OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: brim2full on May 08, 2020, 08:10:36 PM

Title: Unbound-Plus Blacklist Set-up.
Post by: brim2full on May 08, 2020, 08:10:36 PM
In the absense of documentation specifically relating to unbound-plus plugin.  Could some one please confirm, or other wise correct my understanding. 

The Task:
I'm trying to setup the the blacklist by following the setup documented for the Cashing Proxy "Setup Web Filtering".  So question one: is that reasonable?

I Enabled blacklist, selected Easy List and entered the URL of the full compressed UT1 catagory based list (ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz (ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz)) and pressed save.  However I'm not sure it worked or not.  There were no error messages, no nasty supprises and nothing reported in the Unbound log file.  I canot even see any list of IPs it is actually blocking.  So question two: have I done everything I need to do?

Once I have this setup then question three: how do I get the block list to update?

Regards all and keep save.
Phil
Title: Re: Unbound-Plus Blacklist Set-up.
Post by: mimugmail on May 09, 2020, 05:57:19 AM
Manual lists expect plain text files with just a domain per line. Unsure if proxy ACL will help there.

You can add a cron job for updates, just like with squid acl
Title: Re: Unbound-Plus Blacklist Set-up.
Post by: brim2full on May 09, 2020, 10:38:59 AM
Thanks mimugmail - I'll have a play and let you know how I ge on.
Title: Re: Unbound-Plus Blacklist Set-up.
Post by: formana on May 09, 2020, 05:21:45 PM
Thank you very much
Title: Re: Unbound-Plus Blacklist Set-up.
Post by: brim2full on May 10, 2020, 12:24:13 PM
OK I decided to give up for the time being and decided to add a block list using aliases to firewall rules.  I followed the Spamhouse drop dont rout how to and it worked.  What didnt work was importing my own file.  I tried entering: "file://block_lists/block.txt" and "/block_lists/block.txt" and neither actuall imported any thing. 

Incidentally the next scheduled release (June) is tasked with merging unbound-plus so I'll take another look then.Regards
Title: Re: Unbound-Plus Blacklist Set-up.
Post by: mimugmail on May 10, 2020, 02:25:20 PM
You have to Host it elsewhere. Just upload it on github
Title: Re: Unbound-Plus Blacklist Set-up.
Post by: brim2full on May 11, 2020, 08:38:55 AM
Thanks again. I never expected that.Regards