hagezi/dns-blocklists
Dns Blocklists
This project is a comprehensive repository of curated domain blocklists designed for network-wide DNS filtering. It functions as a DNS sinkhole feed, providing the necessary data to intercept and block unwanted network requests at the resolution layer before they reach their destination. By returning null or loopback addresses for identified domains, it prevents connections to malicious infrastructure, advertising servers, and tracking endpoints across all devices on a network.
The repository distinguishes itself through a tiered categorization logic that allows users to select protection levels based on their specific security and compatibility requirements. It aggregates data from multiple threat intelligence and privacy sources, processing them through an automated pipeline to ensure the lists remain current. The output is generated in multiple standard formats, ensuring compatibility with a wide range of DNS server software and network appliances.
Beyond basic ad and tracker blocking, the project supports granular content restrictions, including the ability to filter adult content, gambling sites, and social media platforms. It also includes specialized protections against security threats such as phishing, malware, and command-and-control servers, while mitigating unauthorized telemetry and preventing DNS rebinding attacks.
Features
- Protection Tiers - Provides tiered protection settings ranging from relaxed to aggressive to help you balance strict privacy requirements with functional website compatibility.
- Domain Filtering Engines - Prevents network requests to harmful domains by applying curated lists for DNS-based filtering.
- DNS Filtering - Implements network-wide DNS filtering to block advertisements, trackers, and malicious domains for all connected devices.
- Domain Blocklists - Provides a comprehensive repository of curated domain blocklists for DNS-based network filtering.
- Network Content Filters - Provides comprehensive network-wide DNS filtering for advertisements, trackers, and malicious content.
- DNS Interception Utilities - Intercepts DNS resolution to redirect unwanted network requests to null or loopback addresses.
- DNS Sinkholes - Supplies domain data for configuring DNS sinkholes to intercept unwanted traffic and prevent DNS rebinding.
- Network Traffic Filters - Blocks malicious network traffic by providing curated DNS blocklists for network-wide filtering.
- Privacy and Ad Blocking - Blocks advertising, telemetry, and tracking scripts to enhance network-wide privacy.
- Threat Filtering - Filters malicious domains to protect network infrastructure from phishing, malware, and command-and-control threats.
- Security and Threat Mitigations - Mitigates security threats by blocking domains associated with phishing, malware, and cryptojacking.
- DNS Rebinding Prevention - Prevents DNS rebinding attacks by blocking domains from resolving to internal network addresses.
- Infrastructure Protection - Protects against phishing, malware, and command-and-control servers by filtering known malicious infrastructure.
- Network Access Restrictions - Restricts access to adult content, gambling, and social networks via targeted DNS blocking rules.
- Privacy Protection - Enhances user privacy by blocking telemetry, analytics, and tracking domains at the network resolution layer.
- Threat Intelligence Platforms - Aggregates data from multiple security and privacy sources to maintain a current repository of blocked domains.
- Filter Lists and Assets - Aggregated DNS-level blocklists for network-wide privacy and security protection.
- Privacy Protection - Streamlined DNS-based blocking optimized for web browser privacy.
- Security Hardening - Blocks newly registered domains and high-entropy, suspicious web addresses.
- Threat Intelligence - DNS-based blocklists for filtering malicious traffic.
- Endpoint Filtering - Blocks network requests to known tracking and telemetry endpoints to prevent unauthorized data collection.
- Content Filtering - Offers a tiered system of domain blocklists to restrict access to specific categories of web content.
- Telemetry Blocking - Blocks native telemetry and analytics services to prevent unauthorized data collection.
- Telemetry and Privacy - Blocks native trackers and telemetry from devices and services to enhance user privacy.
- Domain Access Controls - Enforces domain-level access control by blocking requests to unwanted categories and malicious infrastructure.
- Data Aggregators - Consolidates diverse threat intelligence feeds and privacy lists into a unified repository for filtering.
- Processing Pipelines - Automates the fetching, normalization, and deduplication of domain lists into standardized formats for network hardware.
- Search Result Filtering - Blocks search engines that fail to enforce safe-search filtering to prevent exposure to harmful content.
