This is the ASN script by Mike Kuketz and maloe. It is used to block the IP address spaces of Google and other companies. Originally it was developed for IPFire. However, it also works with AFWall and iptables.

I also have a modified version for macOS pf if anyone needs it.

Terminal:

Download:

curl -O https://notabug.org/maloe/ASN_IPFire_Script/raw/master/asn_ipfire.sh
chmod +x asn_ipfire.sh

Run:

./asn_ipfire.sh --add "Google,Facebook,Twitter,Oracle,Acxiom"

If it is to be used with iptables then --iptables must be used instead of --add.

For AfWall use --afwall.

Any major company can be selected by typing in the appropriate name as shown here.

At the end the output file will be generated.

  • coffeeClean@infosec.pub
    link
    fedilink
    English
    arrow-up
    1
    ·
    9 months ago

    Useful but important to stress: root required.

    It’s a shame because I think in principle root should not be required. My unrooted device uses Netguard and Orbot to force traffic to be routed over Tor. A pro version of Netguard could support filtering at the firewall. Or alternatively, Orbot supports an outbound proxy. So I wonder if a Google-blocking proxy could run without root and Orbot could channel the traffic through it.