[connect]

Hello,


i am unable to block titkon on mobile app using dnsmasq

Firmware: DD-WRT v3.0-r44048 std


address=/musical.ly/0.0.0.0
address=/muscdn.com/0.0.0.0
address=/.musical.ly/0.0.0.0
address=/.tik-tak.co.il/0.0.0.0
address=/tik-tak.co.il/0.0.0.0
address=/.tiktok.com/0.0.0.0
address=/tiktok.com/0.0.0.0
address=/v16a.tiktokcdn.com/0.0.0.0
address=/log.tiktokv.com/0.0.0.0
address=/log.tiktokv.com/0.0.0.0
address=/ib.tiktokv.com/0.0.0.0
address=/api-h2.tiktokv.com/0.0.0.0
address=/v16m.tiktokcdn.com/0.0.0.0
address=/api.tiktokv.com/0.0.0.0
address=/v19.tiktokcdn.com/0.0.0.0
address=/mon.musical.ly/0.0.0.0
address=/api2-16-h2.musical.ly/0.0.0.0
address=/api2.musical.ly/0.0.0.0
address=/log2.musical.ly/0.0.0.0
address=/api2-21-h2.musical.ly/0.0.0.0

[egc]

Nowadays browser and apps can use their own secure DNS. Maybe that is the case here?

You might research using ipset to block websites.

See my signature at the bottom.

Note: if the user is not using DNSMasq (as we suspect) than you have to make the list yourself either by surfing to tiktok from a computer which uses DNSMasq or manually making a list with all the addresses.

Note 2:
We can help you better if you state router model and build number:
To get the best out of DDWRT and the forum read the forum guidelines with helpful pointers:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087

[eibgrad]

As @egc suggests, this strategy *assumes* the client is actually using DNSMasq, which these days isn't always the case. You may be forced to block this traffic using the firewall instead, which acts independently of DNS. Even then, all it takes is a VPN to circumvent even the firewall rules (unless you now want to get into the business of blocking known VPN providers). It's an endless cat and mouse game between the admin and his users.

[connect]

I am using Linksys router 1900 ac and yes it seems like dsnmasq is no more effective how can I block this based on IP addresses via firewall? ipset is not available in my build.

[eibgrad]

Without ipset support, all you can really do is create firewall rules based on the relevant domain names (or ip addresses, of course).

[RandYanix]

IDK about this specific firmware or setup, but I suggest checking the documentation or support forums for DD-WRT to see if there are any specific steps you need to follow to block the app properly. You can also try contacting the TikTok support team for assistance blocking the app on your device. And also, if you're interested in other solutions for blocking TikTok or other apps, check out Smart Engines' website, which offers a range of software solutions for content filtering and parental control. Here's a link to their website: https://smartengines.com/. Good luck!