kometchtech kometchtech

Google Public DNS [AS15169]:

Google Public DNS

Preferred IPv4 DNS server 8.8.8.8
Alternate IPv4 DNS server 8.8.4.4
Preferred IPv6 DNS server 2001:4860:4860:8888
Alternate IPv6 DNS server 2001:4860:4860:0:0:0:0:8888
Preferred IPv6 DNS server 2001:4860:4860:8844
Alternate IPv6 DNS server 2001:4860:4860:0:0:0:0:8844

Recommended Extentions:

uBlock Origin

https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/

Settings

Make sure the following options are off:

Disable pre-fetching

Google Public NTP [AS15169]:

time.google.com

time1.google.com

time2.google.com

time3.google.com

First, clone the Mozilla focus project and make it fetch its list:

$ git clone https://github.com/mozilla/focus.git
$ cd focus
$ ./checkout.sh
$ cd Lists

This delivers several JSON formatted files, of which we are going to use disconnect-advertising.json. We'll filter out the good bits using jq, and create a Lua representation:

	[admin@MikroTik] > export
	# 2025-02-03 20:19:44 by RouterOS 7.18beta2
	# software id = ETY3-XJA9
	#
	# model = CCR2116-12G-4S+
	# serial number = XXXXXXXXXXX
	/interface bridge
	add fast-forward=no frame-types=admit-only-vlan-tagged name=bridge1 protocol-mode=none vlan-filtering=yes
	/interface ethernet
	set [ find default-name=ether13 ] name=mng

	! NEC Portable Internetwork Core Operating System Software
	! IX Series IX3315 (magellan-sec) Software, Version 10.7.18, RELEASE SOFTWARE
	! Compiled Oct 25-Tue-2022 12:28:03 JST #2
	! Current time Apr 26-Wed-2023 16:52:00 JST
	!
	timezone +09 00
	!
	logging buffered 819200
	logging subsystem flt warn
	logging subsystem mape debug

	#-----------------------------------------------------------------------
	# same-quad-list.txt: a list of same-quad IPs by owner w/DNS status
	#
	# The CIDR network is the largest contiguous/bit-boundary-aligned block
	# that is allocated to that entity (actual allocated range may be larger)
	# NOTE: some ranges not yet converted to CIDR.
	# Updates welcome - leave comment and/or ping [email protected]
	#-----------------------------------------------------------------------
	# For human efficiency, some records are repeated here as comments.
	#

	Alternate DNS
	198.101.242.72
	23.253.163.53

	BlockAid Public DNS (or PeerDNS)
	205.204.88.60
	178.21.23.150

	Censurfridns
	91.239.100.100

	Use this as an example on how to start the virtual console without the need of Java Web Start or accessing it from the web interface.
	You can use the user and password that you use for the web interface.

	You need an old JRE... I used 1.7.0_80 from the Server JRE package, also I have tested successfully 1.7.0_79 with MacOS.
	You don't need to install it, just extract it or copy the files in "jre" folder.

	Open the viewer.jnlp file that you get by launching the virtual console from the web interface with a text editor.
	Note the urls to the jar files. Download the main jar file avctKVM.jar and the libs for your operating system and architecture.
	Extract the dlls (.so Linux, .jnilib MacOS) from the jar libs.

	# /etc/systemd/system/docker.service.d/docker-nftables.conf
	# disable iptables in docker, allowing nftables to do work
	[Service]
	ExecStart=
	ExecStart=/usr/bin/docker daemon -H fd:// --iptables=false