists, it's called Advertising. OpenDNS employees have stated multiple times in this forum that there are no plans to allow blocking of the advertising category.

    I'm not sure what other forum this thread would belong in, but if you are using Umbrella you already have the ability to block malware, including malvertising.

    0
    Comment actions Permalink
  • Avatar
    disk.doctor

    Hi again mattwilson9090,

    thanks for your comment. 

     

    > It exists for all OpenDNS services, including umbrella

    > So, given that the advertising category *does* exist in Umbrella, how is what you suggested different from it?

    No, this category does not exist in Umbrella.

     

    Here's the 'A' categories

    Academic Fraud
    Adult Themes
    Adware
    Alcohol
    Anime/Manga/Webcomic
    Auctions
    Automotive

    > However, the advertising category is not available for blocking. 

    Hence the creation of this 'idea'.

    > It sounds like your concern is in using OpenDNS to block all advertising

    Yes. This is the idea. You cannot block malvertising by domain alone - you have to block all advertising (both legitimate and malicious) across the board. The user can make their own decision. There are already many 'adblock' browser extensions, so offering customers the ability to do this at the DNS layer has it's benefits.

     

    > OpenDNS employees have stated multiple times in this forum that there are no plans to allow blocking of the advertising category.

    I wasn't aware of this. Links?

    0
    Comment actions Permalink
  • 0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Yes, the advertising category DOEs exist for all of OpenDNS, including Umbrella. See here https://community.opendns.com/domaintagging/categories#suggest for an explanation of all categories, including advertising, and a link to suggest new categories. And as I've already said the category exists (even for Umbrella) for domain categorization (I just looked). You will *not* see Advertising available for Umbrella (or any other OpenDNS product) as a category for blocking, as I said in my previous post, and as is spelled out in the links both rotblitz and myself provided you.

    I do feel that this entire thread has been misleading. The title and your initial words indicated that you wanted to block malvertising (a good thing in my opinion) but in reality you just wanted to block advertising, something that OpenDNS has already stated multiple times that they will not do. Read the forum thread that rotblitz linked to as an explanation of why they won't do that.

    Adblock extensions are something completely different than domain filtering via DNS and allow the kind of granularity and whitelisting that domain level blocking cannot. As OpenDNS has suggested Ad Block Plus is an excellent (and free) product, and there are several recent newcomers to the market, but I haven't yet had a chance to look into them so I won't mention them here.

    0
    Comment actions Permalink
  • Avatar
    trickyt57
    I am using the OpenDNS website blocking to block specific domains such as doubleclick.net, googleleadservices.com, appsflyer.com, googlesyndication.com adnxs.com, googletagservices.com, criteo.com, and about 10 others. I am surfing the net at normal speed with no noticible problems. I just get the webpages minus the ads. Sometimes the space where the ad used to be is just a blank area. Sometimes the text is rendered to occupy the now empty space. Although the OpenDNS mods state here that blocking advertising would spoil the surfing experience, or slow it down, I can not substantiate that claim, as my surfing seems normal. I can't see any reason why I wouldn't continue to block advertisers. The only thing I can think of is google searches. Let's say you type "cheap hotels". As you know, the top two or three results are often links to sites which have paid to be at the top of the list. Clicking on one of these links takes you to a dead end. (Because I blocked googleleads.com). That's no problem, because Google identifies such links by putting the word "Ad" highlighted in green in front of the link. I just skip down 3 or 4 lines and usually see the same websites but without passing via the advertisers referral site. In reality this means I get to the website faster. If you ever visited a newspaper site, you will have seen that every story is littered with ads, at the top, bottom, left , right, and even in the middle of the story. It's so much more pleasant to visit the same newspaper site minus those distracting ads. Clearly there is big money involved here. If I worked for OpenDNS, I would demand that Google pay me money to NOT have an advertiser blocking category. On the other hand, I would personally be willing to pay OpenDNS a few dollars a month to have that option. I wonder which would be more profitable?
    0
    Comment actions Permalink
  • Avatar
    jagan.indian9

    Could you please list the ad domains you are blocking?

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Whom do you ask this?

    0
    Comment actions Permalink
  • Avatar
    jagan.indian9

    trickyt57

    0
    Comment actions Permalink
  • Avatar
    trickyt57 (Edited )

    Hi Jagan, I have  listed a number of domains that I am blocking in my post above.   I think it would be best for you if you choose which domains to block by yourself.  When you see an ad which irritates you, hover the mouse over the ad and you will often see the domain advertiser.  If you are using an ipad then touch and hold the offending ad and the link should pop up.  See the picture attached this post.  The domain I would want to block is webmasterplan.com

    0
    Comment actions Permalink
  • Avatar
    jagan.indian9

    Thank you, I have been doing the same,wanted to know if you had a predetermined list. Thanks again.

    0
    Comment actions Permalink
  • Avatar
    trickyt57

    As I mentioned, if I was Google or similar I would pay big money to companies like openDNS to NOT have an advertising blocking category.

    0
    Comment actions Permalink

Please sign in to leave a comment.