unbound: add blocklist-tld.conf mainly for zip & mov

2023-05-28 10:36:52 +03:00 · 2023-05-28 10:36:52 +03:00 · 5d00ccaf6b
parent 1b1514f993
commit 5d00ccaf6b
1 changed files with 8 additions and 0 deletions
--- a/etc/unbound/unbound.conf.d/blocklist-tld.conf
+++ b/etc/unbound/unbound.conf.d/blocklist-tld.conf
@ -0,0 +1,8 @@
+server:
+
+# Firefox automatic DoH to unfiltered DNS is especially unwanted in this case
+local-zone: "use-application-dns.net." always_nxdomain
+
+# Very high abuse potential
+local-zone: "zip." always_refuse
+local-zone: "mov." always_refuse