I created a test version of a RPZ add-on and I am looking for feedback

Networking DNS
16

Started!
Will do!

curl https://community.ipfire.org/uploads/short-url/p7ZMNOioiX0NqfXhZ1BaH2TXbzW.ipfire --output /opt/pakfire/tmp/rpz-1.0.0-1.ipfire

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 20480    0 20480    0     0  80312      0 --:--:-- --:--:-- --:--:-- 80629

cd /opt/pakfire/tmp/
tar xvf rpz-1.0.0-1.ipfire
ROOTFILES
files.tar.xz
install.sh
uninstall.sh
update.sh

ls -l
total 40
-rw-r--r-- 1 root root  4028 Aug  1 07:22 files.tar.xz
-rwxr-xr-- 1 root root  1671 Aug  1 07:22 install.sh
-rw-r--r-- 1 root root   293 Aug  1 07:22 ROOTFILES
-rw-r--r-- 1 root root 20480 Aug  4 19:00 rpz-1.0.0-1.ipfire
-rwxr-xr-- 1 root root  1738 Aug  1 07:22 uninstall.sh
-rwxr-xr-- 1 root root  1618 Aug  1 07:22 update.sh

cp -v ROOTFILES /opt/pakfire/db/rootfiles/rpz
'ROOTFILES' -> '/opt/pakfire/db/rootfiles/rpz'

Late edit: install went fine!

NAME=rpz ./install.sh
Extracting files...
etc/
etc/unbound/
etc/unbound/zonefiles/
etc/unbound/zonefiles/block.rpz
etc/unbound/zonefiles/allow.rpz
etc/unbound/local.d/
etc/unbound/local.d/00-rpz.conf
usr/
usr/sbin/
usr/sbin/rpz-sleep
usr/sbin/rpz-metrics
usr/sbin/rpz-config
var/
var/ipfire/
var/ipfire/dns/
var/ipfire/dns/rpz/
var/ipfire/dns/rpz/blocklist
var/ipfire/dns/rpz/allowlist
var/ipfire/backup/
var/ipfire/backup/addons/
var/ipfire/backup/addons/includes/
var/ipfire/backup/addons/includes/rpz
...Finished.
Stopping Unbound DNS Proxy...                                                                                                                                                       [  OK  ]
Starting Unbound DNS Proxy...                                                                                                                                                       [  OK  ]

Tested:

#load DOH.rpz list from above post 
rpz-config add BlockDOH_jpgpi250 https://raw.githubusercontent.com/jpgpi250/piholemanual/master/DOH.rpz
unbound: info: rpz: add config file "BlockDOH_jpgpi250.rpz.conf"
unbound: rpz: running "unbound-control reload"
ok

#Then test one of the DOH servers from that DOH.rpz list
nslookup 2.dnscrypt-cert.browser.yandex.net
Server:         127.0.0.1
Address:        127.0.0.1#53

** server can't find 2.dnscrypt-cert.browser.yandex.net: NXDOMAIN

Working fine, I would say!

3 Likes