Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Dec 2007 11:18:18 +0800
From:      Erich Dollansky <oceanare@pacific.net.sg>
To:        Maxim Khitrov <mkhitrov@gmail.com>
Cc:        User Questions <freebsd-questions@freebsd.org>
Subject:   Re: Blocking undesirable domains using BIND
Message-ID:  <47746AFA.5080008@pacific.net.sg>
In-Reply-To: <26ddd1750712271246j14795cf3wf8e9727f0f7cc148@mail.gmail.com>
References:  <26ddd1750712271246j14795cf3wf8e9727f0f7cc148@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

I use hosts to block unwanted content but on per machine base.

I use currentlu this as a starting point and add private preferences to 
hosts.

http://www.mvps.org/winhelp2002/hosts.txt

Has bind a visible advantage in the response time?

Erich

Maxim Khitrov wrote:
> Hello,
> 
> I'm currently setting up a new firewall for my home network using
> FreeBSD 7. The firewall will also act as our local name server
> (authoritative for the local domain, and caching for everything else).
> One of the things I'd like to do with it is use BIND to block various
> undesirable domains (ad servers, malicious sites, etc.). The plan is
> to have a separate BIND config file which is included in the main one.
> In that file I map all the blocked domains to either the empty zone or
> perhaps my local web server that's just serving a blank page for any
> request. Haven't decided which way is better yet. This file is updated
> periodically (once a week maybe) and BIND is then told to reload the
> config. That's the plan as it stands now, eventually I hope to add a
> web interface to the system for adding and removing blocked domains.
> 
> My question for you guys is if know any _reliable_ sources for getting
> that list of domains in the first place? I currently use the hosts
> file on all my machines, which is about 2MB in size and hasn't been
> updated in several years. I'll definitely import all of those entries
> myself, but it would be good if I could periodically pull an updated
> list from somewhere else. The following site has a pretty decent
> collection of ad servers, though it's a bit short compared to what I
> already have: http://pgl.yoyo.org/adservers/. It even provides the
> list in a BIND format, meaning that I don't need to do any additional
> processing with it. Just fetch the page and reload BIND. This,
> however, is not one of my requirements. I'm perfectly happy getting
> just a list of the domains (in any format), and then processing them
> into a BIND config file myself. Just need good sources. What are your
> recommendations?
> 
> - Max
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?47746AFA.5080008>