Using DNS blocklists

Is there any reason why a router with OpenWrt would not be able to use a DNS blocklist? Assume that Wireguard is not running.

For example, doing DNS look-ups at 100.64.0.63 uses blocklists provided by Mullvad.

Can I set my router to use that IP address for DNS look-ups and trust that DNS look-ups will work as usual for the router and all devices on the LAN?

How are you implementing this blocklist?

You cannot use

If you do not route that ip address via the wireguard tunnel

1 Like

I have not implemented it yet, and do not know how I would. I have experimented only a little with OpenWrt. I ask this question because I am thinking about buying a router that I would install OpenWrt on, and I want to know about possible problems.

Thanks for your quick response.

Thank you, egc. Good to know.

Possible problems with a blocklist you haven't implemented on a device you don't have...OK. Well, OpenWrt has a few DNS packages that provide a blocklist feature.

Pretty vague question - I can suggest be sure to purchase a device with decent flash and RAM for implementing the list.

1 Like

My question was about a specific approach for using blocklists. I am not asking about all possible problems. The specific device does not seem relevant to my question. If it helps to know: I am planning on buying a GL-iNet Flint 2.

Can you recommend a DNS package?

So the blocklist would be kept on the router? And updated automatically or manually?

Thanks for your help.

please start reading the documentation: https://openwrt.org/docs/guide-user/services/start
the very first topic is: Ad blocking

1 Like

Thank you.

I suggest adblock.

Absolutely. This is why the device matters (as well as its CPU).

I originally assumed you had some list you wished to implement, but yes, adblock can be configured to update available blocklists on a schedule (via cron).

Thank you.

1 Like