Incorrect false positives with Peplink Content Filtering Database

Hello Peplink Team,
For the past couple of months, we have received information from several of our customers (including experiencing the issue ourselves) in accessing URLs within emails that pass through Peplink Routers where “Web Blocking - Adware” is enabled.

Based on our observations and investigations, it appears that URLs using the domain of “list-manage.com” appear incorrectly categorised as “Ads” (found at line 2619 of the lite Content Filtering Database - Download (r20220126)).
How can we get this false positive corrected and auto-updated? We do not wish to log onto all of our customer’s routers to add in an exemption for the domain manually?

Unfortenly there is no method within InControl2 yet to manage the Content Filtering for Peplink|Pepwave Routers.

Several other discussions seek improvements in the Content Filtering with the Peplink Community Forum; it would be great to see some proactive resolve to improve this feature as per the many requests.

https://forum.peplink.com/search?term=content%20filtering%20database
https://forum.peplink.com/t/introducing-web-content-filtering/?u=mldowling
https://forum.peplink.com/t/content-filter-database/?u=mldowling
https://forum.peplink.com/t/content-filtering-database-schedule-automatic-data-update-from-incontrol2/?u=mldowling
https://forum.peplink.com/t/license-activation-for-full-version-web-filtering-blacklist/?u=mldowling
https://forum.peplink.com/t/content-blocklist-enhancement-request/?u=mldowling
https://forum.peplink.com/t/submit-content-filtering-corrections/?u=mldowling

Note: Peplink Support Ticket 22030558 (due to the commercial impact on our customers).

Happy to Help,
Marcus :slight_smile:

2 Likes

Any blocking system is always going to make a mistake. They all need both an allow list and a block list to handle the inevitable oversights. I have looked into ad blocking offered by VPN services and only one has allow/block lists to personalize their generic setting. Amongst DNS providers too, only a single company that I know of (NextDNS) offers this level of personalization. pcWRT has an temporary ad blocking suspension option on the router login screen that can be activated without even logging in to the router.

1 Like

@mldowling ,

The URL list-manage.com is a very controversial discussion because of the website is related to Marketing and advertisement and it’s recategorizes from time to time under different content categories. You are right in this case, you should exempted the URLs if user feel that the websites is false positive being block. Attached is the screenshot for other product vendor that the list-manage.com have been recategorizes for multiple times.

As for now, the exempted list is only available to be manage via the local WebAdmin :

CSV Format

You can copy and paste the CSV format for the exempted URL list and paste the same list to other devices as well via the URL.

Do allow me to get your permission to change this forum post under feature request post to allow Engineering team to consider the feasibility to manage the content blocking option in the IC2 as the future feature enhancement.

2 Likes

Hello @sitloongs ,
We have another example, customers with the Balance 380 & Balance 580 have now not received a database update since the r20220126.

A website used a lot to source freelancers, and short-term contractors called “fiverr.com” have gotten incorrectly categorised as “Malware”.
image.png

As a community, it would be great to support Peplink with a better way of correctly having these false-positive and related categories updated and allow for more frequent regular (like monthly) updates to the content filtering databases.

Having to manually go into all of our customer routers to add exemptions due to these false positives is tedious.

Happy to Help,
Marcus :slight_smile:

1 Like

Hello Peplink team,
Here is another. Does anyone know who zendesk.com is?
The domain is classified as MALWARE and PORN as two subdomains are tagged that affect all the domains sitting within.

image.png

image.png

PLEASE, Peplink team, find a better community-based way to fix these and have frequent (at least monthly) updates.

We have opened a Support Ticket #22071174 as this has become a commercial issue now impacting several of our clients, and even emails getting sent from Peplink’s CRM with links to “list-manage.com” when “list-manage.com” gets included within the exemption lists are not working.

Appreciate your assistance,
Marcus :slight_smile:

1 Like

@mldowling, I replied to you in the ticket for the issue of “list-manage.com”. Please help to follow up with me there.

Thanks.

1 Like

No wonder none of our Polycom phones were able to contact the zero touch provisioning server at Polycom.

image

I don’t think I will trust this database every again. LOL

1 Like

@Ricardo_Villa thank you for bringing this to us, we have checked on the Content Filtering DB (r20231109) and notified the team to rectify it.

Meanwhile, you can exempt this domain to allow the Polycom phones to contact the server.

1 Like

Hello @WeiMing, @TK_Liew & @sitloongs,
Thanks for your past engagement in this ongoing community discussion.
Several other previous discussions are relevant here:

The consolidation in filtering categories in the Peplink router’s Content Filtering is causing ongoing problems for our customers using primarily the “Full Version”.
Several of our Australian customers have a significant issue with many of the Australian Government websites (gov.au) in the r20250307 getting categorised as “Drugs” (seventy sites).

Category Domain
drugs agedcarequality.gov.au
drugs ambulance.vic.gov.au
drugs canceraustralia.gov.au
drugs cancerscreening.gov.au
drugs digitalhealth.gov.au
drugs doctorconnect.gov.au
drugs healthstarrating.gov.au
drugs hearingservices.gov.au
drugs myhealthrecord.gov.au
drugs pharmacyboard.gov.au
drugs privatehealth.gov.au
drugs psychologyboard.gov.au
drugs safetyandquality.gov.au
drugs vichealth.vic.gov.au
gambling responsiblegambling.vic.gov.au
drugs alcohol.gov.au
drugs arpansa.gov.au
drugs dhhs.tas.gov.au
drugs dhhs.vic.gov.au
drugs ehealth.gov.au
drugs openarms.gov.au
drugs quitnow.gov.au
drugs sportaus.gov.au
aggressive senate.gov.au
gambling lotterywest.wa.gov.au
drugs aacqa.gov.au
drugs ahpra.gov.au
drugs blood.gov.au
drugs health.gov.au
drugs nhmrc.gov.au
drugs antarctica.gov.au
drugs australia.gov.au
drugs bladderbowel.gov.au
drugs carergateway.gov.au
drugs covidsafe.gov.au
drugs dentalboard.gov.au
drugs eatforhealth.gov.au
drugs headtohealth.gov.au
drugs health.qld.gov.au
drugs health.vic.gov.au
drugs healthdirect.gov.au
drugs healthinsite.gov.au
drugs healthywa.wa.gov.au
drugs jobaccess.gov.au
drugs mbsonline.gov.au
drugs medicalboard.gov.au
drugs myagedcare.gov.au
drugs myhospitals.gov.au
drugs sahealth.sa.gov.au
drugs toiletmap.gov.au
drugs aad.gov.au
drugs aic.gov.au
drugs aihw.gov.au
drugs ihpa.gov.au
drugs nal.gov.au
drugs ndis.gov.au
drugs nrv.gov.au
drugs odc.gov.au
drugs ogtr.gov.au
drugs pbs.gov.au
drugs tga.gov.au
drugs chiefpsychiatrist.sa.gov.au
drugs coaghealthcouncil.gov.au
drugs mentalhealthcommission.gov.au
drugs nationaldrugstrategy.gov.au
drugs nursingmidwiferyboard.gov.au
drugs respectvictoria.vic.gov.au
aggressive ea.gov.au
drugs australianclinicaltrials.gov.au

As a community (or at least a circle of established, trusted Peplink Partners), we seek a tool to mitigate or assess those responsible for determining these classifications.

One of the most frustrating things is that we must now log into all our customers’ systems/routers and add an exemption for “gov.au” for the content filtering. The numbers and time involved are considerable.

PLEASE, Peplink ( @Alex & @Keith ), revisit allocating new resources to this and evolve the feature.

Have a good week,
Marcus :slight_smile:

@mldowling , The Engineering team is reviewing the URLs and we will update again as soon as possible.

1 Like

We also found, in the last few days, Docusign being blocked under the malware category

1 Like

Noted Bryn, i will check this as well.

@bryn.loftus ,

Do you refer this ?
image

double n should be the suspicious domain

1 Like

@mldowling ,

I just got the confirmation from the Engineering team, those government domains will be removed from the drug category for the coming Content Filtering DB update. This will fix the false positive issue :heart:

1 Like

docusign.net (196768) is a real, active domain used by docusign

1 Like

Thank you Bryn, we will improve this as well. I will update again.

1 Like