Install [unbound](https://github.com/NLnetLabs/unbound) on debian based systems incl. dnsbl

License: GNU General Public License v3.0

Jinja 29.84% Python 70.16%

ansible ansible-role dns dns-blocking dns-blocklists dns-server dnsbl unbound

ansible-role-unbound's People

Contributors

Stargazers

Watchers

Forkers

zerwes ccaiccie

ansible-role-unbound's Issues

unbound-dnsbl-updater.py : sort dnsbl entries

... in order to minimize changes

make dnsbl entries unique

warning: duplicate local-zone ....

document playbook better

fix oisd dbl download link

error:
main: failed to fetched https://raw.githubusercontent.com/sjhgvr/oisd/main/dbl_full.txt : http code: 404

new possible list to use:

fix oisd url again

https://raw.githubusercontent.com/sjhgvr/oisd/main/domainswild_big.txt
404: Not Found

improve speed of unbound-dnsbl-updater.py

seems that esp. huge lists like
https://blocklistproject.github.io/Lists/alt-version/ads-nl.txt
https://blocklistproject.github.io/Lists/alt-version/abuse-nl.txt
https://blocklistproject.github.io/Lists/alt-version/fraud-nl.txt
slow unbound-dnsbl-updater.pydown

add some statistical output to unbound-dnsbl-updater.py

would be nice if unbound-dnsbl-updater.py logs some stats per list:
lines, domains found, dupes etc.

undbound_config server var values not defined as string are ignored

undbound_config server var values not defined as string are ignored and not used in the config

+cache-max-negative-ttl: "60"  # works as expected, resulting in 'cache-max-negative-ttl: 60'
-cache-max-negative-ttl: 60    # will be ignored

unbound-dnsbl-updater.py : implement caching

use shorter syntax for blocklist

see https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html
instead of using 2 lines per domain using the redirect zone type

local-zone: "gremlin.ur" redirect
local-data: "gremlin.ur A 0.0.0.0"

we can shorten this to one line using always_null zone type

local-zone: "gremlin.ur" always_null

pylint unbound-dnsbl-updater.py as github action

unbound-dnsbl-updater.py : make unbound reload / restart configurable

unbound-dnsbl-updater.py : just reload unbound if the dnsbl file has changed

avoid unnecessary reload/restarts, as these can be quite time consuming if the dnsbl file is large

include oisd.nl

https://github.com/sjhgvr/oisd
or
https://oisd.nl/

error: cannot parse name .co.uk\\n[1689133620]

pr #31 ...

TASK [rls.unbound : run /etc/unbound/unbound-dnsbl-updater.py] *****************
226
  fatal: [debianbullseye]: FAILED! => {"changed": true, "cmd": ["/etc/unbound/unbound-dnsbl-updater.py", "-s", "-l", "INFO"], "delta": "0:01:10.077358", "end": "2023-07-12 03:48:06.919751", "msg": "non-zero return code", "rc": 1, "start": "2023-07-12 03:46:56.842393", "stderr": "", "stderr_lines": [], "stdout": "WARNING\t[root] validatednsbl: unbound-checkconf /tmp/unbound-dnsblldl7ov04 : ecode 1 \"b'[1689133620] unbound-checkconf[3171:0] error: cannot parse name .co.uk\\n[1689133620] unbound-checkconf[3171:0] error: bad zone name .co.uk always_null\\n[1689133620] unbound-checkconf[3171:0] fatal error: failed local-zone, local-data configuration\\n'\"\nWARNING\t[root] main: validation of /tmp/unbound-dnsblldl7ov04 failed with 1\nWARNING\t[root] main: b'[1689133620] unbound-checkconf[3171:0] error: cannot parse name .co.uk\\n[1689133620] unbound-checkconf[3171:0] error: bad zone name .co.uk always_null\\n[1689133620] unbound-checkconf[3171:0] fatal error: failed local-zone, local-data configuration\\n'", "stdout_lines": ["WARNING\t[root] validatednsbl: unbound-checkconf /tmp/unbound-dnsblldl7ov04 : ecode 1 \"b'[1689133620] unbound-checkconf[3171:0] error: cannot parse name .co.uk\\n[1689133620] unbound-checkconf[3171:0] error: bad zone name .co.uk always_null\\n[1689133620] unbound-checkconf[3171:0] fatal error: failed local-zone, local-data configuration\\n'\"", "WARNING\t[root] main: validation of /tmp/unbound-dnsblldl7ov04 failed with 1", "WARNING\t[root] main: b'[1689133620] unbound-checkconf[3171:0] error: cannot parse name .co.uk\\n[1689133620] unbound-checkconf[3171:0] error: bad zone name .co.uk always_null\\n[1689133620] unbound-checkconf[3171:0] fatal error: failed local-zone, local-data configuration\\n'"]}

allow using domainswild syntax

https://big.oisd.nl/domainswild
optionally remove the wildcard *. at the start of domains

implement allowlist(s)

Implement a option for overrides for the dnsbl in form of one or more allow - lists.

rosa-luxemburgstiftung-berlin / ansible-role-unbound Goto Github PK

ansible-role-unbound's People

Contributors

Stargazers

Watchers

Forkers

ansible-role-unbound's Issues

Recommend Projects

Recommend Topics

Recommend Org