blocking an ip range?

Cornflake · 04-23-2012, 03:08 PM

i'm trying to block an ip range that always shows up when i browse the internet. blocking a few of the addresses in hosts has no effect and they still connect, blocking the full range in a firewall means i simply can't browse the internet (udp connections still go through). i thought maybe it was my dns server but when checking other computers on the network they do not get these connections.

any help would be appreciated, thanks.

Shnerdly · 04-23-2012, 06:41 PM

Welcome to the forum Cornflake.

What are you referring to when you say "i'm trying to block an ip range that always shows up when i browse the internet."? How is it "showing up"? Popups? Redirects?

If you have iptables available in your router, you can block TCP and UDP.

Cornflake · 04-23-2012, 09:10 PM

it's neither pop-ups nor redirects. it's just something that constantly establishes a connection whenever i open my browser(s). i fear i don't have access to the router, the router address just redirects to my isp.

Cornflake · 04-24-2012, 06:18 AM

it shows up as an established connection in netstat. if i block any selection of addresses anywhere but the firewall (hosts, browser) the connection still establishes.

i don't have access to the router settings, sadly.

Shnerdly · 04-24-2012, 09:27 AM

The things you are seeing may be legitimate access by things like Google Analytics or other tracking and reporting software that resides on the servers of the websites you visit.

You may want to look at something like Ghostery. It intercepts and blocks most of those trackers.

Cornflake · 04-24-2012, 10:20 PM

i actually do have both the elements and scripts from typical tracking sites blocked, but i'll try out ghostery. thanks.

Cornflake · 04-24-2012, 10:57 PM

ghostery doesn't seem to have any effect, but to confirm the ranges do appear to be from tracking sites (173.194.73.0-173.194.73.255 and 74.125.226.0-74.125.226.255) they both get listed as google domains.

Cornflake · 04-25-2012, 06:06 AM

problem has been resolved. for some reason blocking the ranges from under my main rules wouldn't allow me to browse the web but blocking the ranges under browser-tcp has blocked them entirely with no consequence.

Shnerdly · 04-25-2012, 05:57 PM

The Google owned ranges are much broader then you indicated.

They are actually:
173.194.0.0-173.194.255.255
74.125.0.0-74.125.255.255
containing over 129,000 IP's

04-23-2012, 03:08 PM	#1
Cornflake Member Join Date: Apr 2012 Posts: 7	blocking an ip range? i'm trying to block an ip range that always shows up when i browse the internet. blocking a few of the addresses in hosts has no effect and they still connect, blocking the full range in a firewall means i simply can't browse the internet (udp connections still go through). i thought maybe it was my dns server but when checking other computers on the network they do not get these connections. any help would be appreciated, thanks.

04-23-2012, 06:41 PM	#2
Shnerdly The Terminator Join Date: Jun 2010 Location: The frozen tundra of Minnesota Posts: 1,020	Welcome to the forum Cornflake. What are you referring to when you say "i'm trying to block an ip range that always shows up when i browse the internet."? How is it "showing up"? Popups? Redirects? If you have iptables available in your router, you can block TCP and UDP. __________________ ► ► Grammar is important. For instance, commas save lives: Let's eat grandpa. OR Lets eat, grandpa. ► ►

04-24-2012, 09:27 AM	#5
Shnerdly The Terminator Join Date: Jun 2010 Location: The frozen tundra of Minnesota Posts: 1,020	The things you are seeing may be legitimate access by things like Google Analytics or other tracking and reporting software that resides on the servers of the websites you visit. You may want to look at something like Ghostery. It intercepts and blocks most of those trackers. __________________ ► ► Grammar is important. For instance, commas save lives: Let's eat grandpa. OR Lets eat, grandpa. ► ►

04-25-2012, 05:57 PM	#9
Shnerdly The Terminator Join Date: Jun 2010 Location: The frozen tundra of Minnesota Posts: 1,020	The Google owned ranges are much broader then you indicated. They are actually: 173.194.0.0-173.194.255.255 74.125.0.0-74.125.255.255 containing over 129,000 IP's __________________ ► ► Grammar is important. For instance, commas save lives: Let's eat grandpa. OR Lets eat, grandpa. ► ►

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

04-23-2012, 09:10 PM	#3
Cornflake Member Join Date: Apr 2012 Posts: 7	it's neither pop-ups nor redirects. it's just something that constantly establishes a connection whenever i open my browser(s). i fear i don't have access to the router, the router address just redirects to my isp.

04-24-2012, 06:18 AM	#4
Cornflake Member Join Date: Apr 2012 Posts: 7	it shows up as an established connection in netstat. if i block any selection of addresses anywhere but the firewall (hosts, browser) the connection still establishes. i don't have access to the router settings, sadly.

04-24-2012, 10:20 PM	#6
Cornflake Member Join Date: Apr 2012 Posts: 7	i actually do have both the elements and scripts from typical tracking sites blocked, but i'll try out ghostery. thanks.

04-24-2012, 10:57 PM	#7
Cornflake Member Join Date: Apr 2012 Posts: 7	ghostery doesn't seem to have any effect, but to confirm the ranges do appear to be from tracking sites (173.194.73.0-173.194.73.255 and 74.125.226.0-74.125.226.255) they both get listed as google domains.

04-25-2012, 06:06 AM	#8
Cornflake Member Join Date: Apr 2012 Posts: 7	problem has been resolved. for some reason blocking the ranges from under my main rules wouldn't allow me to browse the web but blocking the ranges under browser-tcp has blocked them entirely with no consequence.