My experience with Malicious_2 feeds
-
After one week of using the Malicious_2 feed, I've decided to stop using it. It's huge and requires decent RAM/CPU power to run (not suitable for a low powered device).
More importantly, it breaks a lot of common website like wordpress.com. Have others has similar experience? What do people found to be the best compromise between safety and usability when adding feeds to PfBlockerNG? -
Quality over quantity.
Community driven lists sadly have the risk of becoming bloated as there is inevitably more motivation to add new entries, than there will be to delete expired or invalid ones.
I checked a random one and it had microsoft, paypal, pinterest, facebook and more listed.
-
Agree with @chrcoluk, some lists are full of domains you will not want to block. I’m not using a couple of the feeds in the Malicious list because they were creating too much noise for my situation.
-
@trilobite
Yea, I use about 1/2 the feeds in Malicious_2, basically chose the ones that give the least grief. Frankly, relying on lists that someone else decides on will always get some domains blocked that you want. Between being choosy (yea this takes time to tweak) with what lists I use, maintaining white lists and setting the TOP1M whitelist to the top 5k, I rarely have an issue. None of this is turn-key it is all trial and error and frankly never ends. Lists go from good to bad and vice versa, lists go away and new lists popup. I peak in there every week or two to validate that the lists I chose are still 'live' and being maintained.