Serious Discussion Cloudflare Gateway Free Plan

@Marko :)

I asked AI about the ads category and it said it was no longer supported. Are you using it? (if so what are your experiences with it).

Cloudflare does not currently offer a dedicated "Ads" category for blocking in its Zero Trust Gateway DNS filtering. While there was a previously available category with ID 66 labeled "Advertisements," it is no longer supported and cannot be used in policies. The only related category available is "Deceptive Ads," which falls under the broader "Questionable Content" category and is intended to block misleading or fraudulent advertising, not all types of ads.
 
Last edited:
@Marko :)

I asked AI about the ads category and it sais it was no longer supported. Are you using it? (if so what are your experiences with it).

Cloudflare does not currently offer a dedicated "Ads" category for blocking in its Zero Trust Gateway DNS filtering. While there was a previously available category with ID 66 labeled "Advertisements," it is no longer supported and cannot be used in policies. The only related category available is "Deceptive Ads," which falls under the broader "Questionable Content" category and is intended to block misleading or fraudulent advertising, not all types of ads.
You sure?

Advertisements is still there and works for me (blocked googleadservices.com successfully).

Screenshot_4.png


Screenshot_5.png


The category is also listed as one on Cloudflare Docs website: Domain categories
 
Now that I got time, I'm testing @SeriousHoax script. So far, I'm impressed. I asked AI which script is better and @SeriousHoax takes a win. 🏆😂
Thanks for testing the script.
Now tell AI to make me a trophy 😂
BTW, I also enabled Warp Plus with MASQUE for my Cloudflare WARP app. But I'm not using it permanently. Only when my internet is slow. Have you also enabled the proxy and inspection features?
 
Last edited:
Thanks for testing the script.
Now tell AI to make me a trophy 😂
Thank you for making the script. Here's the trophy:

9c499442-3095-4d4f-a5d3-ad476cbb6ba9.png

BTW, I also enabled Warp Plus with MASQUE for my Cloudflare WARP app. But I'm not using it permanently. Only when my internet is slow. Have you also enabled the proxy and inspection features?
I had some issues yesterday, or day before with disconnection during downloads so I'm not using it at the moment but I did notice website opening faster though.

No, I didn't enable proxy or inspection features. I just needed WARP to follow my firewall policies, so I didn't play with these settings. :)
 
@SeriousHoax, The blocklist download works well now; it matches the total domains in the Hagezi Pro list. Could you add the cleanup workflow to your repo? I'm using the script from your personal branch; I'll also test the "policy description" if you configure the script.
I don't think that's needed. The list of workflow runs has a history of 90 days for free repositories so anything older is deleted automatically.
 
  • Like
Reactions: SeriousHoax
@SeriousHoax, The blocklist download works well now; it matches the total domains in the Hagezi Pro list. Could you add the cleanup workflow to your repo? I'm using the script from your personal branch; I'll also test the "policy description" if you configure the script.
I have now updated the script to save filter version information in the gateway policy description. So, the JSON file is not needed anymore.
Please test and let me know if it works reliably.

I'm not sure what do you mean by me adding the cleanup workflow? I have updated the YML file to remove the GitHub action bot commit section since that is not needed anymore and changed the permission from contents: write to contents: read.
 
  • Like
  • +Reputation
Reactions: rashmi and Marko :)
I'm not sure what do you mean by me adding the cleanup workflow? I have updated the YML file to remove the GitHub action bot commit section since that is not needed anymore and changed the permission from contents: write to contents: read.
He asked if you could create workflow .yml file for deleting all created lists from Cloudflare dashboard, if I understood it correctly.
 
He asked if you could create workflow .yml file for deleting all created lists from Cloudflare dashboard, if I understood it correctly.
You are right, thanks.
It's done now. Added an action workflow for the cleanup script which can be run manually if required to delete all lists and policies created by the main script.
 
  • Thanks
Reactions: rashmi and Marko :)
I have modified to script to name the polices from, "Block Hagezi Pro++" to "Hagezi Pro++".
I think it's better this way. So, if @rashmi @Marko :) or anyone were directly using my script pointing to my repo in your yml file, then you might have to run the cleanup script once before running the main script again without triggering a GitHub action failure.
 
I have modified to script to name the polices from, "Block Hagezi Pro++" to "Hagezi Pro++".
I think it's better this way. So, if @rashmi @Marko :) or anyone were directly using my script pointing to my repo in your yml file, then you might have to run the cleanup script once before running the main script again without triggering a GitHub action failure.
I downloaded your repo and uploaded to mine. So I'm not affected by the change. Will have to download again, thanks!

Btw you can also change INFO text in log with ℹ️ emoji. It might look a bit better in logs.
 
I have modified to script
"Enabled block page which shows which policy triggered the block"—Are you referring to the Cloudflare block page?

I think enabling the block page is not a good idea for ad blocking. The block page also requires Cloudflare certificate installation for HTTPS pages; otherwise, users will see the "Your connection is not private" page.
 
  • Like
Reactions: SeriousHoax