The developers of the IPFire project, which creates distributions for building routers and firewalls, have introduced a series of IPFire DBL (Domain Block List) blocking lists to filter requests to unwanted domain names. The project is presented as a community-supported solution for managing content blocked in private networks or on local systems.
Unlike most existing commercial and free DBLs that provide monolithic blocking lists of disparate content, IPFire DBL offers a series of thematic lists, allowing users to choose which type of content to block and which to allow. These lists are collaboratively maintained, and users have the opportunity to participate in their improvement. IPFire DBL also provides guarantees of legal purity — when aggregating data from other lists, only sources that explicitly grant redistribution rights are used.
The service's operational code is written in Python and is open under the GPLv3 license. The content of the lists is available under the CC BY-SA 4.0 license (Creative Commons Attribution-ShareAlike), which allows for the use (including commercial), distribution, and modification of materials while attributing the author and distributing derivative works under the same conditions. A total of 12 lists have been formed, covering over a million domain names.
Information is updated every hour and is available in several formats suited for integration with various open and commercial DNS servers, proxies, ad blockers, and traffic inspection systems. Integration is supported with IDS/IPS such as Suricata, BIND, Unbound, PowerDNS, Knot DNS, Pi-hole, Squid, OPNsense, pfSense, Adblock Plus, AdGuard, and uBlock Origin.
Export formats:
- RPZ (Response Policy Zones, similar to DNSBL) for deploying a DNS zone on DNS servers. Incremental zone transfer and updates are supported between servers using AXFR/IXFR mechanisms.
- Squidguard format for filtering on proxy servers.
- Direct download in the form of a text list, allowing adaptation for your own systems.
- Adblock Plus filter format for use with browser plugins for ad filtering.
- Rules format for IDS Suricata, which can be used for filtering DNS and HTTP requests, as well as inspecting SNI in TLS.
Available block lists:
- Malware — domains, related to the distribution of malicious software or managing botnets.
- Phishing — phishing sites.
- Advertising — domains involved in displaying ads and tracking user movements.
- Pornography — domains containing pornography and adult-only content.
- Gambling — online casinos and gambling.
- Games — gaming platforms and sites with games (can be used to block games).
- DNS-over-HTTPS — public DoH resolvers (for networks that prohibit the use of third-party DNS).
- Dating — dating services.
- Piracy — pirate sites that illegally distribute others' content.
- Smart TV — domains used for transmitting telemetry from smart TVs.
- Violence — domains with content containing violence.
- Social Networks — social networks.
Source: opennet.ru
