dns-zone-blacklist - GitLite

KO | EN

gitlite — search

#javascript #react #golang #deep-learning #macos #nodejs #awesome #cli #kubernetes #pytorch #ios #mcp #openai #open-source

dns-zone-blacklist

(★ 170)

This project generates dnsmasq, bind and unbound zone files to be used in DNS based AD Blockers.

File Explorer

Download Latest Version (.zip)

- - unbound-nxdomain.conf
  - unbound.conf
- deploy.key.enc
- deploy.sh
- dns-zone-blacklist-test.sh
- Dockerfile
- bind-nxdomain.blacklist
- bind-nxdomain.blacklist.checksum
- null.zone.file
- zones.blacklist
- zones.blacklist.checksum
- dnsmasq-server.blacklist
- dnsmasq-server.blacklist.checksum
- dnsmasq.blacklist
- dnsmasq.blacklist.checksum
- unbound-nxdomain.blacklist
- unbound-nxdomain.blacklist.checksum
- unbound.blacklist
- unbound.blacklist.checksum
.gitignore
.travis.yml
build.js
custom.blacklist.json
custom.whitelist.json
LICENSE
package-lock.json
package.json
README.md
README.template.md

# Installation Guide

1. Get the code

git clone https://github.com/oznu/dns-zone-blacklist

Downloads the entire project code from GitHub to your computer.

cd dns-zone-blacklist

Moves into the project folder you just downloaded.

2. Docker

Easy Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Docker Desktop Needed to build and run containers. Install it and keep it running in the background.

docker build -f .travis-ci/Dockerfile -t dns-zone-blacklist .

Builds a runnable image based on the Dockerfile.

docker run -p 8080:80 dns-zone-blacklist

Runs the built image as an actual container.

✅ Run docker compose ps to check the containers are Up. If the README mentions a port, open http://localhost:PORT in your browser.

3. Node.js

Easy

Prerequisites

Git Needed to download the project code from GitHub.
Node.js Node.js must be installed to use npm. The LTS version is recommended.

npm install

Downloads and installs the libraries listed in package.json.

✅ After running the command, open the address shown in the terminal (usually something like http://localhost:3000) in your browser.

Pulled directly from this repo's README.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

[![Travis branch](https://img.shields.io/travis/oznu/dns-zone-blacklist/master.svg)](https://travis-ci.org/oznu/dns-zone-blacklist)

# DNS Zone Blacklist Generator

This project generates a zone file for [BIND](https://en.wikipedia.org/wiki/BIND), [Dnsmasq](https://en.wikipedia.org/wiki/Dnsmasq) and [Unbound](https://en.wikipedia.org/wiki/Unbound_(DNS_server)) DNS servers using data from the [StevenBlack/hosts](https://github.com/StevenBlack/hosts) project. The generated zone files can be used to block ads and malware for an entire network when used with a local DNS server.

DNS based ad blockers can support wildcard entries. This tool filters out any subdomains of known adware or malware domains, reducing the number of zone entries required from **82,077** down to **50,115**.

| DNS Server | Response Type | Download  | SHA256 Checksum |
| ---------- |:-------------:|:---------:|:---------------:|
| BIND | 0.0.0.0 | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/bind/zones.blacklist) | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/bind/zones.blacklist.checksum) |
| BIND (RPZ) | NXDOMAIN | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/bind/bind-nxdomain.blacklist) | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/bind/bind-nxdomain.blacklist.checksum) |
| Dnsmasq | 0.0.0.0 | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/dnsmasq/dnsmasq.blacklist) | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/dnsmasq/dnsmasq.blacklist.checksum) |
| Dnsmasq | NXDOMAIN | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/dnsmasq/dnsmasq-server.blacklist) | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/dnsmasq/dnsmasq-server.blacklist.checksum) |
| Unbound | 0.0.0.0 | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/unbound/unbound.blacklist) | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/unbound/unbound.blacklist.checksum) |
| Unbound | NXDOMAIN | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/unbound/unbound-nxdomain.blacklist) | [link](https://raw.githubusercontent.com/oznu/dns-zone-blacklist/master/unbound/unbound-nxdomain.blacklist.checksum) |

## Blacklist Updates

The blacklists are updated every 24 hours with the latest data from [StevenBlack/hosts](https://github.com/StevenBlack/hosts). The builds logs are publicly available on [Travis CI](https://travis-ci.org/oznu/dns-zone-blacklist) and each zone file is tested to be valid before publishing.

## Building the Blacklist

The blacklist can be generated using [Node.js 8.4.0](https://nodejs.org) or later.

Install:

```
git clone https://github.com/oznu/dns-zone-blacklist.git
cd dns-zone-blacklist

npm install
```

Then build:

```
node build.js
```

The compiled blacklist files will be saved to the `./bind`, `./dnsmasq` and `./unbound` a directories in the root of the project.

### Custom Entries

Custom entries can be added to the custom.blacklist.json file in the root of this project before building.

### Whitelist

Any domains you wish to exclude from the blacklist can be added to the custom.whitelist.json file in the root of this project before building.