<div dir="ltr">It's about WPAD related attacks.<div>Many routers do use dnsmasq library to offer DNS/DHCP service. How to blacklist WPAD?<br><div><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jul 31, 2018 at 8:23 AM, <span dir="ltr"><<a href="mailto:wkitty42@gmail.com" target="_blank">wkitty42@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 07/30/2018 10:43 PM, al so wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Is there an API to blacklist certain DNS domains which should get resolved?<br>
</blockquote>
<br>
<br></span>
do you mean blacklist them with NXDOMAIN even though they do exist?<br>
<br>
from dnsmasq.conf<br>
<br>
# block these domains with NXDOMAIN<br>
server=/<a href="http://example.com/" rel="noreferrer" target="_blank">example.com/</a><br>
server=/<a href="http://facebook.com/" rel="noreferrer" target="_blank">facebook.com/</a><br>
server=/<a href="http://fbcdn.net/" rel="noreferrer" target="_blank">fbcdn.net/</a><br>
server=/<a href="http://fbcdn.com/" rel="noreferrer" target="_blank">fbcdn.com/</a><br>
server=/<a href="http://facebook.net/" rel="noreferrer" target="_blank">facebook.net/</a><span class="HOEnZb"><font color="#888888"><br>
<br>
<br>
<br>
-- <br>
NOTE: No off-list assistance is given without prior approval.<br>
*Please keep mailing list traffic on the list unless*<br>
*a signed and pre-paid contract is in effect with us.*<br>
<br>
______________________________<wbr>_________________<br>
Dnsmasq-discuss mailing list<br>
<a href="mailto:Dnsmasq-discuss@lists.thekelleys.org.uk" target="_blank">Dnsmasq-discuss@lists.thekelle<wbr>ys.org.uk</a><br>
<a href="http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss" rel="noreferrer" target="_blank">http://lists.thekelleys.org.uk<wbr>/mailman/listinfo/dnsmasq-disc<wbr>uss</a><br>
</font></span></blockquote></div><br></div>