Blocking Web Advertisements with an External Dynamic List

[KevinTucker]

Hello everyone,

I am attempting to block web advertisements on our PA-3020. We have two of these devices which utilize Panorama. We have blocked anything categorized as "web-advertisement" on the firewall, which is great, but a ton of ads are still getting through. What we would like to do is as follows:

• Utilize an external dynamic list (a text file) to block domains
• When a blocked site is visited, the page will resolve to an "ad blocked" page rather than just not resolving the page at all.

Does anyone have any suggestions we can use? For our typical malware blacklisting, the sites just do not resolve and show a "page cannot be displayed" message. This is logged, which is great, but for the web advertisement blocking, our CIO wants it to show an "Ad Blocked" message. This message works for anything classified as "web-advertisement."

Any suggestions would be greatly appreciated.

Thanks,

Kevin

[mst]

BTW, Kevin could You share what source of ad domains do You use?

[mivaldi]

Check this one out: https://pgl.yoyo.org/as

EDL as a Domain list:

https://pgl.yoyo.org/as/serverlist.php?hostformat=plain&showintro=0&startdate%5Bday%5D=&startdate%5B...

EDL as an URL list:

https://pgl.yoyo.org/as/serverlist.php?hostformat=adblock;showintro=0&startdate%5Bday%5D=&startdate%...

[Mohamed_Mabrouk]

Hi,

I tried the EDL with the follwoing link :

https://pgl.yoyo.org/as/serverlist.php?hostformat=plain&showintro=0&startdate%5Bday%5D=&startdate%5B...

but this list dosen`t have starts for domains like " *.hostname.com" , I tried another list that have *.xyz.com but it didn`t work

it give me that the EDL is not vaild.

Is the EDL supports Starts ( ex:*.xyz.com) ??

any suggestions ?

[mst]

@Mohamed_Mabrouk: which version of PAN-OS You have installed? Before 7.1 You can use only IP addresses and ranges in EBL, IMHO (look at this https://live.paloaltonetworks.com/t5/PAN-OS-7-1-Videos/PAN-OS-7-1-URL-Filtering-Dynamic-Block-List-E...).

[Mohamed_Mabrouk]

Hello,

I am using Paloalto 7.1, I added the same EDL but with Plaintext and it works well

This the list that I used , it contains *.xyz.com

https://pgl.yoyo.org/as/serverlist.php?hostformat=adblock;showintro=0&startdate%5Bday%5D=&startdate%...

List format requirements

• List must be a plain text document (no HTML, no PDF, etc.).
• Scheme is optional, and will be truncated if found – even if it is incomplete.
• http:// is not needed.
• Wildcards (*) are supported.
  • *.example.com/hacked/*
  • www.example.net/wp-*/debug/
• Maximum length per line is 1024 characters.
• Double-byte characters not supported.
• If specifying a domain, use both formats (as with custom URL categories):
  • example.com
  • *.example.com

 https://live.paloaltonetworks.com/t5/PAN-OS-7-1-Videos/PAN-OS-7-1-URL-Filtering-Dynamic-Block-List-E...

Thanks