infra/tofu/blocklist.rpz

27 lines
878 B
Text

; Managed by Ansible (roles/resolvers) — do not edit by hand.
; Source of truth: resolver_blocked_domains in group_vars/resolvers/main.yml
;
; Response Policy Zone. Each listed name and its subdomains resolve to
; NXDOMAIN (forced by rpz-action-override in unbound.conf), and matches are
; logged to syslog under rpz-log-name "blocklist". Names are relative to the
; $ORIGIN below, per RPZ convention (the zone suffix is the policy trigger).
$TTL 3600
$ORIGIN blocklist.rpz.
@ IN SOA localhost. root.localhost. 1 3600 600 86400 3600
@ IN NS localhost.
proxyjs.brdtnet.com CNAME .
*.proxyjs.brdtnet.com CNAME .
proxyjs.luminatinet.com CNAME .
*.proxyjs.luminatinet.com CNAME .
proxyjs.bright-sdk.com CNAME .
*.proxyjs.bright-sdk.com CNAME .
clientsdk.bright-sdk.com CNAME .
*.clientsdk.bright-sdk.com CNAME .
clientsdk.brdtnet.com CNAME .
*.clientsdk.brdtnet.com CNAME .