This is a brief summary of a small DNS server.
Are you tired of being bombarded with ads and unwanted internet connections? Look no further than adsuck - a small DNS server designed to block connections to blacklisted addresses while forwarding all other queries. This powerful tool can be used locally or on a network perimeter to protect machines from malicious sites such as ad servers and crawlers.
One of the standout features of adsuck is its ability to match website names using regex, giving you even more control over what connections are allowed. Additionally, there is a mechanism to spoof DNS queries to specified IP addresses, giving you even more control over network traffic.
Installation is made easy with the code's OpenBSD port, however, for non-OpenBSD installations it must be done by hand. There are two main methods of using adsuck - as a local resolver for the road warrior or as a perimeter resolver to protect local networks.
Method 1 involves creating a directory to chroot adsuck, as well as creating a _adsuck user and group. The dhclient script must also be modified to ensure it does not overwrite /etc/resolv.conf and instead writes to the chroot directory. The /etc/resolv.conf file should be modified to only have one line reading "nameserver 127.0.0.1". Adsuck should be added as a daemon to run during boot, and can be run with the command "adsuck -c /var/adsuck -f /resolv.conf /hosts.small".
Method 2 follows a similar process but involves creating a resolv.conf file that contains your actual resolver information. Adsuck should be run with the command "adsuck -l 192.168.0.1 -c /var/adsuck -f /resolv.conf /hosts.small" and must be done on whichever machine runs a valid nameserver for that network. If there is a local nameserver, make it listen on port 54 of localhost and make the adsuck resolv.conf point there.
Overall, adsuck is a powerful and customizable tool for those looking to take control of their internet connections and protect their machines from malicious sites.
One of the standout features of adsuck is its ability to match website names using regex, giving you even more control over what connections are allowed. Additionally, there is a mechanism to spoof DNS queries to specified IP addresses, giving you even more control over network traffic.
Installation is made easy with the code's OpenBSD port, however, for non-OpenBSD installations it must be done by hand. There are two main methods of using adsuck - as a local resolver for the road warrior or as a perimeter resolver to protect local networks.
Method 1 involves creating a directory to chroot adsuck, as well as creating a _adsuck user and group. The dhclient script must also be modified to ensure it does not overwrite /etc/resolv.conf and instead writes to the chroot directory. The /etc/resolv.conf file should be modified to only have one line reading "nameserver 127.0.0.1". Adsuck should be added as a daemon to run during boot, and can be run with the command "adsuck -c /var/adsuck -f /resolv.conf /hosts.small".
Method 2 follows a similar process but involves creating a resolv.conf file that contains your actual resolver information. Adsuck should be run with the command "adsuck -l 192.168.0.1 -c /var/adsuck -f /resolv.conf /hosts.small" and must be done on whichever machine runs a valid nameserver for that network. If there is a local nameserver, make it listen on port 54 of localhost and make the adsuck resolv.conf point there.
Overall, adsuck is a powerful and customizable tool for those looking to take control of their internet connections and protect their machines from malicious sites.
What's New
Version 1.7: N/A