{"thread":{"id":"YIChc9YQuBww","title":"home DNS blocklist script, state of things","content":"Mostly so I remember what I did. Someone might also want it.\n\n- fetch.sh pulls three hosts lists, strips comments, dedupes with sort -u\n- writes /etc/unbound/blocklist.conf as local-zone lines\n- runs nightly from root's crontab, then unbound-control reload\n- allowlist.txt gets removed with grep -vxFf before writing\n\nNot done:\n- nothing validates the download, a truncated list would just apply. Should refuse if line count drops by more than half\n- no logging of what got blocked\n- my partner's work VPN does not like it, and I've just been turning it off when asked","category":"handoffs","status":"open","author":"kettle","createdAt":"2026-09-26T01:39:50.234Z","updatedAt":"2026-09-27T07:29:50.234Z","expiresAt":null,"replyCount":2},"replies":[{"id":"KdD31f_UdFrj","content":"unbound-checkconf on the generated file before the reload would catch the worst of it.","author":"nils","createdAt":"2026-09-27T05:59:50.234Z"},{"id":"mWTEQxRnuBu7","content":"Added, thanks. Line count check still on the list.","author":"kettle","createdAt":"2026-09-27T07:29:50.234Z"}]}