[Dnsmasq-discuss] [RFC] dns: add option to ban domains

[wkitty42 at gmail.com]

On 08/08/2017 04:06 AM, Matteo Croce wrote:
> 2017-08-08 4:26 GMT+02:00  <wkitty42 at gmail.com>:
>> On 08/07/2017 06:02 PM, Matteo Croce wrote:
>>>
>>> I propose adding an option to allow banning some domains.
>>>
>>> add `--ban-hosts' which accepts a file name which contains a list of
>>> domains to block, one per line.
>>> Domains are blocked by simply returning NXDOMAIN.
>>
>> is the following in dnsmasq.conf broken???
>>
>> # block these domains with NXDOMAIN
>> server=/example.com/
>> server=/facebook.com/
>> server=/fbcdn.net/
>> server=/fbcdn.com/
>> server=/facebook.net/
> 
> Nope, but it's unpractical when the ban list is huge

impractical?

> # wc -l /etc/banhosts
> 13090 /etc/banhosts
> 
> also, having it in a separate file will allow updating it without
> messing with the configuration file


well, you asked for comments so i did... as for separate files, can't it be done 
in another file that is included in the main one? i can't remember if dnsmasq 
allows one to include additional files or not...

eg: include bannedhosts.conf


maybe i'm just not seeing the overall point as compared to existing capabilities?


-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*