UBNT edgeos-dnsmasq-blacklist dnsmasq DNS Blacklisting and Redirection

Follow the conversation @ community.ui.com

Donations and Sponsorship

Please show your thanks by donating to the project using Square Cash or PayPal

We greatly appreciate any and all donations - thank you! Funds go to maintaining development servers and networks.

Note: This is 3rd party software and isn't supported or endorsed by Ubiquiti Networks®

Contents

1. Overview
2. Donate
3. Copyright
4. Licenses
5. Latest Version
6. Change Log
7. Features
8. Compatibility
9. Installation
   1. Using apt-get
   2. Using dpkg
10. Upgrade
11. Reconfigure
12. Removal
13. Frequently Asked Questions
    1. Can I donate to project?
    2. Does the install backup my blacklist configuration before deleting it?
    3. Does update-dnsmasq run automatically?
    4. How do I add or delete sources?
    5. How do I back up my blacklist configuration and restore it later?
    6. How do I configure dnsmasq?
    7. How do I configure local file sources instead of internet based ones?
    8. How do I use standalone or failover mode?
    9. How do I disable/enable dnsmasq blacklisting?
    10. How do I exclude or include a host or a domain?
    11. How do I globally exclude or include hosts or a domains?
    12. How do I use the command line switches?
    13. How do can keep my USG configuration after an upgrade, provision or reboot?
    14. How does whitelisting work?
    15. What is the difference between blocking domains and hosts?
    16. Which blacklist sources are installed by default?
    17. How do I troubleshoot dnsmasq blacklisting?

Overview

EdgeMax dnsmasq DNS blacklisting and redirection is inspired by the users at Ubiquiti UISP Community

[Top]

Copyright

• Copyright © 2023 Helm Rock Consulting

[Top]

Licenses

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

   The views and conclusions contained in the software and documentation are those of the authors and should not be interpreted as representing official policies, either expressed or implied, of the FreeBSD Project.

[Top]

Latest Version

       

Release 1.2.4.9 (June 7, 2023)

• Fixed Issue #66 documentation issue* Fixed Issue #56 removed large source StevenBlack/hosts as it prevented dnsmasq from starting on ER-X routers

• It can be installed using

set service dns forwarding blacklist hosts source githubSteveBlack url 'https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts'
set service dns forwarding blacklist hosts source githubSteveBlack description 'Blacklists adware and malware websites'
set service dns forwarding blacklist hosts source githubSteveBlack prefix '0.0.0.0 '

[Top]

Change Log

• See changelog for details.

[Top]

Features

• Adds DNS blacklisting integration to the EdgeRouter configuration
• Generates configuration files used directly by dnsmasq to redirect dns lookups
• Integrated with the EdgeMax OS CLI
• Any FQDN in the blacklist will force dnsmasq to return the configured dns redirect IP address

[Top]

Compatibility

• edgeos-dnsmasq-blacklist has been tested on the EdgeRouter ERLite-3, ERPoe-5, ER-X, ER4, UniFi Security Gateway USG3 and USG4 routers
  • EdgeMAX versions: v1.9.7+hotfix.6-v2.0.9-hotfix.6
  • UniFi versions: 4.4.34.5140624-4.4.57.5578372

[Top]

Installation

• Using apt-get - wo