Skip to content

4 : Black and White lists

Jump to bottom
Chris Buijs edited this page Dec 14, 2017 · 12 revisions

List are processed in the order of "Whitelist" first, and when not matched, blacklists are checked. When whitelisted it always go "passthru". E.g. you cannot blacklist a whitelisted entry.

There are four lists (text-files) to consider (this repo provides them, and are updated at least once per 24 hours):

  • Domain/IP Blacklist (default: /etc/unbound/domain.blacklist)
  • Domain/IP Whitelist (default: /etc/unbound/domain.whitelist)
  • Regex Blacklist (default: /etc/unbound/regex.blacklist)
  • Regex Whitelist (default: /etc/unbound/regex.whitelist)

Note: For all lists use one entry (Domain, IP or Regex) per line. Examples:

A whole subnet: 10.1.1.0/22

An IP: 192.168.1.1

A Domain (and all its sub-domains): bad.company.com

A Regex: ^(ad|banner)[s]*\.

Note: Subnet/IP's are only checked in RESPONSES (more processing, can be switched off by setting "checkresponses" to False).

Clone this wiki locally