{firefox,chromium}: add big.oisd.nl for uBlock Origin just in case with the lits cleanup

etc/firefox/policies/policies.json

@@ -53,8 +53,10 @@
 					"hasSeenPostInstall": true
 				},
 				"uBOLiteRedux@raymondhill.net": {
+					"defaultFiltering": "basic",
 					"disableFirstRunPage": true,
 					"noFiltering": [
+						"-all-urls",
 						"accountscenter.facebook.com",
 						"accountscenter.instagram.com",
 						"accounts.google.com",
@@ -79,15 +81,12 @@
 						"www.suomi.fi"
 					],
 					"rulesets": [
+						"-*",
 						"+default",
-						"+badware",
 						"+block-lan",
-						"+openphish-domains",
+						"+fin-0"
-						"+urlhaus-full",
+					],
-						"+fin-0",
+					"showBlockedCount": true
-						"+annoyances-cookies",
-						"+annoyances-overlays"
-					]
 				},
 				"uBlock0@raymondhill.net": {
 					"advancedSettings": [
@@ -135,28 +134,20 @@
 							"adguard-spyware-url",
 							"block-lan",
 							"easylist",
-							"easyprivacy",
 							"FIN-0",
 							"https://ads-for-open-source.readthedocs.io/en/latest/_static/lists/opensource-ads.txt",
-							"https://badblock.celenity.dev/abp/ethical_whitelist.txt",
 							"https://gitflic.ru/project/magnolia1234/bypass-paywalls-clean-filters/blob/raw?file=bpc-paywall-filter.txt",
 							"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener-AffiliateTagAllowlist.txt",
 							"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener.txt",
-							"https://raw.githubusercontent.com/Mikaela/gist/master/DNS/blocklist.txt",
 							"https://secure.fanboy.co.nz/fanboy-annoyance.txt",
 							"https://www.eff.org/files/effdntlist.txt",
-							"plowe-0",
+							"https://big.oisd.nl",
 							"ublock-abuse",
-							"ublock-annoyances",
 							"ublock-badware",
-							"ublock-cookies-adguard",
-							"ublock-cookies-easylist",
 							"ublock-filters",
 							"ublock-privacy",
 							"ublock-quick-fixes",
-							"ublock-unbreak",
+							"ublock-unbreak"
-							"urlhaus-1",
-							"user-filters"
 						]
 					},
 					"userSettings": [
@@ -608,7 +599,7 @@
 		"LegacySameSiteCookieBehaviorEnabled": false,
 		"NetworkPrediction": false,
 		"NewTabPage": true,
-		"OverrideFirstRunPage": "about:mozilla|https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-quick-guide|https://addons.mozilla.org/firefox/addon/noscript/",
+		"OverrideFirstRunPage": "about:mozilla|https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-quick-guide|https://addons.mozilla.org/firefox/addon/noscript/|https://github.com/uBlockOrigin/uBOL-home/blob/main/README.md#ubo-lite",
 		"PDFjs": {
 			"EnablePermissions": false,
 			"Enabled": true

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -53,28 +53,20 @@
 						"adguard-spyware-url",
 						"block-lan",
 						"easylist",
-						"easyprivacy",
 						"FIN-0",
 						"https://ads-for-open-source.readthedocs.io/en/latest/_static/lists/opensource-ads.txt",
-						"https://badblock.celenity.dev/abp/ethical_whitelist.txt",
 						"https://gitflic.ru/project/magnolia1234/bypass-paywalls-clean-filters/blob/raw?file=bpc-paywall-filter.txt",
 						"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener-AffiliateTagAllowlist.txt",
 						"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener.txt",
-						"https://raw.githubusercontent.com/Mikaela/gist/master/DNS/blocklist.txt",
 						"https://secure.fanboy.co.nz/fanboy-annoyance.txt",
 						"https://www.eff.org/files/effdntlist.txt",
-						"plowe-0",
+						"https://big.oisd.nl",
 						"ublock-abuse",
-						"ublock-annoyances",
 						"ublock-badware",
-						"ublock-cookies-adguard",
-						"ublock-cookies-easylist",
 						"ublock-filters",
 						"ublock-privacy",
 						"ublock-quick-fixes",
-						"ublock-unbreak",
+						"ublock-unbreak"
-						"urlhaus-1",
-						"user-filters"
 					]
 				},
 				"userSettings": [
@@ -113,8 +105,10 @@
 				]
 			},
 			"ddkjiahejlhfcafbddmgiahcphecmpfh": {
+				"defaultFiltering": "basic",
 				"disableFirstRunPage": true,
 				"noFiltering": [
+					"-all-urls",
 					"accountscenter.facebook.com",
 					"accountscenter.instagram.com",
 					"accounts.google.com",
@@ -139,15 +133,12 @@
 					"www.suomi.fi"
 				],
 				"rulesets": [
+					"-*",
 					"+default",
-					"+badware",
 					"+block-lan",
-					"+openphish-domains",
+					"+fin-0"
-					"+urlhaus-full",
+				],
-					"+fin-0",
+				"showBlockedCount": true
-					"+annoyances-cookies",
-					"+annoyances-overlays"
-				]
 			},
 			"nngceckbapebfimnlniiiahkandclblb": {
 				"environment": {

etc/opt/chromium/policies/managed/doh-adguard-family.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://family.adguard-dns.com/dns-query?dns"
 }

etc/opt/chromium/policies/managed/doh-adguard-unfiltered.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://unfiltered.adguard-dns.com/dns-query?dns"
 }

etc/opt/chromium/policies/managed/doh-cloudflare-security.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://security.cloudflare-dns.com/dns-query?dns"
 }

etc/opt/chromium/policies/managed/doh-dns0-kids.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://kids.dns0.eu/?dns"
 }

etc/opt/chromium/policies/managed/doh-dns0-open.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://open.dns0.eu/?dns"
 }

etc/opt/chromium/policies/managed/doh-dns0-zero.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://zero.dns0.eu/"
 }

etc/opt/chromium/policies/managed/doh-dns0.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://dns0.eu/?dns"
 }

etc/opt/chromium/policies/managed/doh-dns4eu-noads.json

@@ -0,0 +1,4 @@
+{
+	"DnsOverHttpsMode": "secure",
+	"DnsOverHttpsTemplates": "https://noads.joindns4.eu/dns-query?dns"
+}

etc/opt/chromium/policies/managed/doh-dns4eu.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://protective.joindns4.eu/dns-query?dns"
 }

etc/opt/chromium/policies/managed/doh-google.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://dns.google/dns-query?dns"
 }

etc/opt/chromium/policies/managed/doh-google64.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://dns64.dns.google/dns-query?dns"
 }

etc/opt/chromium/policies/managed/doh-private-ecs.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://unfiltered.adguard-dns.com/dns-query?dns https://open.dns0.eu/?dns"
 }

etc/opt/chromium/policies/managed/doh-quad9-ecs.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://dns11.quad9.net/dns-query?dns https://dns11.quad9.net:5053/dns-query?dns"
 }

etc/opt/chromium/policies/managed/doh-quad9.json

@@ -1,4 +1,4 @@
 {
-	"DnsOverHttpsMode": "automatic",
+	"DnsOverHttpsMode": "secure",
 	"DnsOverHttpsTemplates": "https://dns.quad9.net/dns-query?dns https://dns.quad9.net:5053/dns-query?dns"
 }

etc/opt/chromium/policies/managed/doh-unlocked-unset.json

@@ -1,3 +1,3 @@
 {
-	"DnsOverHttpsMode": "automatic"
+	"DnsOverHttpsMode": "secure"
 }

etc/unbound/unbound.conf.d/dot-dns4eu.conf

@@ -0,0 +1,44 @@
+# https://joindns4.eu - public DNS resolver primarily for European users from
+# the European Union
+
+server:
+	# Debian ca-certificates location
+	#tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
+	# Fedora
+	#tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
+	# Use system certificates no matter where they are
+	tls-system-cert: yes
+	# Quad9 says pointless performance impact on forwarders.
+	# https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization
+	qname-minimisation: no
+
+forward-zone:
+	name: "."
+	forward-tls-upstream: yes
+	# DNS4EU Unfiltered
+	#forward-addr: 2a13:1001::86:54:11:200@853#unfiltered.joindns4.eu
+	#forward-addr: 2a13:1001::86:54:11:100@853#unfiltered.joindns4.eu
+	#forward-addr: 86.54.11.200@853#unfiltered.joindns4.eu
+	#forward-addr: 86.54.11.100@853#unfiltered.joindns4.eu
+	# DNS4EU Protective
+	forward-addr: 2a13:1001::86:54:11:201@853#protective.joindns4.eu
+	forward-addr: 2a13:1001::86:54:11:1@853#protective.joindns4.eu
+	forward-addr: 86.54.11.201@853#protective.joindns4.eu
+	forward-addr: 86.54.11.1@853#protective.joindns4.eu
+	# DNS4EU Child Protection and Adblocking
+	#forward-addr: 2a13:1001::86:54:11:211@853#child-noads.joindns4.eu
+	#forward-addr: 2a13:1001::86:54:11:11@853#child-noads.joindns4.eu
+	#forward-addr: 86.54.11.211@853#child-noads.joindns4.eu
+	#forward-addr: 86.54.11.11@853#child-noads.joindns4.eu
+	# DNS4EU Child Protection
+	#forward-addr: 2a13:1001::86:54:11:212@853#child.joindns4.eu
+	#forward-addr: 2a13:1001::86:54:11:12@853#child.joindns4.eu
+	#forward-addr: 86.54.11.212@853#child.joindns4.eu
+	#forward-addr: 86.54.11.12@853#child.joindns4.eu
+	# DNS4EU Adblocking
+	#forward-addr: 2a13:1001::86:54:11:213@853#noads.joindns4.eu
+	#forward-addr: 2a13:1001::86:54:11:13@853#noads.joindns4.eu
+	#forward-addr: 86.54.11.213@853#noads.joindns4.eu
+	#forward-addr: 86.54.11.13@853#noads.joindns4.eu
+
+# vim: filetype=unbound.conf