The developpers have added a great feature to pihole v5 called 'Deep CNAME inspection', you can read about it here . The block list maintainers will have to add entries for the CNAMEs, in order for this to feature to activelly block domains. Found the first reference]( GitHub - nextdns/cname-cloakin…

Dan is absolutely right here. [image] jpgpi250: tried to find the answer myself. apparently, using dnsmasq wildcard syntax (address=/wizaly.com/#) does NOT trigger CNAME detection, regex syntax does trigger CNAME detection. Yes, this is expected. If you specify it using a dnsmasq-instruction…

[image] jpgpi250: (.|^)wizaly\.com$ Is this then a correct entry to block all possible CNAME entries for wizaly.com? Or do you recommend something else to achieve blocking the CNAME domains, referred here ? I'm asking, since we are all new to CNAME blocking, and probably want to use an entry, …

[image] jpgpi250: Is this then a correct entry to block all possible CNAME entries for wizaly.com ? Yes, FTL does a lot to have internal CNAME bits look like regular domains to the users so known rules can be applied to them.

Wildcard block wizaly.com. If it shows up in a direct query, it will be blocked. If it shows up as a CNAME for a different domain query, it will be blocked. There really isn't any behavior to change for CNAMEs, block what you want blocked and let FTL handle the internals.

I hoped so, been busy all afternoon to get this script working, see here . If you have any comments, feel free to shoot. The goal of the script is to read the domains from the file and enter them directly into the database. Tested, works, but comments are expected. I wrote this, because pihole has n…

[image] jpgpi250: Tested, works, but comments are expected. Strange. [image] jpgpi250: If you have any comments, feel free to shoot. You should let FTL know about the incoming new regex filters as it needs to compile them for you before they can be used. Add pihole restartdns reload-…

thanks for the comment (strange?) I will add the reload command to the script.... done.

[image] jpgpi250: strange? Yeah, strange as in: I would not have expected it to work. You script only updated the database but did not made FTL check for new/deleted regex. As FTL does not compile (= load) the regex at the end of your script. So it probably worked only by chance because you…

[image] DL6ER: So it probably worked only by chance because you’re restarted FTL I am reasonably good in breaking down a problem into the steps, needed to solve the problem, terrible when turning the steps into code (trial and error, using duckduckgo examples to translate a step into code). …

[image] jpgpi250: can you confirm or deny this? Deny. Enabling/disabling is writing to the database as much as deleting is.

Pi-hole Userspace

CNAME block list

General Customizing Pi-hole

blacklisting

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled