On Jun 25, 2019, at 10:09 AM, David B Funk <dbf...@engineering.uiowa.edu> wrote: > It's pretty simple to set up your own local private DNS zones using rbldnsd. > Adding/updating those kinds of zones is simple as adding or editing lines in > a text file (as simple as echo ".this.bad.domain :127.0.0.2:" >> > my-zone-file ). > No muss no fuss, not server restart, etc.
Hmm. I currently load the Russian and Chinese IP space into my firewall on boot. Would it be better to do this via a local TBL? It’s only about 9,000 CIDR records each. @reboot bash -c 'pfctl -t badguys -T add $(cat /usr/local/etc/ru.zone)' @reboot bash -c 'pfctl -t badguys -T add $(cat /usr/local/etc/cn.zone)’