block by domain like ngrok.io

[sg]

Hi, how would I go about blocking a whole domain... or at least making it more difficult to reach? For example, if I want to block access to ngrok.io sites, what could I do?

[fabian]

you can block it in DNS using a domain override - simple and usually enough. If you want to go further, you can look in BGP in which AS the IP range is and then you can make a rule for blocking the whole IP range.