Submitted 8 months ago by Reshirams_Rad_Slam@mastodo.neoliber.al to nostupidquestions@lemmy.world
@nostupidquestions Can I block Tiktok purely by DNS?
It doesn't seem to work in NextDNS even if it says in the logs they're being blocked.
The only way I was able to block TikTok was to use Adguard and block it under Filter -> Services.
You cannot block it just by domain as they use CDN’s and it is just a constant game of whack a mole to try and block them.
I’m curious on why you want to do this. If you’re managing an open wifi used by a large number of people (e.g. at a school), it’s very different from if you just want to block it at home. But for the latter I don’t really see why you’d do it through DNS.
I have tried. It is very difficult. In fact tiktok and Instagram have so many domanin names and IP addresses that it is hard to list them all and block them.
Blocking the main domain would prevent you from accessing the web site, but the mobile app would work. Then you can block the api and stuff, but clients already connected would still work because they rely on the CDNs. When you block a good bunch of the network, the app would just feel Brocken, not blocked. When users keep reloading they will find a CDN you have not blocked yet. Also, they will still get notifications because they are pushed via Google services. They won’t see them in the app however.
So you just need to monitor the logs to keep block tiktok domains that pop up.
If you can block via regex or joker chars (*) then, it would be eisoer for you.
You can look up domains list of tiktok on the internet f9r a good start.
For my experience, I just managed to make tiktok and Instagram broken enough to frustrate the users and discourage its use over the network.
Short answer: yes
Have you tried flushing the DNS cache in the system that you’re testing on?
You can try raw.githubusercontent.com/nextdns/…/tiktok
Its the blocklist used by rethink DNS on android for blocking tiktok.
This is a supplemental list that I use along with the nextdns list: hagezi TikTok extended list.
This blocks 1p and 3p fingerprinting around the greater web but isn’t designed to block actual access to TikTok. That’s why it’s necessary to use both lists in tandem.
benni@lemmy.world 8 months ago
Not sure if this is relevant for your case, but make sure you’re also blocking subdomains of the specified domains. Adguard for example allows doing that easily via regex-like rules.
Reshirams_Rad_Slam@mastodo.neoliber.al 8 months ago
@benni I use Nextdns tiktok list but I'm looking at the logs and there's no obvious tiktok domains or sandwiched to tiktok domains non-obvious domains