[Dnsmasq-discuss] Feature suggest: combine --bogus-nxdomain

[Allen Coates]

It is going off at a tangent, but I have been experimenting with 
"real-time blacklists", for use with (say) a mail server.

If you set up an RTBL of blacklist.mydomain.co.uk, then:-

address=/br.blacklist.mydomain.co.uk/127.0.0.1

will return an entry for (and hence will blacklist) any host using the 
country code .br (Brazil)

Or you could also use something like:-

address=/badass.com.blacklist.mydomain.co.uk/127.0.0.1

to blacklist individual domains.

It has not been exhaustively tested, but it seems to work for the dud 
hostnames I have been trying to block from my mail server.

It also seems to work with IP addresses (with reversed octets), but that 
way round is even less thoroughly tested.

For What It's Worth...

Regards

Allen C