named-blacklist

README

Luzifer / named-blacklist

This repo contains a DNS blacklist generator to be used in combination with DNS Response Policy Zones in BIND 9.8+.

Usage

For full usage inside BIND see BIND ARM.

Quoted from the ARM:

For example, you might use this option statement

response-policy { zone "badlist"; };

and this zone statement

zone "badlist" { 
  type master; 
  file "master/badlist"; 
  allow-query { none; }; 
};

Then you can generate the master/badlist file using named-blacklist:

# named-blacklist --config config.sample.yaml | tee master/badlist
$TTL 1H

@ SOA LOCALHOST. dns-master.localhost. (1 1h 15m 30d 2h)
  NS  LOCALHOST.

; Blacklist entries
0.nextyourcontent.com CNAME . ; From: "Dan Pollock - someonewhocares"
0.r.msn.com CNAME . ; From: "add.Risk"
000.0x1f4b0.com CNAME . ; From: "CoinBlocker"
000.gaysexe.free.fr CNAME . ; From: "Mitchell Krog's - Badd Boyz Hosts"
[...]