Blocking domains/IP's

[Treval]

My question is very simple.
Suppose I am seeing in my firewall that firefox uses domains (invisibly) that I don't want it to use.
Suppose anywhere I see domains that I don't want to be connected to me.

How do I block out these domains completely (e.g. *.blockeddomain.xyz*)
from every being able to connect/ICMP/whatever/reach to my computer?
Is there a GUI tool for this? Maybe my router?

[Geek-9pm]

What router do you have? Did you read the documentation?
Did you try Google?
Have you been to http://NetNanny.com and looked at their stuff?

No, I don't recommend you buy it. Just asking if you know what it is and have your used the free trail. If that sort of thing is what you want, there a r some free downloads of shareware that do the same thing.

[salvosko]

If it connects to domains you don't want:
1. it could be unwanted app in your PC = remove it, scan for viruses
2. usually it does such a connections by its needs and it si normal

[TechGeek]

I wold recommend you download Avast Antivirus Home Edition (free) and scan your PC. If you're infectred by some malware the best thing to do would be to remove it.

[Treval]

No thanks to your avast recommendation. For one, I am not a kid who can't afford paying AV's. For two, Kaspersky. For three, I didn't ask for a malware advice. If that were the case, I would post in the malware subforums. For four, this is about blocking domains individually. I'm tech enough to know when I'm infected.

I think some people exaggerate in their CH status. 'Guru', please. At least I am modest and I put myself as 'experienced'.

[salvosko]

Such a connections should stop on router or software firewall on your PC. I recomend a router then, it automatically does not transfer anything from wan to lan if you don't set it.

[kpac]

I think some people exaggerate in their CH status. 'Guru', please. At least I am modest and I put myself as 'experienced'.

That's one way to get help.

[Treval]

I get help from who I want. Period.
reactToPeopleIdontLike=0;

[TechGeek]

No thanks to your avast recommendation. For one, I am not a kid who can't afford paying AV's. For two, Kaspersky. For three, I didn't ask for a malware advice. If that were the case, I would post in the malware subforums. For four, this is about blocking domains individually. I'm tech enough to know when I'm infected.

I think some people exaggerate in their CH status. 'Guru', please. At least I am modest and I put myself as 'experienced'.

Ok I can play the counting game 

You said "Firefox accesses domains invisibly."

1. Have you done any tests to see if it is Firefox
2. Have you tried reinstalling Firefox
3. Have you recently installed a new addon for Firefox
4. If your answers are yes/yes/no, explain to me how this is not malware
5. There is no problem with using Avast. It's not a crappy AV
6. Why don't you go to your router or modem config page and block an IP or domain from there?

PS: I beat you by 2 numbers. You owe me in your next reply.

[BC_Programmer]

Would this function not be facilitated by the "hosts" file? ("C:\windows\system32\drivers\etc\hosts")?

I do know it is used as part of the network functionality in windows so it would prevent Any browser at all from connecting to those sites.

I think some people exaggerate in their CH status. 'Guru', please. At least I am modest and I put myself as 'experienced'.

I tend to agree. "Guru" is the highest selection and using it sort of implies that there is no chance for further improvement. That is never the case OTOH, it's hard to rate oneself, or any other person, globally with regard to computers; I mean, I'd probably call myself a Guru with, say, Visual Basic 6, but probably Intermediate with, say, C#. Same for operating systems. So everybody who gives themselves a Rank of "guru" is probably only considering that one area in which they are.

[Treval]

Yeah good point.
I already use HostsMan. =P

However, I don't know if adding domains to the hosts file prevents them to connect to any socket (port+IP) on the entire port range of my computer. That's another story I think.. I once prohibited full port range and it still was connecting, so yeah.

[tsarles]

Hosts file will work.

Soft firewall will work

hard filewall would be best, but you need a router that will support ACL's