[HOW TO][NO-ROOT] Blocking ads without additional software in Android 9.0 Pie - Samsung Galaxy Note 9 Guides, News, & Discussion

The next method allows us to block ads in Android without to installing any additional software. It's working on any android device working with Android 9 Pie and above. ​
How to do it:
Go to Settings => Connections => More connection settings => Private DNS.
Check Private DNS provider hostname
Then you can use some of the rest. The first one is recommended.
dns.adguard.com
dns-family.adguard.com
dot-de.blahdns.com
Another DNS that you can check is NextDNS. It's free to use and provide some nice features on their website.
How to block ads in Google Chrome
The DNS method works also for Google Chrome, but you need to change something to make it work. ​
Open Chrome, type in chrome://flags
Then search for async DNS resolver (#enable-async-dns) and choose disabled in the drop-down menu. Otherwise, chrome could use a built-in DNS resolver which does not block ads.
Source: Reddit

is there that option on oreo??

mefistoreyon said:
This allows us to block ads system-wide (for apps without built in DNS resolver) without installing additional software or plugins or anything. Getting started is really easy:
1.) Open Settings --> Connections --> More connection settings --> Private DNS
2.) Check Private DNS provider hostname
3.) depending on what you want to enter either:
dns.adguard.com
dns-family.adguard.com (To block adult sites)
dot-de.blahdns.com (small hobby project with adblock)
These are secure DNS servers that have integrated ad blocking.
4.) Press Save & enjoy ad-free browsing.
5.) An extra step for Chrome users:
Open Chrome, type in chrome://flags
search for async DNS resolver (#enable-async-dns) and choose disabled in the drop-down menu. Otherwise, chrome could use a built-in DNS resolver which does not block ads.
Source: Reddit
Click to expand...
Click to collapse
So this is only for browsers? Not in apps ad blocking?
Sent from my SM-N960U using Tapatalk

System-wide; it blocks ads in apps, I've tested some apps and it worked.

If i wanna use OpenDNS, what hostname do I use?

T-mobile
Sm-n960u
Oreo 8.1.0
When I open more connection settings there is no option to add DNS, there is only am option to add VPN. What firmware are you using to do this without using an additional app?

Works like a charm... Thanks for this!

mangohorse said:
Works like a charm... Thanks for this!
Click to expand...
Click to collapse
What firmware are you on? A Google search says it's in pie, I have not found it for oero.

Everything perfect running on N9600 adroid pie

Can I trust this DNS? I mean, using it means literally everything you do on your phones goes through that server. Just curious.

It does not work in Samsung Internet browser, but you can always turn on ad blockers in the browser.

How is AdGuard dns with Bixby?
I uninstalled the AdGuard app because it prevented Bixby from working on my watch.

gwest04 said:
What firmware are you on? A Google search says it's in pie, I have not found it for oero.
Click to expand...
Click to collapse
It doesn't work on Oreo. Only Pie.

gwest04 said:
What firmware are you on? A Google search says it's in pie, I have not found it for oero.
Click to expand...
Click to collapse
Device: SM-960U1
Build: PPR1.180610.011.N960U1UEU1CSB3

It works properly, thanks!
There is an option of "Automatic", do you know where it is pointed to?

Work's for me thanks
I tried the dns.adguard.com one

Using dns.adgaurd.com seems to block random images in Twitter.

K-alz said:
Can I trust this DNS? I mean, using it means literally everything you do on your phones goes through that server. Just curious.
Click to expand...
Click to collapse
Network admin here. DNS simply translates human-friendly domain names such as www.google.com to IP addresses. Whenever an app needs to communicate with a website or server or something on the internet, via a domain name, it first asks a DNS server what the IP address for that domain name is.
That's literally the only data that will go to those servers - "hey what's the IP address of www.xyz.com?", "Here you go, its 123.234.56.78"
The worst that could happen is that you could possibly be redirected to malicious sites, but adguard is reputable so that's not likely to happen.

brc6985 said:
Network admin here. DNS simply translates human-friendly domain names such as www.google.com to IP addresses. Whenever an app needs to communicate with a website or server or something on the internet, via a domain name, it first asks a DNS server what the IP address for that domain name is.
That's literally the only data that will go to those servers - "hey what's the IP address of www.xyz.com?", "Here you go, its 123.234.56.78"
The worst that could happen is that you could possibly be redirected to malicious sites, but adguard is reputable so that's not likely to happen.
Click to expand...
Click to collapse
Well, thank you, sir. I've learned something new today. Thought everything goes through the DNS. Thank you, again.

I tried ad guard but it seemed to stop me from sending and receiving mms. I'm on t-mobile

Related

What VPN service do you use?

Hey community, what VPN service do you use and/or recommend for our phones that is preferably free, which maintains reliability and speed. I have looked into a few and frootvpn is close to the top of my list. I use it for security in downloading and access behind wifi restrictions. Thanks.
mrsamtee said:
Hey community, what VPN service do you use and/or recommend for our phones that is preferably free, which maintains reliability and speed. I have looked into a few and frootvpn is close to the top of my list. I use it for security in downloading and access behind wifi restrictions. Thanks.
Click to expand...
Click to collapse
I wouldn't recommend a free VPN for fears of bandwidth restrictions, ads and logging concerns. To better understand what to look for when selecting a VPN read this along with this for for android VPNs
Do share which you decide to go with though. Always good to have actual user reviews.
I've been using PIA (Private Internet Access) for a year now. It has good speed, fairly inexpensive, and it can be installed on up to 5 devices.
nicholb said:
I've been using PIA (Private Internet Access) for a year now. It has good speed, fairly inexpensive, and it can be installed on up to 5 devices.
Click to expand...
Click to collapse
Thanks. They seem like a good choice along with ipvanish.
I personally VPN to my house, where I have a Meraki Z1 firewall installed. They provide a free dynamic DNS address, so I don't have to worry about my IP changing.
dc/dc said:
I personally VPN to my house, where I have a Meraki Z1 firewall installed. They provide a free dynamic DNS address, so I don't have to worry about my IP changing.
Click to expand...
Click to collapse
Wouldn't that be a static IP address? By definition, dynamic IP addresses change.
dc/dc said:
I personally VPN to my house, where I have a Meraki Z1 firewall installed. They provide a free dynamic DNS address, so I don't have to worry about my IP changing.
Click to expand...
Click to collapse
Yeah I do that too but for instances where you don't want your isp to know what your doing online it helps to have extra layer of anonymity.
mrsamtee said:
Hey community, what VPN service do you use and/or recommend for our phones that is preferably free, which maintains reliability and speed. I have looked into a few and frootvpn is close to the top of my list. I use it for security in downloading and access behind wifi restrictions. Thanks.
Click to expand...
Click to collapse
I use Private Internet Access. They make an app for the Android too. On my computer I use it for torrent. Yes, up to 5 connection allowed.
After you are done, go to dnsleaktest website to see if you can really can be found. If not, then you are safe.
Air vpn.
Sent from my SM-N910T using xda app-developers app
RiverCity.45 said:
Wouldn't that be a static IP address? By definition, dynamic IP addresses change.
Click to expand...
Click to collapse
No. Comcast uses DHCP, so the IP address assigned to my Z1 can and does change on occasion. Meraki assigns a dynamic DNS address that has the name of my network plus some random letters and numbers on the meraki.com TLD, which allows me to VPN to that URL instead of having to remember the IP address.
mrsamtee said:
Yeah I do that too but for instances where you don't want your isp to know what your doing online it helps to have extra layer of anonymity.
Click to expand...
Click to collapse
Fair enough. I usually only use mine to bypass QoS at hotels or better secure my connection at a public hotspot. Also, some guest networks that have content controls, such as the ones I build, block public VPN services like Strong VPN or Hotspot Shield but allow enterprise ones such as Meraki.
I too use Private Internet Access. $40 a year is pretty cheap for peace of mind when online. I didn't know I could install on more than one device. Thanks!!

DNS over TLS in Pie

Android 9 supports "Private DNS" which uses DNS-over-TLS to provide better security and privacy, I set my X4 to "dns.google" instead of "automatic", as per this article: https://android-developers.googleblog.com/2018/04/dns-over-tls-support-in-android-p.html
- looking for some insights/comments on a subject of practical benefits of this feature.
Google private DNS setup: https://developers.google.com/speed/public-dns/docs/using#android
A DNS over TLS connection is encrypted in the same way HTTPS is. It can also sometimes be quicker than the default DNS (correct me if I'm wrong about this). However, airports and some other places do not allow external DNS, forcing you to turn it off.
MisterFribble said:
A DNS over TLS connection is encrypted in the same way HTTPS is. It can also sometimes be quicker than the default DNS (correct me if I'm wrong about this). However, airports and some other places do not allow external DNS, forcing you to turn it off.
Click to expand...
Click to collapse
Good to know that, I was setting up my new router at home the other day, so I went through some web sites getting some info and ended up changing all DNS/iPvs etc..., that's how I stumbled upon that 'tls' thing and was wondering if it has any merit to it. My desktop browser(Firefox) used to be very slow and now it's pulling pages really fast after changing to Google DNS from random default. Am suspecting my cable co. has been monitoring my web traffic, slowing it down.
With dns.adguard the phone has functional add blocker, tried several free apps from the play store and it seem to filter adverts out pretty good, no standalone app just the private dns set up:
mzsquared said:
With dns.adguard the phone has functional add blocker, tried several free apps from the play store and it seem to filter adverts out pretty good, no standalone app just the private dns set up:
Click to expand...
Click to collapse
I agree. But it still lets a few ads though. So if there is a better dns-over-tls alternative to adguard I'm open to trying it.
Nezzox said:
I agree. But it still lets a few ads though. So if there is a better dns-over-tls alternative to adguard I'm open to trying it.
Click to expand...
Click to collapse
You can try adguard.apk. I like just the simple dns thing. Here is a link w/ a lot of information about it, see all the comments below the article:
https://www.androidpolice.com/2018/...wn-dns-service-and-it-works-with-android-pie/
mzsquared said:
You can try adguard.apk. I like just the simple dns thing. Here is a link w/ a lot of information about it, see all the comments below the article:
https://www.androidpolice.com/2018/...wn-dns-service-and-it-works-with-android-pie/
Click to expand...
Click to collapse
Well, I used blokada before. The point for me is to find something that enables me to not use a apk. The ideal solution would be to have a more aggressive dns-over-tls adblocking since it's possible in Android pie. I feel that adguard is too allowing and does not fair well in blocking ads delivered from Facebook or local ads.

Open WiFi with login (e.g. airport)

Whenever I want to connect to an open WiFi that requires a login afterwards (e.g. at airports etc.), I fail to get redirected to the corresponding page. I have tried to copy the link and open it in a browser but it didn't help. See screenshot attached.
flel said:
Whenever I want to connect to an open WiFi that requires a login afterwards (e.g. at airports etc.), I fail to get redirected to the corresponding page. I have tried to copy the link and open it in a browser but it didn't help. See screenshot attached.
Click to expand...
Click to collapse
You didn't provide important info - are you on stock MIUI and are you using any ad blocker?
If you do, then whitelist:.
http://connect.rom.miui.com/
Every time you want to login to a hotspot, MIUI wants to post something to the given site.
We could only guess what kind of info it takes from the phone and sends to China
i used the workaround to go to browser manually and typed 1.1.1.1
that worked in 95% of the cases
zgfg said:
You didn't provide important info - are you on stock MIUI and are you using any ad blocker?
If you do, then whitelist:.
http://connect.rom.miui.com/
Every time you want to login to a hotspot, MIUI wants to post something to the given site.
We could only guess what kind of info it takes from the phone and sends to China
Click to expand...
Click to collapse
Yes, stock miui and no adblock. How to whitelist?
flel said:
Yes, stock miui and no adblock. How to whitelist?
Click to expand...
Click to collapse
If you don't have an ad-block (e.g. dns66 does not require root) and you're not using private DNS, then access to http://connect.rom.miui.com
should be allowed
Try to open manually (in browser) that address from the phone, compare when you are opening from a PC
If it opens, you will see Welcome to nginx as on the screenshot.
However, it can be that ISP or something on the Net blocks the access
zgfg said:
If you don't have an ad-block (e.g. dns66 does not require root) and you're not using private DNS, then access to http://connect.rom.miui.com
should be allowed
Try to open manually (in browser) that address from the phone, compare when you are opening from a PC
If it opens, you will see Welcome to nginx as on the screenshot.
However, it can be that ISP or something on the Net blocks the access
Click to expand...
Click to collapse
I may be a bit slow here but I dont see how this would fix the problem that I am not forwarded to the corresponding login page.
flel said:
I may be a bit slow here but I dont see how this would fix the problem that I am not forwarded to the corresponding login page.
Click to expand...
Click to collapse
Please try and we will see then if your problem is caused by connect.rom.miui.com being blocked
Stock MIUI wants to go 'home' to post some data (we don't know what data and what they do with, so IT IS scare) every time right before going for the loging page for hotspots
Of course, if you don't want to allow posting the data to its server, you keep their server site blocked, but you will not be able to open hotspot login pages from MIUI stock
See also post #0:
https://forum.xda-developers.com/mi-9t/how-to/miui-sends-info-to-connect-rom-miui-com-t4050485
and:
https://www.reddit.com/r/Xiaomi/comments/bk6viy/redmi_note_7_issues_with_public_wifi_networks/
I didn't connect my collage WiFi
Please solve this issue
Rog345 said:
I didn't connect my collage WiFi
Please solve this issueView attachment 5861945
Click to expand...
Click to collapse
Read yourself the screenshots you posted.
See connect.rom.miui.com and read the previous posts
You should solve yourself by either:
a) disable all adblockers you have, it might be also that your private DNS is blocking the access
Or
b) if you have the ad-blocker like AdAway, DNS66, Blokada or so, whitelist connect.rom.miui.com
You should be able to open the 'page' https://connect.rom.miui.com
See the whitelist screenshot from AdAway
---
But on the other side, be aware that apparently your Xiaomi phone always posts 'some data' to that server
For that reason people who maintain hosts sources for adblockers, put that domain to be blocked
Hence it's up to you, you either want to protect yourself from the phone sending 'some data' (who knows what) to that server - and not being able to connect to the public WiFi access like yours
Or
Allow access and don't care about what data your phone sends every time
Or
Buy another phone, not MIUI, or unlock Bootloader and install some custom ROM instead of the stock MIUI

chromecast TV DNS options?

Is it possible to change the DNS server to such as nord dns to bypass region blocks? I see I can load a vpn to it easily but finding the right server is kinda annoying every time. So it's either this or buy a dedicated vpn up from nord.
does It not take the default from your dhcp server?
Go into network settings, choose static and configure everything there
xqz said:
Go into network settings, choose static and configure everything there
Click to expand...
Click to collapse
In spite of using static ip and setting up DNS numbers provided by my smartdns provider content is not getting unlocked. I think Chromecast is still bypassing the given DNS servers and reaching across to google DNS servers.
Google has been getting pretty overbearing when it comes to DNS lately. They're really pushing for DNS to be served over HTTPS, which makes sense from a "bypass port 53 redirects" perspective, but is terrible from a privacy and control-your-own-destiny perspective, since it basically allows the DNS to be addressed at the application level rather than the system level.
Not that this couldn't be done before, just that its now becoming mainstream, which is nasty.
So basically, what it is going to take to make it *better*, but not perfect, is to implement some fun stuff at the level of your ROUTER;
1) Block port 443 to all known DNS-over-HTTPS public servers; https://en.wikipedia.org/wiki/Public_recursive_name_server
2) Filter and redirect all requests to public servers on port 53 to DNS server of your choice.
Definitely not perfect, because nothing will stop an application from going to an unknown DNS-over-HTTPS server on the public internet.

Question allow certain websites with Private DNS

i set dns.adguard to get rid of stupid adds
but when i try to open my own page its also blocked
how i can allow certain pages?
speedspeedspeed said:
i set dns.adguard to get rid of stupid adds
but when i try to open my own page its also blocked
how i can allow certain pages?
Click to expand...
Click to collapse
You can add your pages/app for whitelist
search google "adguard for android exception list"
hi
i use private dns in miui
i odnt use adguard
anyway i found temporary solution in opera i can surf with build in vpn enabled and then its working

Categories

Resources