PDA

View Full Version : Hosts File - what do you use and why?


Blackspear
May 1st, 2005, 05:46 AM
I'm looking at the hosts file provided by Bluetack (http://www.bluetack.co.uk/forums/index.php?showtopic=8406) as it mentions its sources are:

The Webhelper : http://www.webhelper4u.com/
Andrew Clover : http://www.doxdesk.com
Eric L. Howes : http://www.spywarewarrior.com/uiuc/main-nf.htm
MVPS Hosts : http://www.mvps.org/winhelp2002/hosts.htm

I do wonder why though HPGuru has this site blocked amongst its own hosts file?

Cheers ;D

EDIT: I thought I had a pure HPGuru Hosts file, after checking, I didn't, Bluetack is NOT listed with HPGuru.

no13
May 1st, 2005, 06:16 AM
-{ Quote: "I'm looking at the hosts file provided by Bluetack (http://www.bluetack.co.uk/forums/index.php?showtopic=8406) as it mentions its sources are:

The Webhelper : http://www.webhelper4u.com/
Andrew Clover : http://www.doxdesk.com
Eric L. Howes : http://www.spywarewarrior.com/uiuc/main-nf.htm
MVPS Hosts : http://www.mvps.org/winhelp2002/hosts.htm

I do wonder why though HPGuru has this site blocked amongst its own hosts file?

Cheers ;D" }-
Didn't you ask him?


I use a combo hosts file from 10 or so sources, updated every 6 months or so. 36,640 or so entires last time I checked.

cluessnewbie
May 1st, 2005, 06:48 AM
-{ Quote: "Didn't you ask him?


I use a combo hosts file from 10 or so sources, updated every 6 months or so. 36,640 or so entires last time I checked." }-

Sounds paranoid enough, but updating every 6 months might be too slow.

rdsu
May 1st, 2005, 06:51 AM
Hi Blackspear :),

I'm using the MVPS Hosts file with the new version of HostsMan, but it seems that the hosts file provided by Bluetack is the union of the most important hosts file out there... ;)

-{ Quote: "
INFO from: http://www.mvps.org/winhelp2002/hosts.htm

What it does ...

The Hosts file contains the mappings of IP addresses to host names. This file is loaded into memory at startup, then Windows checks the Hosts file before it queries any DNS servers, which enables it to override addresses in the DNS. This prevents access to the listed sites by redirecting any connection attempts back to the local machine. Another feature of the HOSTS file is it's ability to block other applications from connecting to the Internet, as long the the entry exists." }-

-{ Quote: "
INFO from: http://www.bluetack.co.uk/forums/index.php?showtopic=8337

Why should I use a HOSTS file?

The HOSTS file can help to prevent spyware / malware from making connections to and from your computer and also prevent your browser from accessing sites which serve advertising or collect marketing data on you.

By making good use of the HOSTS file, you will greatly improve your safety on the internet , saving your bandwidth and reducing the chances of being hijacked.

You can feel more comfortable knowing that you have increased your protection against rampant spyware & adware , while also reducing the amount of personal information that is being gathered about you from websites.

It's important to keep your HOSTS file updated like most other security tools , many of the HOSTS files listed on this page are updated regularly to keep up with the newer malicious sites discovered." }-

Rmus
May 1st, 2005, 03:11 PM
I'm wondering if using a robust firewall that monitors all incoming/outgoing traffic is just as effective.

With known pharming malware that can alter the Hosts file, only by checking the IP address as it attempts to connect out can you avoid redirection.

---
Rmus

squash
May 3rd, 2005, 02:34 AM
I use this one, it is _the_ most comprehensive hosts file I have come across and is regularly updated.

http://remember.mine.nu/

It's a 5MB host file, for the "extended version" I use this in conjuction with Adblock.

no13
May 3rd, 2005, 04:38 AM
-{ Quote: "I'm wondering if using a robust firewall that monitors all incoming/outgoing traffic is just as effective.

With known pharming malware that can alter the Hosts file, only by checking the IP address as it attempts to connect out can you avoid redirection.

---
Rmus" }-
way too slow [if not your router's firewall]

Ronin
May 3rd, 2005, 10:15 AM
About blocking by ip versus hosts files (blocking by domainname)

-{ Quote: "way too slow [if not your router's firewall]" }-

Hard to say if it will be slower.

But blocking sites by ip addresses as opposed to by domainnames(host files) as pros and cons for both methods.

It's better to have both.

A real replacement for a host file is to use a custom DNS server to resolve DNS lookups, so you can filter results using regexp. Eg instead of putting every variant of doubleclick domains in your hosts file you can specify, doubleclick* . It will also be way faster than a hosts file.

You can also use proxomitron and similar software but they don't have a system wide effect compared to a custom DNS server

no13
May 3rd, 2005, 10:56 AM
-{ Quote: "About blocking by ip versus hosts files (blocking by domainname)



Hard to say if it will be slower.

But blocking sites by ip addresses as opposed to by domainnames(host files) as pros and cons for both methods.

It's better to have both.

A real replacement for a host file is to use a custom DNS server to resolve DNS lookups, so you can filter results using regexp. Eg instead of putting every variant of doubleclick domains in your hosts file you can specify, doubleclick* . It will also be way faster than a hosts file.

You can also use proxomitron and similar software but they don't have a system wide effect compared to a custom DNS server" }-
do you know how to do that to Treewalk (www.ntcanuck.com)?
I really haven't tried any major surgery on it yet... there's a thread I started about it in S&S.
I'll bump it with an update soon.

Moore
August 25th, 2005, 07:48 AM
-{ Quote: "I'm looking at the hosts file provided by Bluetack (http://www.bluetack.co.uk/forums/index.php?showtopic=8406) as it mentions its sources are:

The Webhelper : http://www.webhelper4u.com/
Andrew Clover : http://www.doxdesk.com
Eric L. Howes : http://www.spywarewarrior.com/uiuc/main-nf.htm
MVPS Hosts : http://www.mvps.org/winhelp2002/hosts.htm

I do wonder why though HPGuru has this site blocked amongst its own hosts file?

Cheers ;D

EDIT: I thought I had a pure HPGuru Hosts file, after checking, I didn't, Bluetack is NOT listed with HPGuru." }-

Hi Blackspear :)

Just thought I'd add a bit more info .. :D

As well as including a lot of the great research from those fine sources , we also have our own team of IP hunters that scour the internet for new IP's and domains every day , for addition to the blacklists and hosts file which are updated daily.

-{ Quote: " blocking by ip versus hosts files (blocking by domainname)" }-

The free software we provide gives our users the ability to block unwanted sites and various companies by domain and by IP address.. The best combination in my opinion..

I've found many malware sites that do not have a reverse dns that can be blocked in a hosts file.

The biggest downside to IP blocking is when you have for example webhosts like Godaddy who host literally hundreds of thousands of sites on a single IP address , and to block one , you have to block them all..

I prefer to use the Outpost firewall plugin Blockpost for IP blocking in conjunction with the hosts file to keep out the nasties.. Anything malicious that gets through my setup will be logged in Outpost and added to one of the appropriate lists.

Using the Blocklist Manager and Hosts Manager makes it easier to maintain your own personal IP blocklists/hosts from the data we have available. If you dont like something in the lists , then you can just delete it and save the changes.

Both programs offer a personal Exclusions and Inclusions manager to make life a bit easier for people.

HPGuru's Hosts file was once a source in our old hosts file , basically he didnt approve of it , so to prevent any long term anguish we removed it for him. ;)

Capp
August 25th, 2005, 09:25 AM
What I use: MVPS Host file

Why I use it: It, along with my pop-up blockers, keep a lot of crap from flying at me while surfing the web.

Plus, at my place of business, I can "lock" certain sites by having them redirected to localhost and thus keep the users from browsing to places I do not want them to go ;D

Infinity
August 25th, 2005, 10:14 AM
what I use: spyblocker and built in host (which we've been compiling for three years now)

grtz.

rdsu
August 25th, 2005, 10:20 AM
I use the MVPS Hosts file because of its quality...

Basically, is an Anti-Spyware to protect you and prevent against a lot of threats... ;)

ErikAlbert
August 25th, 2005, 10:58 AM
What I use : MVPS Hosts File, but I'm not a client of Capp-Ware.

Why I use it :

1) After installing win2000proSP4, my host file was empty (typical for M$).
So I said by myself "When M$ doesn't use it, I'm going to use it for myself."

2) A security expert told me to use the MVPS Hosts File :
http://www.mvps.org/winhelp2002/hosts.htm (The Rolls-Royce amongst the hosts files.)

3) The Hosts File is a PREVENTING tool and protects me from visiting infected websites.
So I don't need to spend my time on removing malware, caused by these websites and when I don't have to work, I'm happy.
I feel that protection every day, when I search or surf on the internet, using Firefox and it saved my computer many times.
Simplicity is always brilliant and that's what the hosts file is.
ErikAlbert.

WSFuser
August 25th, 2005, 12:17 PM
What I use: the MVPS hosts file

Why I use: its free and of good quality, helps with blocking bad pages, and its a piece of security that works universally (all browsers).

Dalek
August 25th, 2005, 02:23 PM
I like the MVPS HOSTS file, easy to use and with Hoster easy to edit, you can also use MSAS Beta to edit the file. Always updated regularly. :D

Trooper
August 25th, 2005, 02:57 PM
I use Bluetack's. It's one of the best out there imho. Plus the Host Manager software they have is sweet. ;D