3 ms·

If anyone's wondering which are the "High-risk TLDs" blocked in the "zero" filter: CF, CG, GA, GQ, ML, TK, TOP, WIN (right now, i guess it may change any time)

by helb 4y ago

If anyone's wondering which are the "High-risk TLDs" blocked in the "zero" filter: CF, CG, GA, GQ, ML, TK, TOP, WIN (right now, i guess it may change any time) The "kids" filter blocks the same TLDs, so it allows XXX or PORN, i guess they just block individual 2nd level domains. I just looped through IANA's TLD list with a simple script to get this. The resolver returns NXDOMAIN with "negative-caching.dns0.eu." SOA for the blocked ones: $ kdig +tls ns tk @zero.dns0.eu … ;; ->>HEADER<<- opcode: QUERY; status: NXDOMAIN; id: 39321 … ;; QUESTION SECTION: ;; tk. IN NS ;; AUTHORITY SECTION: tk. 300 IN SOA negative-caching.dns0.eu. hostmaster.tk. 0 1200 300 1209600 300

Symbiote 4y ago
It seems pretty ridiculous to block those domains outright. There are plenty of legitimate government, tourist and local sites, which could at least be whitelisted. They've blocked UNICEF's link shortener: https://uni.cf https://uni.cf
- KingOfCoders 4y ago
  "They've blocked UNICEF's link shortener: https://uni.cf https://uni.cf" Which I consider a good thing, why route links through the influence space of a country that is in a civil war with foreign mercenaries running parts of the show?
  - Symbiote 4y ago
    That's not their reason for blocking, since e.g. North Korea is allowed (tried airkoryo.com.kp).