From aead1994020e41122c27c442caacbe97e383e4f9 Mon Sep 17 00:00:00 2001 From: Minoplhy Date: Sat, 2 Jan 2021 21:35:18 +0700 Subject: [PATCH 1/6] Change policy.DENY >> policy.REFUSE --- configuration/kresd.conf | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/configuration/kresd.conf b/configuration/kresd.conf index fefa221..527d72e 100644 --- a/configuration/kresd.conf +++ b/configuration/kresd.conf @@ -15,13 +15,15 @@ modules = { } -- Cache size https://knot-resolver.readthedocs.io/en/stable/daemon-bindings-cache.html#sizing - cache.size = 100 * MB -- policy help : https://knot-resolver.readthedocs.io/en/stable/modules-policy.html -- This is Just a Blocklist -policy.add(policy.rpz(policy.DENY, '/etc/knot-resolver/list/energized-ultimate.rpz',true)) -policy.add(policy.rpz(policy.DENY, '/etc/knot-resolver/list/denylist.rpz',true)) -policy.add(policy.rpz(policy.DENY, '/etc/knot-resolver/list/oisd.rpz',true)) +policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-ultimate.rpz',true)) +policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/denylist.rpz',true)) +policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/oisd.rpz',true)) +policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/pgl-adserver.rpz',true)) +policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-social.rpz',true)) +policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-regional.rpz',true)) policy.add(policy.rpz(policy.PASS, '/etc/knot-resolver/list/allowlist.rpz',true)) policy.add(policy.all(policy.QTRACE)) From 0817f335653221d5313a96425153caba666fd0c0 Mon Sep 17 00:00:00 2001 From: Minoplhy Date: Sat, 2 Jan 2021 21:37:16 +0700 Subject: [PATCH 2/6] morel! --- filters/lists.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/filters/lists.txt b/filters/lists.txt index 427335e..5825519 100644 --- a/filters/lists.txt +++ b/filters/lists.txt @@ -1,3 +1,6 @@ # List of third party filters besides my personal list https://block.energized.pro/ultimate/formats/rpz.txt https://rpz.oisd.nl/ +https://pgl.yoyo.org/adservers/serverlist.php?hostformat=rpz&showintro=1&mimetype=plaintext +https://block.energized.pro/extensions/social/formats/rpz.txt +https://block.energized.pro/extensions/regional/formats/rpz.txt From 470f1835cd4e2fadba49ad49a6256715c21fbc06 Mon Sep 17 00:00:00 2001 From: Minoplhy Date: Sat, 2 Jan 2021 21:38:08 +0700 Subject: [PATCH 3/6] download all filters --- download.sh | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 download.sh diff --git a/download.sh b/download.sh new file mode 100644 index 0000000..a876f34 --- /dev/null +++ b/download.sh @@ -0,0 +1,8 @@ +#!/bin/sh +wget -O /etc/knot-resolver/list/energized-ultimate.rpz https://block.energized.pro/ultimate/formats/rpz.txt +wget -O /etc/knot-resolver/list/oisd.rpz https://rpz.oisd.nl +wget -O /etc/knot-resolver/list/allowlist.rpz https://raw.githubusercontent.com/minoplhy/doh-dot-haproxy/beta-expos/filters/allowlist.rpz +wget -O /etc/knot-resolver/list/denylist.rpz https://raw.githubusercontent.com/minoplhy/doh-dot-haproxy/beta-expos/filters/denylist.rpz +wget -O /etc/knot-resolver/list/pgl-adserver.rpz https://pgl.yoyo.org/adservers/serverlist.php?hostformat=rpz&showintro=1&mimetype=plaintexthttps://pgl.yoyo.org/adservers/serverlist.php?hostformat=rpz&showintro=1&mimetype=plaintext +wget -O /etc/knot-resolver/list/energized-social.rpz https://block.energized.pro/extensions/social/formats/rpz.txt +wget -O /etc/knot-resolver/list/energized-regional.rpz https://block.energized.pro/extensions/regional/formats/rpz.tx From 8ef3a6f4694be78145550cbfaace17c0ff7a033b Mon Sep 17 00:00:00 2001 From: Minoplhy Date: Sat, 2 Jan 2021 21:40:57 +0700 Subject: [PATCH 4/6] **Recommend** --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 9acd5a4..0e1d0b6 100644 --- a/README.md +++ b/README.md @@ -26,3 +26,4 @@ Query # Recommendation 1. [knot-resolver](https://knot-resolver.cz) **Recommend** using upstream repository on debian +2. Download.sh **Recommend** if you want to download all the default filters used in kresd.conf(knot-resolver configuration) From d2c95d74c847f00e1eb5a6a19afd1f211aee433e Mon Sep 17 00:00:00 2001 From: Minoplhy Date: Sat, 2 Jan 2021 21:41:42 +0700 Subject: [PATCH 5/6] Rename download.sh to download-filters.sh --- download.sh => download-filters.sh | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename download.sh => download-filters.sh (100%) diff --git a/download.sh b/download-filters.sh similarity index 100% rename from download.sh rename to download-filters.sh From 9a03101ec1d3bafac812f016d61d117f9eaebb41 Mon Sep 17 00:00:00 2001 From: Minoplhy Date: Sat, 2 Jan 2021 21:48:07 +0700 Subject: [PATCH 6/6] Update kresd.conf --- configuration/kresd.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/configuration/kresd.conf b/configuration/kresd.conf index 527d72e..03af617 100644 --- a/configuration/kresd.conf +++ b/configuration/kresd.conf @@ -15,6 +15,7 @@ modules = { } -- Cache size https://knot-resolver.readthedocs.io/en/stable/daemon-bindings-cache.html#sizing +-- "For personal and small office use-cases cache size around 100 MB is more than enough." -cz.nic cache.size = 100 * MB -- policy help : https://knot-resolver.readthedocs.io/en/stable/modules-policy.html