5 ms·
Unbound DNS Blacklist
- leipert 6y agoFor blocking I use Pi-hole https://pi-hole.net/ https://pi-hole.net/ and unbound. I like the simple interface of the the Pi-Hole, point it to the locally running unbound which is configured to use several DoH providers I trust.
- vermaden 6y agoThanks for PI-HOLE suggestion, pity its not available for FreeBSD, but still nice project.
- hrbf 6y agoWell, since its main use case is with a stand-alone Raspberry Pi, this shouldn’t be too much of an issue. Just treat it as an appliance, like a router.
- alblue 6y agoIt’s just based on dnsmasqd which I’m fairly sure is on FreeBSD. You can configure it yourself. https://github.com/alblue/dnsmasq-example https://github.com/alblue/dnsmasq-example
- denkmoon 6y agoSucks that this wants to nuke your existing config, when you could just include the blacklist.
- jzelinskie 6y agoI used to do something like this with knot-resolver, but now I just use NextDNS. It's really nice to have separate profiles so that my IoT devices get extremely strict blocking, while my personal devices can be slightly more lax to avoid false positives.
- randywaterhouse 6y agoI use Unbound in a similar way, although I return 0.0.0.0 rather than NXDOMAIN. Don't really know why I decided to go that route, but when I was setting my Unbound server up I'd read how quad 0's was the pi-hole's preferred setting [0]. Seems the articles' script would accept such a setup too, via the ${TYPE} parameter (or maybe a slight rewrite of the `echo` later on there). [0] https://docs.pi-hole.net/ftldns/blockingmode/ https://docs.pi-hole.net/ftldns/blockingmode/
- tiew9Vii 6y agoI do the same for the same reasons, pi-hole docs recommends 0.0.0.0. I am wondering if you have multiple resolvers set up on a client, if you receive an nxdomain response if it will attempt another resolver? Which wouldn’t be what you want to happen with a block list.
- livre 6y ago>if you receive an nxdomain response if it will attempt another resolver? That's exactly why, for example Firefox queries CloudFlare's DoH if it gets an NXDOMAIN[1] [1] https://github.com/AdguardTeam/AdGuardHome/issues/1914 https://github.com/AdguardTeam/AdGuardHome/issues/1914
- tiew9Vii 6y agoThank you. So for the purposes of adblocking you do not want to use NXDOMAIN and prefer returning 0.0.0.0.
- denkmoon 6y agoThis doesn't happen when DoH is disabled in Firefox right?
- livre 6y agoI don't know, I'm not the one who reported that issue and I use a local DoH server, that way I make sure that when Firefox uses DoH I still have full control over it.
- lgats 6y agoMay I suggest changing the title to Blocklist?