3 ms·
> right now I'm running a patched dnsmasq¹ Are you the author of this? I've been wanting something like this for a long time! Hopefully the patch has been subm
by craftyguy 8y ago
> right now I'm running a patched dnsmasq¹
Are you the author of this? I've been wanting something like this for a long time! Hopefully the patch has been submitted upstream for inclusion in dnsmasq..
- DyslexicAtheist 8y agoI'm not the author and I too would like to see it too. But I wouldn't hold my breath on it ever making it into upstream considering that DNS based filtering gets some bad rep (rightfully so): https://www.afnic.fr/medias/documents/conseilscientifique/SC-consequences-of-DNS-based-Internet-filtering.pdf https://www.afnic.fr/medias/documents/conseilscientifique/SC... But for my anti-phishing specific use-case it perfectly prevents unicode domains from resolving. It will discriminate against other languages where unicode is popular but I don't speak these languages so it is exactly what I want. And for those couple of sites that have legitimate reason for unicode domains I never encountered a site that I felt was interesting to me. Nothing ever good -or even interesting- will come from Unicode domains.
- jedisct1 8y agodnscrypt-proxy supports regex-based rules, can block responses including specific IP addresses, can provide nice logs, does caching, supports time-based rules, and more: https://github.com/jedisct1/dnscrypt-proxy/wiki/Filters https://github.com/jedisct1/dnscrypt-proxy/wiki/Filters
- craftyguy 8y agoWow, thanks. I use dnscrypt-proxy too and had no idea it supported this!