Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

All-in-One DNS block list

github.com

Post reply on HN
Print view View original

21–30 of 56 posts

Re: All-in-One DNS block list

#21

Post by t212 »

wjnc wrote: post #6
praveenweb wrote: post #4

I have been using NextDNS with a few block lists configured at the router level and device level. The internet experience has improved a lot since ads and trackers are blocked system wide. A few block lists that I would recommend: 1. Steven Hosts - https://github.com/StevenBlack/hosts 2. Adguard DNS - https://github.com/AdguardTeam/AdguardSDNSFilter 3. disconnect.me The amount of DNS requests made silently in the bac…

Me too! It's blocking a whopping 25%-30% of all requests without a single negative change in my browsing comfort.

I really want to use it but it blocks Spotify playlist links when I try to open them from Reddit.

Re: All-in-One DNS block list

#22

Post by wjnc »

t212 wrote: post #21
wjnc wrote: post #6

Earlier quoted context omitted.

Me too! It's blocking a whopping 25%-30% of all requests without a single negative change in my browsing comfort.

I really want to use it but it blocks Spotify playlist links when I try to open them from Reddit.

If your really want to use it you should try diving into what blocklist is causing the block OR whitelist the URL.

Re: All-in-One DNS block list

#23

Post by moreorless »

stblack wrote: post #17

This repo has a 3-week track record, by one contributor. Disclosure: Some of us have been actively curating such amalgamated lists for a long time. https://github.com/StevenBlack/hosts

Thank you for your contribution. I have a few PfSense/OPNSense deployments that leverage your list. Works great!

Re: All-in-One DNS block list

#24

Post by stblack »

ciarannolan wrote: post #18
stblack wrote: post #17

This repo has a 3-week track record, by one contributor. Disclosure: Some of us have been actively curating such amalgamated lists for a long time. https://github.com/StevenBlack/hosts

What are the dangers of using a sketchy blocklist?

(I'm wasn't implying the EnergizedProtection is sketchy...)

The essential problem is, without active curation, source lists can't quickly react to emerging threats.

Without active curation, source lists become add-only buckets where domains land, and are rarely removed, long after they are abandoned.

The soft option is to simply cumulate domains. We've seen candidate block lists grow from 350,000 domains to 750,000 domains. These are just endless one-way buckets. Use that as your Android phone's hosts file, or you Windows PC hosts file, and you're going to have a bad time.

At the edges, there are myriad grey areas. We can all agree that YouTube serving ads is painful. But what about Youtube retaining your viewing history, which some people find very useful and handy. Over the years we've often had discussions such as this. This is what it means to actively curate.

Re: All-in-One DNS block list

#25

Post by wp381640 »

ciarannolan wrote: post #18
stblack wrote: post #17

This repo has a 3-week track record, by one contributor. Disclosure: Some of us have been actively curating such amalgamated lists for a long time. https://github.com/StevenBlack/hosts

What are the dangers of using a sketchy blocklist?

I added a random blocklist to my pihole once and found it was blocking random sites like Gizmodo purely based on politics

Re: All-in-One DNS block list

#27

Post by bluedino »

I've been using blockslists from a couple github repositories for a long time, heck probably since they were found on regular web pages.

They work pretty good, but can be a little cumbersome to turn off or to enable certain domains from time to time (such as when a site has so many ads it breaks the site). But the increases safety and speed while surfing is well worth it.

Re: All-in-One DNS block list

#28

Post by mbdesign »

t212 wrote: post #21
wjnc wrote: post #6

Earlier quoted context omitted.

Me too! It's blocking a whopping 25%-30% of all requests without a single negative change in my browsing comfort.

I really want to use it but it blocks Spotify playlist links when I try to open them from Reddit.

Check your Nextdns.io logs and see what gets blocked. Then add the blocked domain (or the whole root domain) to the Whitelist. The whitelist always overrides any blocklist entry.

Re: All-in-One DNS block list

#29

Post by A4ET8a8uTh0 »

praveenweb wrote: post #4

I have been using NextDNS with a few block lists configured at the router level and device level. The internet experience has improved a lot since ads and trackers are blocked system wide. A few block lists that I would recommend: 1. Steven Hosts - https://github.com/StevenBlack/hosts 2. Adguard DNS - https://github.com/AdguardTeam/AdguardSDNSFilter 3. disconnect.me The amount of DNS requests made silently in the bac…

I still remember seeing the log for the first time. It is very radizalizing.

Re: All-in-One DNS block list

#30

Post by surround »

How to make a block list:

1) Find a bunch of high-quality block lists on the internet which have been painstakingly curated my their maintainers for many years

2) Combine it all into one big list. Tell everyone that you will quickly whitelist any domains if they are causing breakage.

3) Once enough people start using your list, get an advertiser to pay you to silently remove their domains. If anyone notices, just say it was to fix breakage on some obscure site.

I’m not saying that Energized or StevenBlack are doing step 3, but please realize that there are issues with using lists like these. Even if they aren’t getting paid, they might still have some undesirable whitelisted domains. They also deprive the original block list maintainers of views (meaning they might be less inclined to continue maintaining them). You also won’t receive updates from the lists as quickly because of the middle man.

If you are using Pi—hole, OPNsense, or any other tool which can run multiple block lists simultaneously, I recommend taking a look at https://firebog.net for a list of original-source block lists.

Post reply on HN