TomatoUSB

OpenDNS seems to be going very commercial. I had at one time setup approx. 10 networks via OpenDNS so I could manage small business networks and prevent people from wasting time with sites like Facebook, etc. When I went to add an eleventh, I was told I needed to pay ($20/user/year) for this privilege.

So I figured instead of signing-up, I could just used the free OpenDNS service which blocks porn/spyware/adware (just use their DNS service w/o any account).

And then I could use the Tomato Access Restriction feature to block the big time wasters (Facebook, Myspace, etc.).

I wonder, though, if there are any sort of lists of the big time-wasters floating around the Internet?

Also, are there any limits to this feature in Tomato? If I create a 4k list of Access Restriction sites, will that bog the router down a lot? How about 16k? What is the upper limit, and upper practical limit (if there are any)?

There are various adblock scripts which use the router dnsmasq to divert requests to known ad hosting domains, these can be several k long lists

Its actually quite hard to block https sites, you can use DNS poisoning to spoil the name look-ups, but users can get around that using dnscrypt or other ways to get at the IP addresses.

Its quite difficult to block big sites by IP address since they use big dynamic ranges, and iptables rules convert names.

Elsewhere on this site we've been looking at loading big country IP block lists (blocking incoming at present), these lists can be many k long, but can be loaded in seconds.

I don't think there are too many hard limits, you will probably notice throughput problems before modern routers run out of ram

You can setup squid in transparent mode then configure the acl using a txt file. If you have a USB port for a thumb drive that is.