3 ms·
Take a look at PowerDNS Recursor or Unbound, both of which have scripting capabilities than enable this type of behavior and much more (Lua for PowerDNS, Python
by CrLf 11y ago
Take a look at PowerDNS Recursor or Unbound, both of which have scripting capabilities than enable this type of behavior and much more (Lua for PowerDNS, Python for Unbound).
I'd say a script for any of these would be a better choice.
- pgl 11y agoI just yesterday added an Unbound format for my list! http://pgl.yoyo.org/as/#unbound http://pgl.yoyo.org/as/#unbound
- vbezhenar 11y agoI used just 'local-zone' entry. Unbound answers NXDOMAIN for those domains, and it prevents next HTTP request to 127.0.0.1. I'm not sure what approach is better.
- pgl 11y agoTo be honest, I don't use Unbound myself - I was just going off what was sent to me as an example of the format to use.
- vbezhenar 11y agoI use unbound as my caching recursive server and I integrated blacklisting of those ad domains. Basically I generate config file for unbound using awk and reload unbound. Here's my script (for OpenBSD, but modification would be trivial): https://gist.github.com/vbezhenar/a0065fdb50f6aa601a20 https://gist.github.com/vbezhenar/a0065fdb50f6aa601a20
- fanf2 11y agoA good way to distribute block lists is as a DNS RPZ zone, https://dnsrpz.info https://dnsrpz.info BIND has had RPZ support for years and other resolvers are working on the feature.