BSNL is inserting ads in websites, sending their users to malware sites through malware code injection

[JB701]

uBlock Origin seems to block that domain.

Do you have any extensions installed?

 

[iwantfreeinternet]

I have abp installed

 

[JB701]

ABP allows so called "acceptable ads" Adblock Plus now sells ads atleast by default.

I would suggest switching to uBlock Origin: uBlock Origin

 

[hemant]

Since bsnl mitm's http traffic and inserts ad scripts into served http responses, this is hard to completely block without vpns. To block their site hijacks (the 4 month rent waive ad etc), it's sort of enough to block all pkts from the relevant bsnl ad server. So adding something like below to openwrt firewall rules works for me.

iptables -A forwarding_rule -s 117.254.84.212 -j DROP
iptables -A forwarding_rule -d 117.254.84.212 -j REJECT

(got that server ip by wireshark; has stayed the same throughout for me, so I guess it's for everybody, but might be different for others on different lco networks). Note that putting that IP in hosts will not work - that server replies to any valid http request and since it's closer, its responses reach us before the original server's.

They also add scripts to every http page, which can be blocked by ad blockers.

 

[vishalrao]

Oh the irony...



Source

 

[Realme]

Since bsnl mitm's http traffic and inserts ad scripts into served http responses, this is hard to completely block without vpns. To block their site hijacks (the 4 month rent waive ad etc), it's sort of enough to block all pkts from the relevant bsnl ad server. So adding something like below to openwrt firewall rules works for me.

iptables -A forwarding_rule -s 117.254.84.212 -j DROP
iptables -A forwarding_rule -d 117.254.84.212 -j REJECT

(got that server ip by wireshark; has stayed the same throughout for me, so I guess it's for everybody, but might be different for others on different lco networks). Note that putting that IP in hosts will not work - that server replies to any valid http request and since it's closer, its responses reach us before the original server's.

They also add scripts to every http page, which can be blocked by ad blockers.

Any suggetsion how to safely do this on ONT, I sshd into it but they have very different iptables chain and I'm not sure if I should mess it up

 

---

[Nishant]

Used to get those BSNL Cinema ads on FTTH. Now they have started pushing third party ads

 

[Sushubh]

Why is Google One not using hsts

 

[Nishant]

I was equally shocked. I typed one.google.com and pressed enter.

 

[JB701]

Immunity Booster rofl