Regex expressions - help

Help
1

Hi All

I am new to Pi-Hole and expressions.
I would like to block as many as possible youtube adds.
I noticed, that many adds are coming from links like:
-> rr2---sn-5goeen7y.googlevideo.com
-> rr1---sn-5goeen7y.googlevideo.com

Expected Behaviour:

I would expect, that my expression will block them:
rr\d{1,}-{3,}sn-\S{8}.googlevideo.com

Actual Behaviour:

However, all googlevideo requests seems to pass through.

|Time|Type|Domain|Client|Status|Reply|Action|
2022-05-15 21:28:38 A rr3---sn-5go7yne6.googlevideo.com 192.xyz.ab.cd OK, answered by dns.opendns.com#53 CNAME (56.8ms)

What I am doing wrong?
Can you please help, how to block this crap ?

Debug Token:

sorry do not know how to do it.
Please let me know, if you need more info.

/Antonio

2

Buy a youtube subscription. Honestly: search this forum, there have been a lot of attempts to block youtube ads but all in vain. YT servers ads from the same domains as the ads. If you block them, you also block the video content.

3

Hi

I am aware of if, but why expression is not working on pihole ?
That is what I do not understand. In a way it should work and it should be blocked following blacklisted expressions.

So why it is not blocked ?

Thanks.
/Antonio

4

Please upload a debug log and post just the token URL that is generated after the log is uploaded by running the following command from the Pi-hole host terminal:

pihole -d

or do it through the Web interface:

Tools > Generate Debug Log

5

Debug log removed by moderator

Hi

I believe above is log from my system.
Is that what you have been looking for ?

Thanks.

/Antonio

6

Not quite.
We don't ask you do publically post your debug log, because it contains potentially sensitive information (note that commonly, the private range IP addresses that you chose to redact from your log would be safe to share).
Instead, we ask to upload a debug log to our tricorder where only trusted members of the Pi-hole team may access it, and where it autodeletes after 48 hours.
We'd then just need the token to access it.

Your

would match rr2---sn-5goeen7y.googlevideo.com (as can be verified by testing your RegEx).

However, that isn't the regex you've stored:

*** [ DIAGNOSING ]: Domainlist (0/1 = exact white-/blacklist, 2/3 = regex white-/blacklist)
 id     type  enabled  group_ids  domain                                   date_added           date_modified        comment                                           
 -----  ----  -------  ---------  ---------------------------------------  -------------------  -------------------  ----------------------------
 174       3        1  0          rr\d{1,}-{3,}sn-\s{8}\.googlevideo\.com  2022-05-15 20:05:59  2022-05-15 20:05:59  youtube 15.05.2022 - test 12

Also, you should consider to remove all non-domain entries from your blocklists (e.g. all entries starting with https:), as those are useless for domain filtering.

7

Hi
Thanks, I think I make it to work now.

/Antonio

9

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.