ipfire-scripts icon indicating copy to clipboard operation
ipfire-scripts copied to clipboard

Tip for configuring and using an alternative blocklist

Open Praful opened this issue 2 years ago • 1 comments

This is not an issue. I'm sharing my config, which someone might find useful.

I found that one or more of the default lists block sites that I need when clicking on links in emails eg from the BBC (bbcmail.com). This is undesirable for me: I'd like to visit the links! I could whitelist the link but I'm guessing there'll be more, and I don't want to be chasing blocked sites forever!

I found another list, which passes the sniff test for me: https://oisd.nl/. Their claim is that you won't find any false positives and after two weeks, I haven't. I'm using the big list (there are three altogether).

The readme for the dns_blocklist.sh script suggests updating fcrontab file. An alternative is to create a script and drop it in the /etc/fcron.daily, /etc/fcron.weekly, etc folder.

The list I'm using gets updates frequently. I've therefore put my script in the /etc/fcron.daily folder.

My script, named update-dns-blocklist.sh, is:

#!/bin/bash
# The default list blacklists sites as such bbcmail.co.uk, which results in links in BBC emails
# not working. Use this list instead:
/root/bin/dns_blocklist.sh -r refuse -w /var/ipfire/dhcp/whitelist -b /var/ipfire/dhcp/blacklist -s https://big.oisd.nl/

Thank you @sfeakes for providing this excellent script.

Praful avatar Oct 15 '23 18:10 Praful

Thank you @Praful, great tipp, because i'm also aware about overblocking. I modified my fcrontab like you suggested and will test your tipp for a few weeks, maybe the modification will be permanent. Thank you in advance!

Edit: and many thanks to @sfeakes for his wonderful script, which works seamlessly with my ipfire!

ed-gamer avatar Aug 23 '25 15:08 ed-gamer