From cabf7c570dbf5a40046434256447553e1bfc0177 Mon Sep 17 00:00:00 2001 From: Mikaela Suomalainen Date: Thu, 20 Aug 2020 18:33:51 +0300 Subject: [PATCH] blocklist.conf: add [www.]google-analytics.com. --- etc/unbound/unbound.conf.d/blocklist.conf | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/etc/unbound/unbound.conf.d/blocklist.conf b/etc/unbound/unbound.conf.d/blocklist.conf index 857316db..a90befee 100644 --- a/etc/unbound/unbound.conf.d/blocklist.conf +++ b/etc/unbound/unbound.conf.d/blocklist.conf @@ -2,3 +2,8 @@ # this Unbound using DNS-over-TLS / DNSCrypt without the need for it to use # separate DNS. local-zone: "use-application-dns.net." always_nxdomain + +# I have something very aggressively attempting to resolve these two domains +# and errorring on DNSSEC due to upstream resolver blocking them. +local-zone: "google-analytics.com." always_nxdomain +local-zone: "www.google-analytics.com." always_nxdomain