it used to be possible to block this with a patched dnsmasq that allows setting a regex, but the fork is not maintained and merging the patches to upstream is a

it used to be possible to block this with a patched dnsmasq that allows setting a regex, but the fork is not maintained and merging the patches to upstream is also not much fun. so I hacked something together that uses the linux kernel NFQUEUE: https://github.com/DyslexicAtheist/nfq https://github.com/DyslexicAtheist/nfq this way I have guarantee that these domains will never be resolved (which is what I want :))