Continuing the discussion from: [image] Blocking app trackers I posted a DoH IP Blocklist "‘DoH Protection by jpgpi250’ that could be used to block DoH servers. Unfortunately when using it with the IPFIRE blocklist. it will block DNS DoT servers as well, not just DoH. I wonder if Proxy could bl…

[image] ipfire-test ipfire-test: hi i test you work i have this file conf I was looking through your conf file: Keep in mind with lots of RPZ zones (each with many lines of domains) you may slow down DNS to a crawl (i.e., it takes a long time to resolve a domain name). Also, Thank you for…

hi i test other config rpz server: module-config: "respip validator iterator" define-tag: "ipfire" define-tag: "allow block" define-tag: "wiffi" define-tag: "nas" # Per client IP ... access-control-tag: 127.0.0.1/32 "ipfire" access-control-tag: 192.168.1.2/32 "allow block" access-contro…

I just started reading about “tags”. Do you see something different in the logs when using tags?

i dont see different in the logs when using tags [système] tags is best for profile per device more control ty

How and at what time do the rpz zones get updated if the “get_doh_rpz_sh” file is not needed to run daily? [image] Jon: EDIT : The items below are NOT needed for DOH.rpz . Something similar might be needed for an allowlist. Not needed items - left in-place for reference To update the RPZ file…

Hey! I was just working on RPZ! Quit peaking over my shoulder! Take a look at this file: [image] Jon: And the second creates an allowlist with a similar format to this: https://raw.githubusercontent.com/jpgpi250/piholemanual/master/DOH.rpz See the second line: @ SOA jpgpi250.github.io.…

This is all very cool. Waiting for the GUI button :slight_smile:

Ha! me too! I need to find someone to do the WebGUI. It is beyond my skills! Let me know if you know of someone!

I am going to adapt this excellent guide to use RPZ Threatfox.

IPFire Community

DoHblock - Blocking DNS over HTTPS via RPZ

Network DNS

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled