---

Welcome to the unbound-dns-firewall wiki!

All of this began when I started to search for an alternative for using UNBOUND's "local-zone/data" to block unwanted domains, which doesn't scale very well with large lists and trashes memory/CPU.

I also wanted to stay on UNBOUND for my DNS resolution purposes, but also liked the concept of ADSUCK using regex (ADSUCK has been abandoned though).

During my search/research I tripped over a Python script by Oliver Hitz, started to test it, optimized it, added regexp and a REFUSED feature, and some more informative logging.

And that is how they say: it all started!

Check the topics in the side-bar for more information. Also check the remarks/comments in dns-firewall.py.