[jingo]

I use DNS to block this sort of stuff (doubleclick.net, googleapis.com, etc.). *.doubleclick.net, etc. redirect to a a socket logger so I can see what is being requested.

This is easy for me to do because I run my own DNS root.

I also use DNS in order to log requests from devices that phone home (e.g., Apple).

[privong]

Have you by chance written up how you have implemented that? I suspect there are existing examples of such setups online, but it never hurts to have another, particularly if your implemtation is different in some way. I would be interested to see your setup described in more detail.