Skip to content

dns/dnscrypt-proxy: Add OISD wildcard blocklists (big, small, NSFW, NSFW small) to DNSBL selection - #5614

Merged
Monviech merged 3 commits into
opnsense:masterfrom
mietzen:feat/dnscrypt-oisd-blocklist
Aug 11, 2026
Merged

dns/dnscrypt-proxy: Add OISD wildcard blocklists (big, small, NSFW, NSFW small) to DNSBL selection#5614
Monviech merged 3 commits into
opnsense:masterfrom
mietzen:feat/dnscrypt-oisd-blocklist

Conversation

@mietzen

@mietzen mietzen commented Aug 9, 2026

Copy link
Copy Markdown
Contributor

Important notices

Before you submit a pull request, we ask you kindly to acknowledge the following:

If AI was used, please disclose:

  • Model used: Claude Sonnet 5
  • Extent of AI involvement: Research if domain wildcards are usable, since all other DNSBL lists are using the hosts format that is discontinued on OISD.

Describe the problem

I wanted to add the OISD Blocklists since they are pretty well maintained and available in ubound as well.


Describe the proposed solution

It adds the OISD Blocklist to DNSBL selection of Dnscrypt.


Related issue

I didn't create a Issue since this change is trivial

@mietzen

mietzen commented Aug 9, 2026

Copy link
Copy Markdown
Contributor Author

I copied this change to my local OPNsense box:

Enable DNSBL and RPZ unchecked

mietzen-OPNsense-plugins git:feat/dnscrypt-oisd-blocklist
❯ nslookup 0000a.net 192.168.0.1 -port=53053
Server:		192.168.0.1
Address:	192.168.0.1#53053

Non-authoritative answer:
Name:	0000a.net
Address: 172.237.146.18
Name:	0000a.net
Address: 172.237.146.46
Name:	0000a.net
Address: 172.237.146.39

Enable DNSBL and RPZ checked

mietzen-OPNsense-plugins git:feat/dnscrypt-oisd-blocklist
❯ nslookup 0000a.net 192.168.0.1 -port=53053
Server:		192.168.0.1
Address:	192.168.0.1#53053

Non-authoritative answer:
0000a.net	hinfo = "This query has been locally blocked" "by dnscrypt-proxy"

@mimugmail mimugmail left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks good and works. Small addition, please remove REVISION line instead of setting to zero.

@mietzen
mietzen requested a review from mimugmail August 11, 2026 07:03
@Monviech
Monviech merged commit da0e5a5 into opnsense:master Aug 11, 2026
@Monviech

Copy link
Copy Markdown
Member

Merged, thank you

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants