sfeakes / ipfire-scripts Goto Github PK

Someone in the IPFire forum recently said this DNS script was no longer maintained. Is that the case?

If it's still maintained, does it work with the current version of IPFire (2.27 update 171)?

Hi sfeakes,

I tried your script. Working nice so far. Is it possible to get these lists working?
https://github.com/crazy-max/WindowsSpyBlocker/tree/master/data/dnscrypt/win7
https://github.com/crazy-max/WindowsSpyBlocker/tree/master/data/dnscrypt/win10

I tried to add the text files in raw format. For example: https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/dnscrypt/win7/extra.txt

This should work:

bash dns_blocklist.sh -s 1,2,3,5,12,13,14,"https://easylist.to/easylist/fanboy-social.txt","https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/dnscrypt/win7/extra.txt","https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/dnscrypt/win7/spy.txt"

But the Windows 7 Extra- and Spywarelist is not working. Any suggestions?

Hi,
while trying to use this script for IPFire core 111 (unbound) I noticed that whitelisting a domain does actually not work. Blacklisting, however, obviously works perfectly well.

I tried to add an entry Twitter.com to a file whitelist.hosts and executed the script using parameter -w /root/bin/whitelist.hosts.

Could you pls. check this?

Thanks,
Michael

This is not an issue. I'm sharing my config, which someone might find useful.

I found that one or more of the default lists block sites that I need when clicking on links in emails eg from the BBC (bbcmail.com). This is undesirable for me: I'd like to visit the links! I could whitelist the link but I'm guessing there'll be more, and I don't want to be chasing blocked sites forever!

I found another list, which passes the sniff test for me: https://oisd.nl/. Their claim is that you won't find any false positives and after two weeks, I haven't. I'm using the big list (there are three altogether).

The readme for the dns_blocklist.sh script suggests updating fcrontab file. An alternative is to create a script and drop it in the /etc/fcron.daily, /etc/fcron.weekly, etc folder.

The list I'm using gets updates frequently. I've therefore put my script in the /etc/fcron.daily folder.

My script, named update-dns-blocklist.sh, is:

#!/bin/bash
# The default list blacklists sites as such bbcmail.co.uk, which results in links in BBC emails
# not working. Use this list instead:
/root/bin/dns_blocklist.sh -r refuse -w /var/ipfire/dhcp/whitelist -b /var/ipfire/dhcp/blacklist -s https://big.oisd.nl/

Thank you @sfeakes for providing this excellent script.

How do you disable ad blocking?