How to install Squid proxy to block ads instead of relying on browser’s ad block which I do not trust fully.
- Full control of the domains you wish to block/unblock.
- Webpages loads faster.
- Lower CPU utilisation.
- Probably longer battery life too.
- Manually adding new ads domain.
I installed Ubuntu Server 20.04 in VirtualBox in my MacBook. You can have the Ubuntu installed in another machine or in the cloud, it is entirely up to you. Squid is very lightweight and I ran it with 1 processor with 512MB RAM. Run the commands below to install squid.
sudo apt update
sudo apt upgrade -y
sudo apt install -y squid apache2-utils
Execute the commands below to create a new user for the proxy authentication. Example below I am creating a user “oofnivek”
sudo touch /etc/squid/passwd
sudo chown proxy: /etc/squid/passwd
sudo htpasswd /etc/squid/passwd oofnivek
Edit “/etc/squid/squid.conf” file and set the settings like below. This will prevents sites detecting that you are passing through a proxy.
request_header_access Cache-Control deny all
Still within the same config file. Add these below the acl ports.
# black listed sites
acl bad_sites dstdomain "/etc/squid/bad-sites.acl"
http_access deny bad_sites# authentication
auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic realm Squid Basic Authentication
auth_param basic credentialsttl 2 hours
acl auth_users proxy_auth REQUIRED
http_access allow auth_users
Create a file “/etc/squid/bad-sites.acl” to store all the domains you want to block. You can copy my settings below or you can start fresh and slowly add it in.
Beginning with . means blocking all subdomains under that top level domain. To block only specific subdomain, specify the subdomain with domain.
Lastly, restart Squid for the settings to take effect.
sudo systemctl restart squid
Firefox has a browser only network settings instead of setting it for the entire operating system. Key in the IP of the Ubuntu 20.04 Squid proxy and the default port 3128.
My LAN has IPv6 which I do not need and somehow IPv6 made Squid proxy sluggishly slow. To disable it, run the command below.
sudo sysctl -w net.ipv6.conf.all.disable_ipv6=1