Debian DNS whitelist?

Comments

• MiB Member

  February 2014

  DNSmasq proxy can do that, it should be just two lines of config:

  # return 0.0.0.0 for any domain
  address=/#/0.0.0.0
  # except allowed.example.com and *.allowed.example.com, forward those to a usual DNS server (specified in resolv.conf, or you can put its IP instead of the '#' character)
  server=/allowed.example.com/#
  

  Note that entries in /etc/hosts are also effective and will be returned unmodified. If you need to disable them as well, you can force them to return 0.0.0.0 by another address=/example.net/0.0.0.0 config line.
• Neoon Community Contributor, Veteran

  February 2014 edited February 2014

  Working thanks!
• ttimew Member

  September 2015

  Please, can you post your dnsmasq.conf? Please please please! :-) I've tried but has not worked for me...
• Neoon Community Contributor, Veteran

  September 2015

  No idea, already wiped my raspberry pi.