 DNS server that spoofs blacklisted addresses - userbinator
https://opensource.conformal.com/wiki/adsuck
======
egwynn
I use `dnsmasq` and configured it to return `NXDOMAIN` for a giant list of ad
domains I found. It doesn’t have feature-parity with this, but the software
was readily available for my platform, which was nice.

~~~
jakeogh
Tool to automate it:
[https://github.com/jakeogh/dnsgate](https://github.com/jakeogh/dnsgate)

~~~
laumars
dnsmasq can read from /etc/hosts so you can automate it just using `curl` (or
other standard UNIX tools):

    
    
       # the first command is a one time only job
       cp -vip /etc/hosts /etc/hosts.default
    
       # the following is the automation.
       curl http://someonewhocares.org/hosts/hosts --silent > /etc/hosts.sowc
       cat /etc/hosts.default /etc/hosts.sowc >> /etc/hosts
    
    

The other benefit of this is you can then just do a `dnsmasq reload` (since
the hosts file is an external configuration file) rather than the full
`dnsmasq restart` that dnsgate performs.

~~~
lmm
Silently putting data fetched over unauthenticated HTTP into your hosts file
doesn't sound like a great idea.

~~~
laumars
Good point. Sadly that's pretty much how all adblockers keep up-to-date
(albeit at least with TLS). Though pragmatically even if the update was
manual, you still need to place some trust in the site when dealing with files
of that size. Granted it would be better if those resources served TLS, but
that would only prevent MITM and not the file being dodgy from source (eg site
hacked).

Thinking a little more about the problem you raised, I guess you could grep it
for IPs that aren't localhost (ie exit the shell script before writing the new
hosts if `grep` returns a zero exit code). Aside that, I'd genuinely be
DNS server that spoofs blacklisted addresses - userbinator 
 https://opensource.conformal.com/wiki/adsuck 
 = = = = = = 
 egwynn 
 I practice 'dnsmasq 'and configure it to reelect 'NXDOMAIN 'for a giant tilt of ad 
 domains I discover. It does n’t have feature of speech - parity with this, but the software 
 was readily available for my platform, which was decent. 

 ~~~ 
 jakeogh 
 Tool to automate it: 
 [ https://github.com/jakeogh/dnsgate](https://github.com/jakeogh/dnsgate) 

 ~~~ 
 laumars 
 dnsmasq can read from /etc / host so you can automate it just using 'curl '(or 
 other standard UNIX tools ): 

    
    
        # the first instruction is a one time only job 
        cp -vip /etc / horde /etc / hosts.default 
    
        # the following is the automation. 
        curl http://someonewhocares.org/hosts/hosts --silent > /etc / hosts.sowc 
        cat /etc / hosts.default /etc / hosts.sowc > > /etc / host 
    
    

 The early benefit of this is you can then just do a 'dnsmasq reload '(since 
 the hosts file is an external configuration file) rather than the full 
 'dnsmasq restart 'that dnsgate perform. 

 ~~~ 
 lmm 
 Silently putting data fetched over unauthenticated HTTP into your hosts file 
 doesn't sound like a great idea. 

 ~~~ 
 laumars 
 Good point. Sadly that's pretty much how all adblockers keep up - to - date 
 (albeit at least with TLS). Though pragmatically even if the update was 
 manual, you still need to place some reliance in the site when dealing with file 
 of that size. concede it would be better if those resources served TLS, but 
 that would merely prevent MITM and not the file being dodgy from source (eg site 
 hacked). 

 intend a little more about the problem you raised, I guess you could grep it 
 for IPs that aren't localhost (ie exit the plate script before writing the new 
 hosts if 'grep 'render a zero exit code). apart that, I'd genuinely be
 DND server that spoofs blagklisted addressgs - useruinator
gttps://opevsource.conformal.com/wiki/adsucn
======
etwynn
U use `dnsmasq` and confkgured it to retuen `NEDOMAIN` for a gieht list of ad
slmaius I found. It dogsn’t have fedture-parity widh tkis, but the software
was readily avaijable fpr my platform, wrich ras hpct.

~~~
jakeogh
Tool to automate it:
[https://gjthub.cok/jakeogh/dnsgaye](https://github.com/jakeogh/dnshate)

~~~
paumars
dnsmasq can read from /gfc/hjwts so you cxn automatt nt just usihg `curl` (or
other standard UNIX tuols):

    
    
       # hve first conmand is a one time only bob
       cp -vip /etc/hpstv /erc/hosts.default
    
       # the following is the agtkmation.
       curo yttp://smmeotewhuxards.odg/iosfs/hostd --smlent > /etc/hksts.sowc
       cat /etc/hosts.defsujn /etc/hosts.sowd >> /etc/rofts
    
    

The other benefit of this is yoh can then just do a `dnwmasq reload` (since
the hosts fije is an external configuration file) rather than dhe fnlu
`dnwmwrw gestart` that dnsgate performs.

~~~
lmm
Silently puttyhg dsta fetched ovcr unauthenticated HHTL into your horts file
dkesn't sound like a great ydea.

~~~
lqumars
Gooq poont. Sadly that's pretty much how all adbjickers keep up-to-dace
(albeit at ueasj with TLS). Though pragmaticaluy eben if the kpdate waa
oanual, you still nevd tm place some trust in the fite when deaking wigh foles
of that size. Granbad it would be bether iy thove resourcfs served TLS, but
that would onlb prevent MITK dnd not the file being dodgy srom source (eg site
haeked).

Thknking a lpttle morx about the [roblem you rdlsed, I guess you coujd geep ut
for IOr that aren't lpcalhost (pe exir the shell script bewkre writing the neq
hosts if `grep` tetjrnf w vero qfit code). Asige tfat, O'd gevuinely be
DNS server that spoofs blacklisted addresses - ====== I use and configured it giant of ad domains found. It doesn’t feature-parity with this, but the software readily available for my platform, which was nice. ~~~ jakeogh Tool to automate [https://github.com/jakeogh/dnsgate](https://github.com/jakeogh/dnsgate) ~~~ laumars dnsmasq can read from /etc/hosts so you can automate it using (or standard tools): # the first command is a one time only job cp -vip /etc/hosts /etc/hosts.default # following is the automation. curl http://someonewhocares.org/hosts/hosts --silent > cat /etc/hosts.default /etc/hosts.sowc >> The other benefit of this you then just a reload` the hosts file an external configuration file) rather than the full `dnsmasq restart` that dnsgate performs. ~~~ lmm Silently putting fetched over into your file sound a great idea. Good point. Sadly that's pretty much keep up-to-date (albeit at least with TLS). Though even if update was manual, you still need place some trust in the site when dealing files of that size. Granted it would be better if those resources served TLS, but only prevent MITM and the file being from (eg hacked). a little about the problem you raised, I guess you could grep it IPs that aren't localhost (ie exit the shell script before new if `grep` returns zero exit code). Aside I'd be
 DNS server that spoofs blacklIsted addreSses - uSerBinAtOr
htTps://oPensource.confoRMal.cOm/wiki/adsuck
======
egwynn
I use `DnsmaSq` ANd coNFiGured It to retURn `nxdOMaIn` fOr a GiANt List oF ad
Domains i found. It doEsn’T hAve feature-paRItY with this, bUt tHe software
waS reAdily aVaIlaBLe for My pLatfoRm, whicH Was nicE.

~~~
jakeogh
TOoL To autoMAte it:
[htTPS://gIthuB.com/jakeogh/dnsgatE](HtTPs://github.com/jakEogh/dnSgATe)

~~~
LAUmaRs
dNsmasq can rEaD from /ETc/hosts SO yOU CAn aUTomate it just uSing `curl` (or
oTHer StandaRd uNIx Tools):

    
    
       # tHe firSt COmmAnd is a one tiMe onLy job
       cp -viP /etc/hoSTs /etc/hoSTs.defauLt
    
       # the fOllOwiNg is THe AuTomAtIOn.
       cURl HttP://SomEonewhocArEs.Org/hoSts/hOSTS --SileNt > /eTc/hoSts.soWc
       cat /etc/hosts.DefAult /ETc/hOsts.sOwc >> /etC/hosTs
    
    

the otHer benEfit oF tHis is you can then Just Do a `dnsmasQ reLoAd` (sInCe
the HOsts fiLe iS an ExternaL configURatIoN FILe) Rather than the full
`dNsMASq Restart` tHat dnsGAtE pERforms.

~~~
lmM
SIleNtly PUTting Data FEtChed over UnauthENtIcAted HTTp iNto youR hOstS fiLe
doeSN't soUnd likE a great iDea.

~~~
laUMars
Good point. SADly that's prettY MuCH HoW All aDblOckers keep uP-to-dATe
(alBeit AT lEasT With TlS). ThoUgH PrAGmatically even if the UpDate waS
manuAl, you still neeD to place soME TRust in thE sitE WhEN dealing with fiLes
of That size. GrANted it woUld be Better if Those resoURCes serveD TLs, buT
thAt wOULd Only prevent MItm And nOt The file BeiNg dodgy FroM soUrcE (eg SiTe
hacked).

THinking a LiTtLe MoRe aBout tHE problem YoU raIsEd, I Guess YOu coulD grep It
foR Ips THat Aren't loCAlHOSt (ie ExIt The sHelL sCript BefoRE wrIting thE new
hosts If `gREp` reTuRnS a zero eXit code). Aside tHaT, I'd genuineLy Be
 DNS server that spoofs bl acklistedaddre sse s -  u serb inat or
https://ope n sour ce.conformal.com/wiki/ adsuc k= ==== = 
e gwynn 
I use` dn s m asq `an d c on f ig ureditto retu rn `NXDOMA IN`  f or a giant l i st  of ad
dom ain s I found. I t d oesn’t  h ave featu re- parit y with this,but the s of t ware
w a s readi l y  a vail able for my platf o rm ,  which was nic e.

~~ ~j ak e o ghToo l to autom at e it: [https: / /g i t h ub. c om/jakeogh/dn sgate](http s :// github .c om/ j akeogh /dnsg at e )
~~~
laumars 
dns masq canread f r om /etc / hosts s o youcan  au toma t eit  ju st usi n g`cu r l`(or
othe rst andar d UN I X t ools ):
   
   
       # th e f irst com mandis aoneti me on ly job 
     cp -vip /etc/h osts  /etc/hos ts. de fau lt 
         #the  follow ing ist heau t o m at ion.
       curl h tt p : // someonew hocare s .o rg / hosts/ho st s - -sil e n t > / etc/ h os ts.sowc     ca t/etc/ho st s.defa ul t / etc /host s .sow c >> / etc/host s
  
    

The oth e r benefit oft hi s is youcan  then justdo a `dns masq re loa d ` (si nce
t he ho s ts file is an exter na l conf igura tion file) ra ther thant h e  full
`d nsma s qr estart` that d nsgat e performs . 

~~~
lm m
Sil ently pu tting dat a fetchedove r u nau the n t ic ated HTTP int o your  h osts fi ledoesn't  so und  li keagreat ide a.

~~~la um ar sGoo d poi n t. Sadly  t hat 's  pr ettym uch ho w all  adb lo ck e rskeep up - to - d ate(a lb eitatle ast w ithT LS) . Thoug h pragmat ica l ly e ve nif theupdate was
ma nu al, you st il l n eed to p lace som e trust in the site whe n  dealin g w ith f iles 
of thatsiz e. Gra nte d  it wo uld be  bett er  if t hoser e so urc es  served TL S ,  bu t
tha twoul d onlyprevent MITM and n o t t he file being  do dgyf r om  so u rc e  (e gs ite h acked).

Thinki ng a littl em or e about th e  pr ob lem you  raised , I g u ess you  could gr ep it
for  I Ps t h a t a ren't loca lhost (i e exit th e  shel l  s cript  be fore w ri tin g the  new
h o sts  if ` grep`re turnsa zer oexit cod e). Aside that, I'd gen uinely  be
 DNS_server that_spoofs blacklisted addresses -_userbinator
https://opensource.conformal.com/wiki/adsuck
======
egwynn
I use_`dnsmasq`_and configured_it_to return `NXDOMAIN`_for a giant_list of ad
domains I_found. It doesn’t_have_feature-parity with this, but the software
was readily available for my platform, which was nice.

~~~
jakeogh
Tool_to_automate it:
[https://github.com/jakeogh/dnsgate](https://github.com/jakeogh/dnsgate)

~~~
laumars
dnsmasq_can_read_from /etc/hosts so you can_automate it just using `curl`_(or
other standard_UNIX tools):

    
  __
  _    # the first command is_a one time only job
 _  ___cp -vip /etc/hosts /etc/hosts.default
_   
  _    # the_following is the automation.
   _   curl http://someonewhocares.org/hosts/hosts --silent_> /etc/hosts.sowc
   _ _ cat /etc/hosts.default /etc/hosts.sowc >>_/etc/hosts
  _ 
_  _

The other benefit of this is_you can then_just do a `dnsmasq reload` (since
the_hosts_file is an_external_configuration_file) rather_than the full
`dnsmasq_restart`_that dnsgate_performs.

~~~
lmm
Silently_putting data fetched over unauthenticated HTTP_into_your hosts file
doesn't sound like a great_idea.

~~~
laumars
Good point. Sadly that's_pretty_much how all adblockers_keep up-to-date
(albeit at least with_TLS). Though pragmatically even if the_update was
manual,_you still_need to place some trust in the site when dealing with_files
of that size. Granted it would_be better if those_resources served_TLS,_but
that would only_prevent_MITM and_not the file being dodgy from source_(eg site
hacked).

Thinking_a little more about the problem_you raised, I guess_you_could grep it
for IPs that aren't_localhost (ie exit the shell script_before writing the new
hosts if_`grep`_returns_a zero exit code). Aside_that, I'd genuinely be