From owner-freebsd-questions@FreeBSD.ORG Fri Dec 28 03:18:32 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F001C16A420 for ; Fri, 28 Dec 2007 03:18:32 +0000 (UTC) (envelope-from oceanare@pacific.net.sg) Received: from smtpgate1.pacific.net.sg (smtpgate1.pacific.net.sg [203.120.90.31]) by mx1.freebsd.org (Postfix) with SMTP id 58D7D13C45A for ; Fri, 28 Dec 2007 03:18:31 +0000 (UTC) (envelope-from oceanare@pacific.net.sg) Received: (qmail 16865 invoked from network); 28 Dec 2007 03:18:30 -0000 Received: from adsl221.dyn112.pacific.net.sg (HELO P2120.somewherefaraway.com) (oceanare@210.24.112.221) by smtpgate1.pacific.net.sg with ESMTPA; 28 Dec 2007 03:18:26 -0000 Message-ID: <47746AFA.5080008@pacific.net.sg> Date: Fri, 28 Dec 2007 11:18:18 +0800 From: Erich Dollansky User-Agent: Thunderbird 2.0.0.6 (X11/20070826) MIME-Version: 1.0 To: Maxim Khitrov References: <26ddd1750712271246j14795cf3wf8e9727f0f7cc148@mail.gmail.com> In-Reply-To: <26ddd1750712271246j14795cf3wf8e9727f0f7cc148@mail.gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Cc: User Questions Subject: Re: Blocking undesirable domains using BIND X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Dec 2007 03:18:33 -0000 Hi, I use hosts to block unwanted content but on per machine base. I use currentlu this as a starting point and add private preferences to hosts. http://www.mvps.org/winhelp2002/hosts.txt Has bind a visible advantage in the response time? Erich Maxim Khitrov wrote: > Hello, > > I'm currently setting up a new firewall for my home network using > FreeBSD 7. The firewall will also act as our local name server > (authoritative for the local domain, and caching for everything else). > One of the things I'd like to do with it is use BIND to block various > undesirable domains (ad servers, malicious sites, etc.). The plan is > to have a separate BIND config file which is included in the main one. > In that file I map all the blocked domains to either the empty zone or > perhaps my local web server that's just serving a blank page for any > request. Haven't decided which way is better yet. This file is updated > periodically (once a week maybe) and BIND is then told to reload the > config. That's the plan as it stands now, eventually I hope to add a > web interface to the system for adding and removing blocked domains. > > My question for you guys is if know any _reliable_ sources for getting > that list of domains in the first place? I currently use the hosts > file on all my machines, which is about 2MB in size and hasn't been > updated in several years. I'll definitely import all of those entries > myself, but it would be good if I could periodically pull an updated > list from somewhere else. The following site has a pretty decent > collection of ad servers, though it's a bit short compared to what I > already have: http://pgl.yoyo.org/adservers/. It even provides the > list in a BIND format, meaning that I don't need to do any additional > processing with it. Just fetch the page and reload BIND. This, > however, is not one of my requirements. I'm perfectly happy getting > just a list of the domains (in any format), and then processing them > into a BIND config file myself. Just need good sources. What are your > recommendations? > > - Max > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >