Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tip for configuring and using an alternative blocklist #6

Open
Praful opened this issue Oct 15, 2023 · 0 comments
Open

Tip for configuring and using an alternative blocklist #6

Praful opened this issue Oct 15, 2023 · 0 comments

Comments

@Praful
Copy link

Praful commented Oct 15, 2023

This is not an issue. I'm sharing my config, which someone might find useful.

I found that one or more of the default lists block sites that I need when clicking on links in emails eg from the BBC (bbcmail.com). This is undesirable for me: I'd like to visit the links! I could whitelist the link but I'm guessing there'll be more, and I don't want to be chasing blocked sites forever!

I found another list, which passes the sniff test for me: https://oisd.nl/. Their claim is that you won't find any false positives and after two weeks, I haven't. I'm using the big list (there are three altogether).

The readme for the dns_blocklist.sh script suggests updating fcrontab file. An alternative is to create a script and drop it in the /etc/fcron.daily, /etc/fcron.weekly, etc folder.

The list I'm using gets updates frequently. I've therefore put my script in the /etc/fcron.daily folder.

My script, named update-dns-blocklist.sh, is:

#!/bin/bash
# The default list blacklists sites as such bbcmail.co.uk, which results in links in BBC emails
# not working. Use this list instead:
/root/bin/dns_blocklist.sh -r refuse -w /var/ipfire/dhcp/whitelist -b /var/ipfire/dhcp/blacklist -s https://big.oisd.nl/

Thank you @sfeakes for providing this excellent script.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant