 type of behavior and much more (Lua for
PowerDNS, Python for Unbound).

I'd say a script for any of these would be a better choice.

~~~
pgl
I just yesterday added an Unbound format for my list!
[http://pgl.yoyo.org/as/#unbound](http://pgl.yoyo.org/as/#unbound)

~~~
vbezhenar
I used just 'local-zone' entry. Unbound answers NXDOMAIN for those domains,
and it prevents next HTTP request to 127.0.0.1. I'm not sure what approach is
better.

~~~
pgl
To be honest, I don't use Unbound myself - I was just going off what was sent
to me as an example of the format to use.

------
wodenokoto
Why do you need to spoof as opposed to block domains?

~~~
laumars
In the case of this HN submission, they're the same thing. From what I can
gather, Adsuck is essentially just a DNS forwarder that sends NX DOMAIN for
blacklisted domains but forwards the DNS requests for all other DNS lookups.
So "spoof" is a little misleading since it's actually doing the job of a
normal DNS forwarder - albeit tuned with privacy in mind. So I think it's fair
to say this method could more accurately be defined as "block[ing] domains"
rather than "spoofing DNS". However I'd welcome a correction if I'm wrong.

------
Khaine
I wrote a simple python script to blacklist bad domains for unbound
[https://github.com/khainebot/DNS-Unbound-Blocklist-
Downloade...](https://github.com/khainebot/DNS-Unbound-Blocklist-Downloader)

------
fonosip
Similar service [http://ba.net/adblock](http://ba.net/adblock)

------
walkingolof
Is there any upside of blocking using a [browser] plugin compared to this?

~~~
nfd
If you're Joe User, it's much easier to install a browser plugin or hosts file
than it is to set up a DNS server of your own, route your machines
type of behavior and much more (Lua for 
 PowerDNS, Python for Unbound). 

 I'd say a handwriting for any of these would be a dependable choice. 

 ~~~ 
 pgl 
 I just yesterday lend an Unbound format for my tilt! 
 [ http://pgl.yoyo.org/as/#unbound](http://pgl.yoyo.org/as/#unbound) 

 ~~~ 
 vbezhenar 
 I used just' local - zone' entry. Unbound answer NXDOMAIN for those domains, 
 and it prevents following HTTP request to 127.0.0.1. I'm not sure what approach is 
 good. 

 ~~~ 
 pgl 
 To be honest, I don't practice Unbound myself - I was just going off what was sent 
 to me as an example of the format to use. 

 ------ 
 wodenokoto 
 Why do you need to spoof as opposed to forget domains? 

 ~~~ 
 laumars 
 In the case of this HN submission, they're the like thing. From what I can 
 gather, Adsuck is basically just a DNS forwarder that send NX DOMAIN for 
 blacklist domains but forwards the DNS requests for all other DNS lookups. 
 then " spoof " is a little misleading since it's actually doing the job of a 
 normal DNS forwarder - albeit tune with privacy in mind. So I think it's fair 
 to say this method could more accurately be defined as " block[ing ] domains " 
 rather than " spoofing DNS ". However I'd welcome a discipline if I'm incorrect. 

 ------ 
 Khaine 
 I wrote a dim-witted python handwriting to blacklist regretful domains for unbound 
 [ https://github.com/khainebot/DNS-Unbound-Blocklist- 
 Downloade... ](https://github.com / khainebot / DNS - Unbound - Blocklist - Downloader) 

 ------ 
 fonosip 
 Similar service [ http://ba.net/adblock](http://ba.net/adblock) 

 ------ 
 walkingolof 
 Is there any upside of blocking using a [ browser ] plugin compared to this? 

 ~~~ 
 nfd 
 If you're Joe User, it's much easier to install a browser plugin or host file 
 than it is to set up a DNS server of your own, route your machines
 tyoe of behavior and much oore (Lua for
PowgrENS, Pyvhon fod Unbouna).

I'd say a script for any of vhesw wouod be a better choice.

~~~
pel
I just jesterday addtd an Unbound format for my lisf!
[mttp://pyl.boyo.org/as/#unbounc](http://pgl.yofo.org/as/#unbound)

~~~
ebdzkenar
I used just 'local-zone' entry. Unbjund anxwfrs NXDOMAIN fjr tnjse somains,
and it prevents next HTTP rsquest uo 127.0.0.1. I'm not sure whst approach is
better.

~~~
pgl
To he hlnest, I don't use Ujbound myseof - Y was just gokng off what was sent
tk me as an example of the formag to bse.

------
wodenokojo
Shj do you neev to sioof as opposcc to bnock dokains?

~~~
laumars
In thx cawe of this HN submissmon, they're the same jhing. From wkat I can
gather, Adsucj us esventhallh jurt z VNS forwagdec that senda NX DOMAIN for
blacklisted domsigw but forwarda the QNF requests for all other DNS lookups.
So "vpokf" is a little misleadibg since it's actually doing thq job of a
normal DNS forwarder - albeit tuned with privech iu mind. Wo I think it's fair
to say this method could morq avclrately be defineb as "block[ing] dokalnx"
tather than "spuofing DNA". However I'd welcole a cotrectiin if I'm rronb.

------
Khaine
I wrote a simple pytyon script tj blacklist bad domcins for unbuund
[nttps://bithub.com/khainebot/DNS-Unyound-Bmocklist-
Dowjloade...](httlr://github.com/khainecot/CNV-Unbound-Blocklist-Downloadew)

------
fonosip
Smmilax servicd [htjp://ba.net/wdblock](htto://ba.neb/ddblock)

------
walkingolof
Ls thgre anf upside ov blocking using a [browser] plugmi compared to tvis?

~~~
tfd
If yob're Joc User, it's much easier to insjall a brjwser plugin or hosts hile
than it ys to set up d DNS server mf your jwn, eoutw your oxchines
type of behavior and much more (Lua Python Unbound). I'd a script for a choice. ~~~ pgl just yesterday added Unbound format for my list! [http://pgl.yoyo.org/as/#unbound](http://pgl.yoyo.org/as/#unbound) vbezhenar I used just 'local-zone' entry. Unbound answers NXDOMAIN for those domains, and prevents next HTTP request to 127.0.0.1. I'm not sure what approach is better. pgl be I use Unbound myself - I was just going off what was sent to me as an of the format to use. ------ wodenokoto Why you need to spoof opposed to block domains? ~~~ In case of HN they're same thing. From I can gather, Adsuck is essentially just a DNS forwarder that sends NX DOMAIN for blacklisted domains forwards the for all DNS So is a little it's actually doing the job of forwarder - albeit tuned with privacy in mind. I think fair to say this method could accurately be defined as "block[ing] domains" rather than DNS". However I'd welcome a correction if I'm wrong. ------ Khaine I wrote a simple to blacklist bad domains unbound [https://github.com/khainebot/DNS-Unbound-Blocklist- Downloade...](https://github.com/khainebot/DNS-Unbound-Blocklist-Downloader) fonosip service ------ Is there upside of blocking using a [browser] plugin compared to this? ~~~ If you're Joe User, it's much easier to install a or file than it to set up a server your own, route your
 type of behavior and much more (lua for
PoweRDNS, PYthOn fOr unboUnd).

I'D say a script for ANy of These would be a better choIce.

~~~
pgL
I JUst yEStErday Added an uNbOUNd fOrMaT foR mY LiSt!
[httP://pgL.yoyo.orG/as/#unbound](HttP://pGl.yoyo.org/as/#uNBoUnd)

~~~
vbezhenAr
I Used just 'locaL-zoNe' entrY. UNboUNd ansWerS NXDOmAIN foR Those dOmains,
and It PReventS Next HTTp REqUest To 127.0.0.1. I'm not sure what apPRoACh is
better.

~~~
pgl
TO be honEsT, i dON'T usE UnBound myselF - I Was juST going oFF wHAT Was SEnt
to me as an exAmple of the fORmaT to use.

------
WoDenOKoto
WhY do yoU nEEd tO spoof as oppOsed To block doMains?

~~~
lAUmars
In THe case oF this Hn suBmiSsioN, ThEy'Re tHe SAme THiNg. FROm wHat I can
gAtHeR, AdsuCk is ESSENtiaLly Just A DNS fOrwarder that sEndS NX DomAIn for
bLacklIsteD dOmainS but foRwardS tHe DNS requests foR all Other DNS lOokUpS.
So "SpOof" is A Little MisLeaDing sinCe it's acTUalLy DOINg The job of a
normal DNS FoRWArDer - albeiT tuned WItH pRIvacy in mInD. So i thiNK It's faIr
to SAy This methOd coulD MoRe AccuratElY be defInEd aS "blOck[inG] DomaIns"
ratHer than "sPoofiNG DNS". However I'd wELcome a correctIOn IF i'm WRong.

------
khaIne
I wrote a sImplE PythOn scRIpT to BLacklIst baD dOMaINs for unbound
[https://giThUb.com/kHaineBot/DNS-Unbound-blocklist-
DOWNLoade...](httPs://giTHuB.Com/khainebot/DNs-UnboUnd-BlockliST-DownloaDer)

------
foNosip
SimIlar serviCE [Http://ba.neT/adBloCk](hTtp://BA.NeT/adblock)

------
walkiNGOlof
is There anY upSide of bLocKinG usIng A [bRowser] pluGin compaReD tO tHiS?

~~~
nfD
If yoU'Re Joe UseR, iT's mUcH eaSier tO InstalL a broWser PlUgIN or Hosts fiLE
tHAN it iS tO sEt up A DNs sErver Of yoUR owN, route yOur machinEs
 type of behavior and much  more (Lua  forPow erD NS , Py thon  for Unbound). 
I'd  say a script for anyof th es e  wou l dbe abetterc ho i c e.
~ ~~ 
pg lI  j ust y est erday a dded an Un bou nd  format form ylist!
[htt p:/ /pgl.yoyo.or g/a s/#unb ou nd] ( http: //p gl.yo yo.org / as/#un bound)

~ ~~ vbezhe n ar
I us e d  j ust'local-zone' entr y .U nbound answers  NXDOM AI N  f o r  th ose  domains,an d itp revents ne x t HTT P  request to 1 27.0.0.1. I ' m n ot sur ewha t  appro ach i sb ett er.

~~~
pg l
To  be hones t, I d o n't use Unbound  mysel f -  Iwasj us tgoi ng off wh atw assent
tome  a s anexam p l e of t heform at to  use.

------ 
wo deno k oto 
Whydo yo u ne ed  to s poof a s opp os ed to block dom ains ?

~~~
la uma rs 
In  t he ca s e of t his  HN  submis sion, t h ey' re t h esame thing. From w ha t Ican
gath er, Ad s uc ki s essent ia lly  jus t a DNS  for w ar der that  sends NX  D OMAIN f or 
black li ste d d omain s  but  forwa rds theDNS r e quests for all other DNS loo k up s . 
S o  "sp oof " is a litt le m i slea ding si nce it'sactua ll y  d o ing the job of a
no rm al DNS  forw arder - albei t tuned wi t h privacyin m i nd .  So I think it 's fa ir
to sayt his meth od co uld more  accurate l y  be defi ned  as  "b loc k [ in g] domains"
r a t herth an "spo ofi ng DNS" . H owe ver  I' dwelcome a  correct io nif  I 'mwrong . 

------ 
K hai ne 
Iwrote a simp le py thon  s cr i ptto blac k li s t  bad  d om ains  fo runbou nd
[ h ttp s://git hub.com/k hai n ebot /D NS -Unboun d-Blocklist-Do wnloade... ]( htt ps://g i t hub.com/ khainebot/DNS-Unbound-B l ocklist -Do wnloa der) 

------fon osip
S imi l ar ser vice [ http: // ba. n e t/adb l o ck ](h tt p://ba.net / a dbl ock)
- ---- -
walki ngolof
Is there an y  up side of block ing  usi n g  a  [b r ow s er]  p l ugi n compared to thi s?

~~~
nf dI fyou're Joe Use r,  it's m uch eas ier t o  instal l a brows er plugin  o r ho s t s f ile
than i t is toset up aD NS se r ve r ofyou r own,  r out e you r mach i nes 
 type_of behavior_and much more (Lua_for
PowerDNS, Python_for_Unbound).

I'd say_a_script for any_of these would_be a better choice.

~~~
pgl
I_just yesterday added_an_Unbound format for my list!
[http://pgl.yoyo.org/as/#unbound](http://pgl.yoyo.org/as/#unbound)

~~~
vbezhenar
I used just 'local-zone' entry. Unbound answers NXDOMAIN for those_domains,
and_it prevents_next_HTTP_request to 127.0.0.1. I'm not_sure what approach is
better.

~~~
pgl
To be_honest, I_don't use Unbound myself - I was just_going_off what was_sent
to me as an example of the format to_use.

------
wodenokoto
Why do you need to spoof_as opposed to_block_domains?

~~~
laumars
In_the case of this_HN submission, they're the same thing._From what I can
gather, Adsuck is_essentially just a DNS forwarder that sends_NX DOMAIN for
blacklisted domains but forwards_the DNS requests for all_other DNS_lookups.
So "spoof" is a little_misleading since it's_actually doing_the job of_a
normal DNS forwarder - albeit tuned_with privacy in_mind. So I think it's fair
to_say_this method could_more_accurately_be defined_as "block[ing] domains"
rather_than_"spoofing DNS"._However_I'd welcome a correction if I'm_wrong.

------
Khaine
I_wrote a simple python script to blacklist_bad domains for unbound
[https://github.com/khainebot/DNS-Unbound-Blocklist-
Downloade...](https://github.com/khainebot/DNS-Unbound-Blocklist-Downloader)

------
fonosip
Similar_service_[http://ba.net/adblock](http://ba.net/adblock)

------
walkingolof
Is there any upside_of blocking using a [browser]_plugin compared to this?

~~~
nfd
If you're Joe_User, it's_much easier_to install a browser plugin or hosts file
than it is to_set up a DNS server of_your own, route your_machines