Skip to content

4 : Black and White lists

Jump to bottom
Chris Buijs edited this page Dec 14, 2017 · 12 revisions

Lists are processed in the order of "Whitelist" first, and when not matched, blacklists are checked. When whitelisted it always go "passthru". E.g. you cannot blacklist a whitelisted entry.

There are four lists (text-files) to consider (this repo provides them, see disclaimer. They are updated at least once per 24 hours):

  • Domain/IP Blacklist (default: /etc/unbound/domain.blacklist)
  • Domain/IP Whitelist (default: /etc/unbound/domain.whitelist)
  • Regex Blacklist (default: /etc/unbound/regex.blacklist)
  • Regex Whitelist (default: /etc/unbound/regex.whitelist)

Note: For all lists use one entry (Domain, IP or Regex) per line. Examples:

A whole subnet: 10.1.1.0/22

An IP: 192.168.1.1

A Domain (and all its sub-domains): bad.company.com

A Regex: ^(ad|banner)[s]*\.

Note: Subnet/IP's are only checked in RESPONSES (more processing, can be switched off by setting "checkresponses" to False).

Disclaimer: The lists provided in this repo are generated automatically, unduplicated, aggregated and are provided as is. Some thougth and filtering went into the process to have as less false-positives as possible. By no means are these lists complete and do not guarantee an error-free or disrupted-free experience when used in any way. Using the Python module with UNBOUND has it's own impact as well and can disturb and bring down your DNS when fiddling to much. Use at own risk!

Clone this wiki locally