I created a test version of a RPZ add-on and I am looking for feedback

[bbitsch (Bernhard Bitsch)]

@bonnietwin

It would seem to me that it would make sense to use either the ipblocklist list download code, which uses the perl-libwww module for the methods or the ids list download code, which uses the perl-HTTP-Message module for the methods.

Using one of the above approaches would mean we don’t end up with another method of downloading lists.

We do not need a download solution, because that is integrated into unbound!

Both of the code approaches check if the list has been updated since it was last downloaded and will not do a download if no update has occurred.

Also no download is carried out if the time since the last download is less than the allowed download period.

This is done, hopefully, by the unbound RPZ module. The docs aren’t exactly enough at this point. But experience shows, that the list are updated at most with the frequency defined in the SOA record.

For the details we should examine the sources.

[current_user]

@jon
to me as an ignorant user it is a quite
surprising coincedence that we shared the
exact same question:

So if RPZ doesn’t use HTTPS, what is it using?
source

and to read:

… there are some that have a metered
connection and will pay for data by volume …
source

as an answer is just:

however

[bonnietwin (Adolf Belka)]

I have realised that it was wrong of me to respond in to this post thread because now we have a parallel path of discussion to the dev mailing list with the two not being synced or see by the same people.

I will therefore make my response from now on into the dev mailing list thread already existing.

[bbitsch (Bernhard Bitsch)]

I think both channels are necessary.
The dev list to discuss the integration into IPFire. Technical and formal.
The community to explain the time it takes to integrate this addon, which a couple of users are satisfied with. ( Including me )

@jon has chosen both channels. IMO, this is adequate.

[thekillerchicken (Rob Schenck)]

This looks interesting as I am all for security and privacy.

[hjkl (H&M)]

Hello,
I upgraded to rpz-beta-0.1.18-18.ipfire.tar and all is working fine.

For whoever is interested, this version has these sub-components:

grep version= /usr/sbin/rpz*
/usr/sbin/rpz-config:version="2025-01-11 - v44"
/usr/sbin/rpz-functions:version="2024-12-10 - v02"
/usr/sbin/rpz-make:version="2025-01-11 - v14"
/usr/sbin/rpz-metrics:version="2025-01-20 - v25"
/usr/sbin/rpz-sleep:version="2024-08-16"        # v05

[tratru]

hello everyone, sorry for the question, but there was talk of making this component official, can we know something about it?
thanks

[peppetech]

The RPZ addon has been working like a charm for a year.

I think anniversary is coming up soon. @jon

[mumpitz]

Wait, lists are downloaded from public sources which even 100k UBlock users download daily and the amount of traffic is a problem for the source?

Never heard of such problems… are this Problems?

I generated 20 useable lists from the Hagezi source on github. Should I stop this?

[ummeegge (Erik Kapfer)]

Hi all,

@peppetech

The RPZ addon has been working like a charm for a year.

I think anniversary is coming up soon. @jon

happy new year from me too but also with a little present GitHub - twitOne/RPZ-Blocklists: Multi-Source RPZ Blocklists for DNS Filtering (automated conversion and updates) hope it works like it should and let us know if someone have good lists, find bugs, have new ideas, or just constructive critics/or_ .

Best,

Erik

[ummeegge (Erik Kapfer)]

Some stuff has changed in main GitHub - twitOne/RPZ-Blocklists: Multi-Source RPZ Blocklists for DNS Filtering (automated conversion and updates) . SOURCES.md should deliver a good overview of all but am not sure if some more can be included, i was wondering what you all thinking about . Ideas ?

Best,

Erik

P.S.: Good lists and may new categories might be a good next step ?

[mumpitz]

ok, i read this like a hint to show my generated lists , but it is relative easy to do so, they all can be find on Hagezi’s github. I did two screenshots here to show. Several of these lists are also in my uBlock extension of the Browser, so the hits here are not so high.