Netflix App on Onn 4K Plus

[ajstrick81]

I've been playing around with adblocking/filtering with my glinet Flint 2 running AGH that is connected to my Onn 4K Plus. I've had success with blocking between 80-90% of advertisements and I thought I would share my custom filter list here. I'm sure it contains errors as I'm not a programmer, but I've been pleased with the implementation. I'd like to hear any thoughts/feedback. Thanks!

! -------------------------------------------------------------------------
! NETFLIX SAFE MODE (AdGuard Home / DNS) — CLEANED 2025-10-24
! Goal: Maintain playback + thumbnails while suppressing ad/measurement paths
! Keep this list ABOVE other general-purpose lists so exceptions work as intended.
! -------------------------------------------------------------------------
! === 0) ESSENTIAL ALLOWS (device control / entitlement) ===
@@||ichnaea.netflix.com^
@@||metrics.netflix.com^
@@||nrdp.prod.cloud.netflix.com^
! NOTE: Do NOT globally allow r.nflxso.net or r.netflix.com.
! We selectively block ad-related r.nflxso.net subdomains below.
! === 1) PARTNER NETWORK — block only known ad/ingestion endpoints ===
||preapp.prod.partner.netflix.net^
/^nflx-android-tv.prod.partner.netflix.net$/
! (Deliberately no blanket block for .partner.netflix.net — leaving other partner
! hosts available preserves UI/metadata. If thumbnails ever break, revisit.)
! === 2) DELIVERY-PATH CONTROL — nudge away from IPv4 OCAs (bypass ads on many POPs) ===
! Covers standard and env-tagged variants (e.g., -dev-, -prd-)
/^ipv4-c\d{1,4}-[a-z]{3}\d{3}(-[a-z]{3,5})?-[a-z0-9]{2}.\d+.oca.nflxvideo.net$/
! If you experience playback failures for certain TV episodes, consider replacing
! the above with a more surgical allow for core regions (ORD/WAS/DFW/ATL/IAD/LAX):
! @@/^ipv4-c\d{1,4}-(ord|was|iad|lax|dfw|atl)\d{3}(-dev)?-[a-z0-9]{2}.\d+.oca.nflxvideo.net$/
! === 3) OCC (Open Connect Control) — UI/metadata stability ===
! Keep known UI OCC node allowed (only needed if you add OCC blocks elsewhere)
@@/^occ-0-90-92.1.nflxso.net$/
! (We intentionally do NOT block other OCC tiers here; broad OCC blocking can
! remove thumbnails. If you later test OCC blocks, add them below this allow.)
! === 4) Ad‑manifest & measurement on r.nflxso.net (focused) ===
! Random token + region (e.g., longtoken-us-east-2.r.nflxso.net)
/^[a-z0-9-]{10,}-(us|eu|ap|sa|af|me)[a-z0-9-].r.nflxso.net$/
! Common cfu* variant
/^cfu[a-z0-9-]{6,}.r.nflxso.net$/
! === 5) DARNUID device/ad attribution (UUID FQDNs) ===
! Exact UUID form: 8-4-4-4-12 lowercase hex before .darnuid.netflix.com
/^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}).darnuid.netflix.com$/
! === 6) Telemetry / crash logging (safe to block) ===
||logs.netflix.com^
||sessions.bugsnag.com^
||notify.bugsnag.com^
||api.bugsnag.com^
! -------------------------------------------------------------------------
! OPTIONAL / TEST TAIL (commented)
! -------------------------------------------------------------------------
! OCC ad-decision tiers (uncomment to experiment; may affect thumbnails)
! /^occ-[0-9-]+.[2-9].nflxso.net$/
! Log-only discovery (no blocking): surface all subdomains for analysis
! ||partner.netflix.net^$dnstype=ANY,important
! ||r.nflxso.net^$dnstype=ANY,important
! ||nflxvideo.net^$dnstype=ANY,important
! ||darnuid.netflix.com^$dnstype=ANY,important

[Dynamic5912]

Most (if not all) of these are already included in well-known blocklists

[ajstrick81]

Thanks for your feedback and I agree that these are well known ad domains. It might have been helpful had I included more context of how I am using AGH in this particular environment.

My Onn TV 4K plus has Adguard apk installed (Premium subscription) as well as my traffic being routed through my Flint 2 (with AGH running). What I found that even with the go to measures of the ad block lists, I wasn't having success with watching Netflix movies/shows without interruptions. I was curious if I could manipulate the traffic and found success with including the rules in my custom filter list.

I recognize there are redundancies and that it isn't appropriate for all applications. I just wanted to share what has been helpful for me and hope it helps others.