View Single Post
Posts: 334 | Thanked: 616 times | Joined on Sep 2010
#4
Originally Posted by Vento View Post
Every reference to localhosts from that providere is replaced byt the original Jolla hosts settings (that why I use the file hosts.base).

The provider of that hosts file is really famous and everyone download the hosts file from him, but if anyone whuold like to check for malicious redirect fell fre to do it and report your progres here pls.
I apologize if I'm wrong here, as I'm not very proficient with unix tools. I may miss some sed and regex magic...

But what I see is that you grep all the lines that mention localhost. That is fine. But ipv4 record can consist of more than that such as

Code:
112.112.112.112 im.malicious.com localhost.localdomain localhost
And currently you would insert that into the newly created host-file.

I think you need first to drop any lines that contain any other IP than 127.0.0.1 and ::1.

And also 127.0.0.1 must not be in the form #127.0.0.1 in the end of line like this (on one line although visible here on two):

Code:
112.112.112.112 im.malicious.com localhost.localdomain localhost #127.0.0.1
or

Code:
112.112.112.112 im.malicious.com #localhost.localdomain #localhost #127.0.0.1
EDIT: added second example line. I haven't checked yet what would happen, though.

Last edited by Manatus; 2015-02-18 at 12:49.