Hello,
what is the difference between using Squid with ACL blocklists (URL, Malware, Suspicious Sources) and DNSBL through a DNS like Unbound or bind?
Does it make sense to run both parallel? As far i understood both strategies act the same.
thank you!
A
Similar, yes, but in theory you could also use URIs with Squid
Unbound or bind only block DNS requests. If a client connects on an IP address (e.g. through a hosts file) they will bypass the block.
Allowing only outbound HTTP(S) from Squid plugs that hole.
You can use both to improve performance, since a lot of blacklisted DNS requests will be cached.
Bart...
Gentlemen,
thank you very mich for your kind help and explanation!
Will go configure and test further.
Also started to document my changes.
thank you
armin