mirror of
https://github.com/Luzifer/named-blacklist.git
synced 2024-11-08 15:30:06 +00:00
49 lines
1.4 KiB
Markdown
49 lines
1.4 KiB
Markdown
|
[](https://goreportcard.com/report/github.com/Luzifer/named-blacklist)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
# Luzifer / named-blacklist
|
||
|
|
|
||
|
|
This repo contains a DNS blacklist generator to be used in combination with [DNS Response Policy Zones](https://www.dnsrpz.info/) in BIND 9.8+.
|
||
|
|
|
||
|
|
## Usage
|
||
|
|
|
||
|
|
For full usage inside BIND see [BIND ARM](https://downloads.isc.org/isc/bind9/9.14.3/doc/arm/Bv9ARM.ch05.html#options).
|
||
|
|
|
||
|
|
Quoted from the ARM:
|
||
|
|
|
||
|
|
> For example, you might use this option statement
|
||
|
|
|
||
|
|
```
|
||
|
|
response-policy { zone "badlist"; };
|
||
|
|
```
|
||
|
|
|
||
|
|
> and this zone statement
|
||
|
|
|
||
|
|
```
|
||
|
|
zone "badlist" {
|
||
|
|
type master;
|
||
|
|
file "master/badlist";
|
||
|
|
allow-query { none; };
|
||
|
|
};
|
||
|
|
```
|
||
|
|
|
||
|
|
Then you can generate the `master/badlist` file using `named-blacklist`:
|
||
|
|
|
||
|
|
```console
|
||
|
|
# named-blacklist --config config.sample.yaml | tee master/badlist
|
||
|
|
$TTL 1H
|
||
|
|
|
||
|
|
@ SOA LOCALHOST. dns-master.localhost. (1 1h 15m 30d 2h)
|
||
|
|
NS LOCALHOST.
|
||
|
|
|
||
|
|
; Blacklist entries
|
||
|
|
0.nextyourcontent.com CNAME . ; From: "Dan Pollock - someonewhocares"
|
||
|
|
0.r.msn.com CNAME . ; From: "add.Risk"
|
||
|
|
000.0x1f4b0.com CNAME . ; From: "CoinBlocker"
|
||
|
|
000.gaysexe.free.fr CNAME . ; From: "Mitchell Krog's - Badd Boyz Hosts"
|
||
|
|
[...]
|
||
|
|
```
|