System level web filter

[Prayag]

I want to go sigless with comodo firewall.
But I want an effective web filtering solution(not a browser extension) that could filter out all the web pages/traffic for malicious and phishing attempts as comodo'sweb protection is a meh.
Any suggestion will be appreciable and may help a lot.

 

[In2an3_PpG]

Adguard

Adguard for Windows Overview - the world's most advanced ad blocker

 

[Sunshine-boy]

Use open dns+F-Secure Search

 

[Arequire]

Switch your DNS servers to Norton ConnectSafe:
Norton ConnectSafe

Blocks malware, phishing and scam sites system-wide. Make sure to use policy A.
You can also apply it to your router if you want malicious site blocking for all devices on your network.

 

[In2an3_PpG]

Or you could also use Adguard DNS (Beta).

Adguard DNS - the free DNS with advanced ad blocking

What is Adguard DNS?

We offer a new way to block ads that doesn't require you to install any external apps. It is easy in use, absolutely free, simple to configure on any device and provides a necessary minimum of ad blocking, privacy protection, browsing security and parental control functionality.

 

[AtlBo]

Blocks malware and phishing sites system-wide. Make sure to use policy A.

Thanks for this. @Arequire have you tried B and C?

 

[Sunshine-boy]

seems f-secure doesn't work anymore I didn't know that
you can try open dns+McAfee WebAdvisor
it's not extension you need to install in on your PC

 

[Arequire]

Thanks for this. @Arequire have you tried B and C?

I have not. B and C are more levelled at parents who want to stop their children from accessing pornography or sites that cover non-child friendly subjects along with blocking malware/phishing/scam sites. (Those non-child friendly subjects include: mature content, abortion, alcohol, crime, drugs, file sharing, gambling, hate, suicide, tobacco or violence.)

 

[AtlBo]

I have not. B and C are more levelled at parents who want to stop their children from accessing pornography or sites that cover non-child friendly subjects along with blocking malware/phishing/scam sites. (Those non-child friendly subjects include: mature content, abortion, alcohol, crime, drugs, file sharing, gambling, hate, suicide, tobacco or violence.)

OK thanks. Think I will try this.

 

[DeepWeb]

I just use task scheduler to download a hosts file.

 

[HazB]

Hosts files of a size that would drastically slow or cripple a system can be imported to Emsisoft Anti-Malware to restrict connections without affecting system performance. Using EAM, I successfully run a 42 mb Hosts file containing nearly 1.4 million entries compiled from over 20 Host file sources.

 

[ForgottenSeer 58943]

I want to go sigless with comodo firewall.
But I want an effective web filtering solution(not a browser extension) that could filter out all the web pages/traffic for malicious and phishing attempts as comodo'sweb protection is a meh.
Any suggestion will be appreciable and may help a lot.

My two pieces of advice;

1) Drop a small Untangle Box on the network and pay the $49 a year fee for Web Filtration, it will cover every device in your home) Untangle can be installed by a monkey..
alternatively;
2) Install Forticlient but ONLY the web filtration part.. When you install it you can select advanced options and simply install the modules you like. Leave everything off but the Web Filtration. Fortinet has some of the most impressive web filtration in the world.

 

[212eta]

uBlock Origin (several Lists to add)
together with
Norton ConnectSafe for DNS
will keep you Safe!

 

[HarborFront]

Switch your DNS servers to Norton ConnectSafe:
Norton ConnectSafe

Blocks malware, phishing and scam sites system-wide. Make sure to use policy A.
You can also apply it to your router if you want malicious site blocking for all devices on your network.

Does the use of Norton ConnectSafe prevents MITM attacks?

 

[HarborFront]

Or you could also use Adguard DNS (Beta).

Adguard DNS - the free DNS with advanced ad blocking

Yes, you are right.

If I'm not wrong Adguard DNS is not supporting DNSSEC

 

[BugCode]

^^ Yes. It sure have conflicts if you example put like a Hostman new lines in your host file or similar or even manually and use VPN, it's most likely useless when connected VPN... If we think you have hundreds of lines host-file u have to do so much manually work to make kind of work-around. There is alternative methods like @HazB says, you can put those line like Eam surf-protection and all is smooth.

So, HF your most likely right.

Edit: Damn , you edit your post before i posted that, so be it anyway.

 

[HarborFront]

^^ Yes. It sure have conflicts if you example put like a Hostman new lines in your host file or similar or even manually and use VPN, it's most likely useless when connected VPN... If we think you have hundreds of lines host-file u have to do so much manually work to make kind of work-around. There is alternative methods like @HazB says, you can put those line like Eam surf-protection and all is smooth.

So, HF your most likely right.

Edit: Damn , you edit your post before i posted that, so be it anyway.

Sorry, did you refer to my deleted post a while ago?

Unless the VPN provider has extensive ad/malware/phishing/fraud/spam protection incorporated into its VPN then having a separate DNS server like Adguard DNS is of no use.

 

[Arequire]

Does the use of Norton ConnectSafe prevents MITM attacks?

ConnectSafe doesn't use DNSSEC so in theory an attacker that breaches the ConnectSafe servers could perform a MITM or DNS spoofing attack. Hardly a concern though; I'd put money on your ISP's DNS servers being more vulnerable than Symantec's.

 

[_CyberGhosT_]

Adguard

Adguard for Windows Overview - the world's most advanced ad blocker

Exactly what I was going to recommend as well, I too am Sigless and AdGuard for PC
is not just for browsers, it is system wide and helps with app's too. For anyone wanting to go sig-less
this type of protection is vital to your success.
I also employ their DNS servers, I am based in the US and their servers are very fast, if
your not in the US you may experience dif results, but here they are if you want to try them:
1> 176.103.130.130
2> 176.103.130.131
* I am a couple years sig-free and have suffered no serious infections or issues, if you would
like some tips and pointers @Prayag feel free to PM me. PeAcE and good luck on your Sig-free journey.

 

[Duotone]

@Prayag
Use SimpleDNScrypt for your DNS resolver you could set it up with Primary(DNSCrypt.org) and Secondary(Adguard DNS)