All services still bypassing via there apps

[IzumiSenaSora]

As Title says!
What can be done to block every way possible!
Even with block list only visiting via browser is blocked but via there apps?
Not really at all

[Bundy01]

In which configurations, which apps?
You're using the RPZ list with UNbound, right?

• Possibilities > Internal DNS connections: The Facebook app can use its own DNS servers or direct connections (via IP or protocols such as HTTPS/DNS-over-HTTPS), thus bypassing DNS-based blocks.

Can you disconnect the accounts on the apps to see?
Why are you blocking Meta if you use their apps? Is there a specific reason?

[IzumiSenaSora]

In which configurations, which apps? You're using the RPZ list with UNbound, right?

Yes

• Possibilities > Internal DNS connections: The Facebook app can use its own DNS servers or direct connections (via IP or protocols such as HTTPS/DNS-over-HTTPS), thus bypassing DNS-based blocks.

Can you disconnect the accounts on the apps to see? Why are you blocking Meta if you use their apps? Is there a specific reason?

I can't cause i don't use meta apps! &
my family and children's all getting addicted in this platforms!
So blocking is necessary!

[Bundy01]

1- Where did you install Unbound, and on which operating system?
2- Do the Meta connections originate from smartphones or computers?
3- Have you configured all devices so that their DNS resolves to Unbound?

[IzumiSenaSora]

1- Where did you install Unbound, and on which operating system? 2- Do the Meta connections originate from smartphones or computers? 3- Have you configured all devices so that their DNS resolves to Unbound?

1- Linux!
2- Depends! But most bypassing happening from smartphones
3- yes all device using unbound dns!

[Bundy01]

I am generating a list of IPv4/6 CIDR IP addresses.
This list must be managed at the router level (or Raspberry Pi).

But I doubt it will be effective if a member of your family does not use your Wi-Fi connection (another network or 4/5G usage will render the block ineffective).

See if there is an Android/iOS app that can block the installation of other apps.

[IzumiSenaSora]

I am generating a list of IPv4/6 CIDR IP addresses. This list must be managed at the router level (or Raspberry Pi).

But I doubt it will be effective if a member of your family does not use your Wi-Fi connection (another network or 4/5G usage will render the block ineffective).

See if there is an Android/iOS app that can block the installation of other apps.

All devices using Private DNS (DNS Over TLS) in Android. No iOS in my home! So even if they use wifi or anything it's always connected to my unbound dns
But when it become router level then it can't block any unless in home and connected via wifi
And using Android app that can block is not good solution either always connected as vpn is something people don't like! Cause they think it's consuming more battery

[Bundy01]

I still think that a parental control app like Digital Wellbeing or AppBlock is the best solution in your case.

[Bundy01]

Hi,

@IzumiSenaSora, have you found a solution?

If not, try adding this list of IPv4 addresses to the firewall on the machine where you’ve installed Unbound.
Remember to disable IPv6 in the OS settings.

If your firewall is iptables, use ipset to add a long list.

while read ip; do
    ipset add meta "$ip"
done < meta-ip.txt

⚠️: This might block domains when your family members use your Unbound+firewall machine, but if they’re using 4G/5G, it won’t work.