Block proxy sites like BlockAway that bypass porn site blockers in Cloudflare's 1.1

Feedback Feature Request Submitting & Feedback
1

Type

New feature

Description

It would be beneficial to implement measures to block proxy sites such as BlockAway in the 1.1.1.1 for Families service. These proxy services are specifically created to bypass restrictions and blockers for pornographic sites, undermining the effectiveness of current site-blocking protocols.

Benefit

Blocking these proxies would enhance the effectiveness of the 1.1.1.1 for Families service’s site-blocking measures, ensuring that the intended restrictions on access to pornographic content are upheld. This improvement would help maintain a safer and more controlled internet environment for families using this service.

2

What is the name of the domain?

Please include test result URL when you create a post in the community forum. Paste the results from → 1.1.1.1 — the Internet’s Fastest, Privacy-First DNS Resolver

What is the issue you’re encountering

It unblock and bypass web filter

What are the steps to reproduce the issue?

Existing documentation URL(s)

Hi,

It can be great to block https://www.blockaway.net/ and all website like this unblocker and proxie on DNS filter
1.1.1.1 for Families

It can be bypass to access porn website by using this unblocker
What changes are you suggesting?

It can be bypass easily

3

Please block all proxy website like BlockAway that bypass porn site blockers in Cloudflare’s 1.1.1.1 for Families.

4

What is the name of the domain?

blockaway com and similar proxy sites

What is the error number?

N/A

What is the error message?

These proxy sites are designed to bypass existing site blockers, undermining the effectiveness of Cloudflare’s 1.1.1.1 for Families service. Implementing measures to block these proxies would enhance the service’s ability to restrict access to pornographic content.

What is the issue you’re encountering

Proxy sites like BlockAway are bypassing the content filtering measures of Cloudflare’s 1.1.1.1 for Families, allowing access to pornographic content that should be blocked.

What steps have you taken to resolve the issue?

Block all proxy website like blockaway and other… on 1.1.1.1 family filter

What feature, service or problem is this related to?

I don’t know

What are the steps to reproduce the issue?

First, configure a device or network to use Cloudflare’s 1.1.1.1 for Families DNS settings.
Second, attempt to access a blocked pornographic site directly to confirm it is blocked.
Third, use a proxy site like BlockAway to access the same pornographic content.
Finally, note that the proxy site successfully bypasses the content filtering, granting access to the restricted content.

5

@ad4za7fd - Please avoid creating multiple threads / spreading your feedback over multiple threads.

I think you may be overlooking a couple of things in regards to how this works.

The 1.1.1.1 is a DNS resolver, it can filter the DNS resolution, and prevent the (sub-)domain, e.g. nsfw.example.com from resolving to it’s IP address, e.g. 192.0.2.66.

Filtering the DNS resolution will NOT prevent the machines from establishing access, in this example to 192.0.2.66, so if you already know the IP address (perhaps somehow else), you can still access the content, even if the 1.1.1.1 resolver is preventing the DNS resolution from happening.

If we’re taking the example, that you’re trying to prevent children from access such content, and that you do not manage their devices, and they are able to change from the 1.1.1.1 for Families variant on 1.1.1.3 , and (back) to 1.1.1.1, then you will have the same problem, that no (DNS) filtering will be applied here.

If you’re looking for a foolproof solution to the problem you’re describing, then DNS filters alone won’t be sufficient.

You will need solutions that go way deeper than that…

1 Like
6

Hello,

Blocking proxy sites like BlockAway in Cloudflare’s 1.1.1.1 for Families service is essential. These proxies bypass current restrictions, making site blockers less effective. By blocking these proxies, we can ensure the service maintains a safer internet environment for families, keeping inappropriate content inaccessible.

Thank you for considering this important enhancement.

Best regards,

Really sorry i can’t find the right forum to make this request.

7

even if it’s not the best solution it can be a first blocking level

8

i minor, but important correction. 1.1.1.1 is also the name of the cloudflare warp service on android and ios, which not only has DNS function, but also VPN/Proxy function, which has the capability of blocking.

In this case though, if only using DNS, it is also unlikely that children would be by-passing DNS settings (but possible), making 1.1.1.1 for families fairly effective for the most part.

9

I’m not sure I would call it important, or even a correction at all, - it depends on how deep we want to go with it:

If the text “The 1.1.1.1 for Families is a DNS resolver”, including the reference to “for Families”, as it did a bit longer down through the text, would have made the it superb to you, I would however agree.

Do you have any official references, where 1.1.1.1 for Families is pointing to towards the WARP Service, and not alone the use of the .2 (Malware Blocking) and/or .3 (Malware & Adult content Blocking) variants of the DNS resolver?

@ad4za7fd’s reference with 1.1.1.1 for Families seemed crystal clear from my end, that the the topic was about the .3 (Malware & Adult content Blocking) variant of the DNS resolver, that is easily evaded, and which is a DNS resolver, and not a VPN/Proxy.

I believe we can agree to disagree, especially with the “for the most part”.

If people (children or not) are able to find services like the one @ad4za7fd mentions, they’re also able to figure out how to change the DNS resolver, or even to use some other VPN/Proxy service to accomplish their goal.

That said, -

I don’t see how @ad4za7fd would ever be able to accomplish the goal, with getting the mentioned website/service filtered, assuming the reason alone is about adult content, as the website/service isn’t itself about the adult content.

If we were talking about a website/service that was dedicated for the adult content purpose, literally speaking, a pornographic website, the situation would of course be different.