5 ms·

My DNS server (which uses Hagezi's excellent blacklists) returns NXDOMAIN for bzr.openai.com. Serves OpenAI right.

• jsrozner 6d ago
  I keep meaning to set this up but haven't. What's the simplest best setup for my own DNS blocker?
  • drnick1 6d ago
    The easiest off-the-shelf option would be a router running OpenWrt. IIRC, it natively uses dnsmasq, and the relevant blacklists can be obtained from here: https://github.com/hagezi/dns-blocklists https://github.com/hagezi/dns-blocklists My own setup is DIY: a Debian box running Unbound (recursive DNS) with the RPZ blacklists from above. This gets rid of the upstream DNS service such as the ISP's completely, and prevents tampering or censorship.
  • kuerbel 6d ago
    Hmmm Pihole I guess. Runs on a pi zero (1 or 2 but 2 is better ofc)
  • eevahr 6d ago
    For simplicity I highly recommend https://nextdns.io https://nextdns.io. Supports most devices, and probably most, if not all, well known blacklists.
    • Melatonic 5d ago
      Also recommend NextDNS Forget if they have Hagezi though. Also it would be really nice if there was a way to export and import custom URL lists and rules....
  • anygivnthursday 6d ago
    For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).