DNSBL List Format

House Of Cards · Sep 9, 2019, 12:33 AM

I have a quick question about the format of some lists you can find online.

Some lists just have sites listed, like...

abc.com
def.com
ghi.com

But some lists have an IP of either a black hole (0.0.0.0) or loopback (127.0.0.1) before them...

0.0.0.0 abc.com
127.0.0.1 def.com

How does pfBlockerNG handle importing these lists, and is there any issues with using a list with the IP addresses listed? Does pfBlockerNG simply strip the IP and use the domain in the blocklist?

I haven't been able to find any information about this anywhere... Any help would be greatly appreciated.

Thanks!

BBcan177 · Sep 11, 2019, 3:05 AM

Yes it will parse all those feed syntax. Also check out pfBlockerNG-devel which has an integrated feeds tab.

House Of Cards · Sep 12, 2019, 2:54 AM

Thanks for the information, and for ALL your hard work... It is appreciated by many, many people...

BBcan177 · Sep 12, 2019, 2:54 AM

@wormuths said in DNSBL List Format:

Thanks for the information, and for ALL your hard work... It is appreciated by many, many people...

Thanks for the Feedback, its appreciated!
Here are some screenshots and info of the upcoming version on my Patreon page: https://www.patreon.com/pfBlockerNG

tinetserv · Dec 1, 2019, 4:30 AM

DNSBL working great so far... have deployed many boxes for customers... looking forward for whats to come... would be very nice to have features like schedules for rules in pfBlocker/DNSBL and specially regex filtering like we had in squid... im willing to contrib in any ways possible with these... totally worth a patron membership now.