-
Notifications
You must be signed in to change notification settings - Fork 35
/
Copy pathREADME.header
572 lines (403 loc) · 23 KB
/
README.header
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
# **UBNT edgeos-dnsmasq-blacklist dnsmasq DNS Blacklisting and Redirection**
[](https://github.com/britannic/blacklist/blob/master/LICENSE.txt "View the software license here")[](https://github.com/britannic/blacklist "Latest version")[](https://godoc.org/github.com/britannic/blacklist "Go documentation")[](https://travis-ci.org/britannic/blacklist "Build status for this version")[](https://coveralls.io/github/britannic/blacklist?branch=master "Test coverage status for this version")[](https://goreportcard.com/report/github.com/britannic/blacklist "Quality of Go code for this version")
Follow the conversation @ [community.ui.com](https://community.ui.com/questions/DNS-Adblocking-and-Blacklisting-dnsmasq-Configuration-Integration-Package-v1-2-4-5/eb05f1b2-5316-4a80-8221-5e8b02575da4)
## Donations and Sponsorship
Please show your thanks by donating to the project using [Square Cash](https://cash.me/$HelmRockSecurity/ "Securely send and receive cash without fees using Square Cash") or [PayPal](https://www.paypal.me/helmrocksecurity/)
[](https://cash.me/$HelmRockSecurity/5 "Give $5 using Square Cash (free money transfer)")
[](https://cash.me/$HelmRockSecurity/10 "Give $10 using Square Cash (free money transfer)")
[](https://cash.me/$HelmRockSecurity/20 "Give $20 using Square Cash (free money transfer)")
[](https://cash.me/$HelmRockSecurity/25 "Give $25 using Square Cash (free money transfer)")
[](https://cash.me/$HelmRockSecurity/50 "Give $50 using Square Cash (free money transfer)")
[](https://cash.me/$HelmRockSecurity/ "Choose your own donation amount using Square Cash (free money transfer)")
[](https://paypal.me/helmrocksecurity/5 "Give $5 using PayPal (PayPal money transfer)")
[](https://paypal.me/helmrocksecurity/10 "Give $10 using PayPal (PayPal money transfer)")
[](https://paypal.me/helmrocksecurity/20 "Give $20 using PayPal (PayPal money transfer)")
[](https://paypal.me/helmrocksecurity/25 "Give $25 using PayPal (PayPal money transfer)")
[](https://paypal.me/helmrocksecurity/50 "Give $50 using PayPal (PayPal money transfer)")
[](https://paypal.me/helmrocksecurity/ "Choose your own donation amount using PayPal (PayPal money transfer)")
We greatly appreciate any and all donations - thank you! Funds go to maintaining development servers and networks.
## Note: This is 3rd party software and isn't supported or endorsed by Ubiquiti Networks®
## **Contents**
1. [Overview](#overview)
1. [Donate](#donations-and-sponsorship)
1. [Copyright](#copyright)
1. [Licenses](#licenses)
1. [Latest Version](#latest-version)
1. [Change Log](https://github.com/britannic/blacklist/blob/master/CHANGELOG.md)
1. [Features](#features)
1. [Compatibility](#compatibility)
1. [Installation](#installation)
1. [Using apt-get](#apt-get-installation---erlite-3-erpoe-5-er-x-er-x-sfp-er4-unifi-gateway-3--unifi-gateway-4)
1. [Using dpkg](#dpkg-installation---best-for-disk-space-constrained-routers)
1. [Upgrade](#upgrade)
1. [Reconfigure](#reconfigure)
1. [Removal](#removal)
1. [Frequently Asked Questions](#frequently-asked-questions)
1. [Can I donate to project?](#donations-and-sponsorship)
1. [Does the install backup my blacklist configuration before deleting it?](#does-the-install-backup-my-blacklist-configuration-before-deleting-it)
1. [Does update-dnsmasq run automatically?](#does-update-dnsmasq-run-automatically)
1. [How do I add or delete sources?](#how-do-i-add-or-delete-sources)
1. [How do I back up my blacklist configuration and restore it later?](#how-do-i-back-up-my-blacklist-configuration-and-restore-it-later)
1. [How do I configure dnsmasq?](#how-do-i-configure-dnsmasq)
1. [How do I configure local file sources instead of internet based ones?](#how-do-i-configure-local-file-sources-instead-of-internet-based-ones)
1. [How do I use standalone or failover mode?](#how-do-i-use-standalone-or-failover-mode)
1. [How do I disable/enable dnsmasq blacklisting?](#how-do-i-disableenable-dnsmasq-blacklisting)
1. [How do I exclude or include a host or a domain?](#how-do-i-exclude-or-include-a-host-or-a-domain)
1. [How do I globally exclude or include hosts or a domains?](#how-do-i-globally-exclude-or-include-hosts-or-a-domains)
1. [How do I use the command line switches?](#how-do-i-use-the-command-line-switches)
1. [How do can keep my USG configuration after an upgrade, provision or reboot?](#how-do-i-keep-my-usg-configuration-after-an-upgrade-provision-or-reboot)
1. [How does whitelisting work?](#how-does-whitelisting-work)
1. [What is the difference between blocking domains and hosts?](#what-is-the-difference-between-blocking-domains-and-hosts)
1. [Which blacklist sources are installed by default?](#which-blacklist-sources-are-installed-by-default)
1. [How do I troubleshoot dnsmasq blacklisting?](#how-do-i-troubleshoot-dnsmasq-blacklisting)
## **Overview**
EdgeMax dnsmasq DNS blacklisting and redirection is inspired by the users at [Ubiquiti UISP Community](https://community.ui.com/tags/unms)
[[Top]](#contents)
## **Copyright**
* Copyright © 2023 [Helm Rock Consulting](https://www.helmrock.com/ "Visit Helm Rock Consulting at https://www.helmrock.com/")
[[Top]](#contents)
## **Licenses**
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this
list of conditions and the following disclaimer.
1. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The views and conclusions contained in the software and documentation are those
of the authors and should not be interpreted as representing official policies,
either expressed or implied, of the FreeBSD Project.
[[Top]](#contents)
## **Latest Version**
[](https://github.com/britannic/blacklist/releases/latest "Latest version")
## Release 1.2.4.9 (June 7, 2023)
* Fixed [Issue #66](https://github.com/britannic/blacklist/issues/66) documentation issue* Fixed [Issue #56](https://github.com/britannic/blacklist/issues/56) removed large source [StevenBlack/hosts](https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts) as it prevented dnsmasq from starting on ER-X routers
* It can be installed using
```bash
set service dns forwarding blacklist hosts source githubSteveBlack url 'https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts'
set service dns forwarding blacklist hosts source githubSteveBlack description 'Blacklists adware and malware websites'
set service dns forwarding blacklist hosts source githubSteveBlack prefix '0.0.0.0 '
```
[[Top]](#contents)
## **Change Log**
* See [changelog](https://github.com/britannic/blacklist/blob/master/CHANGELOG.md) for details.
[[Top]](#contents)
## **Features**
* Adds DNS blacklisting integration to the EdgeRouter configuration
* Generates configuration files used directly by dnsmasq to redirect dns lookups
* Integrated with the EdgeMax OS CLI
* Any FQDN in the blacklist will force dnsmasq to return the configured dns redirect IP address
[[Top]](#contents)
## **Compatibility**
* edgeos-dnsmasq-blacklist has been tested on the EdgeRouter ERLite-3, ERPoe-5, ER-X, ER4, UniFi Security Gateway USG3 and USG4 routers
* EdgeMAX versions: v1.9.7+hotfix.6-v2.0.9-hotfix.6
* UniFi versions: 4.4.34.5140624-4.4.57.5578372
[[Top]](#contents)
## **Installation**
* [Using apt-get](#apt-get-installation---erlite-3-erpoe-5-er-x-er-x-sfp-er4-unifi-gateway-3--unifi-gateway-4) - works for all routers
* [Using dpkg](#dpkg-installation---best-for-disk-space-constrained-routers) - best for disk space constrained routers
[[Top]](#contents)
### **apt-get Installation - ERLite-3, ERPoe-5, ER-X, ER-X-SFP, ER4, UniFi-Gateway-3 & UniFi-Gateway-4**
* Add the blacklist debian package repository using the router's CLI shell
```bash
configure
set system package repository blacklist components main
set system package repository blacklist description 'Britannic blacklist debian stretch repository'
set system package repository blacklist distribution stretch
set system package repository blacklist url 'https://raw.githubusercontent.com/britannic/debian-repo/master/blacklist/public/'
commit;save;exit
```
* Add the GPG signing key
```bash
sudo curl -L https://raw.githubusercontent.com/britannic/debian-repo/master/blacklist/public.key | sudo apt-key add -
```
* Update the system repositorities and install edgeos-dnsmasq-blacklist
```bash
sudo apt-get update && sudo apt-get install -f edgeos-dnsmasq-blacklist
```
* You may see reports of unmet dependencies, run this command to fix that:
```bash
apt --fix-broken install
```
[[Top]](#contents)
## **dpkg Installation - best for disk space constrained routers**
### **EdgeRouter ERLite-3, ERPoe-5, ER4, UniFi-Gateway-3 & UniFi-Gateway-4**
```bash
curl -L -O https://raw.githubusercontent.com/britannic/blacklist/master/edgeos-dnsmasq-blacklist_1.2.4.9_mips.deb
sudo dpkg -i edgeos-dnsmasq-blacklist_1.2.4.9_mips.deb
```
[[Top]](#contents)
### **EdgeRouter ER-X & ER-X-SFP**
* Ensure the router has enough space, by removing unnecessary files
```bash
sudo apt-get clean cache
delete system image
```
* Now download and install the edgeos-dnsmasq-blacklist package
```bash
curl -L -O https://raw.githubusercontent.com/britannic/blacklist/master/edgeos-dnsmasq-blacklist_1.2.4.9_mipsel.deb
sudo dpkg -i edgeos-dnsmasq-blacklist_1.2.4.9_mipsel.deb
```
[[Top]](#contents)
## **Upgrade**
* If the repository is set up and you are using apt-get:
```bash
sudo apt-get update && sudo apt-get install -f --only-upgrade edgeos-dnsmasq-blacklist
```
* Note, if you are using dpkg, it cannot upgrade packages, so follow these [instructions](#dpkg-installation---best-for-disk-space-constrained-routers) and the previous package version will be automatically removed before the new package version is installed
[[Top]](#contents)
## **Reconfigure**
* If the Unifi Security Gateway has been re-provisioned you might need to re-enable the blacklists, in order to do so run:
```bash
sudo dpkg-reconfigure edgeos-dnsmasq-blacklist
```
[[Top]](#contents)
## **Removal**
### **EdgeMAX - All Platforms**
```bash
sudo apt-get remove --purge edgeos-dnsmasq-blacklist
```
[[Top]](#contents)
## **Frequently Asked Questions**
### **How do I disable/enable dnsmasq blacklisting?**
* Use these CLI configure commands:
* Disable:
```bash
configure
set service dns forwarding blacklist disabled true
commit;save;exit
```
* Enable:
```bash
configure
set service dns forwarding blacklist disabled false
commit;save;exit
```
[[Top]](#contents)
### **Does the install backup my blacklist configuration before deleting it?**
* If a blacklist configuration already exists, the install routine will automatically back it up to /config/user-data/blacklist.$(date +'%FT%H%M%S').cmds
[[Top]](#contents)
### **How do I back up my blacklist configuration and restore it later?**
* use the following commands (make a note of the file name) in the shell (not in configure):
```bash
export DATE=$(date +'%FT%H%M%S'); echo "Backing up blacklist configuration to: /config/user-data/blacklist.${DATE}.cmds"; show configuration commands | grep blacklist > /config/user-data/blacklist.$(date +'%FT%H%M%S').cmds
```
* After installing the latest version, you can merge your backed up configuration:
```bash
configure
. /config/user-data/blacklist.[date string].cmds
commit;save;exit
```
* If you prefer to delete the default configuration and restore your previous configuration, run these commands:
```bash
configure
delete service dns forwarding blacklist
. /config/user-data/blacklist.[date string].cmds
commit;save;exit
```
[[Top]](#contents)
### **Which blacklist sources are installed by default?**
* Use these CLI shell commands to view the current sources or scan the log for previous downloads:
```bash
show configuration commands | match source
grep downloaded /var/log/update-dnsmasq.log
```
[[Top]](#contents)
### **How do I configure local file sources instead of internet based ones?**
* Use these commands to configure a local file source
```bash
set service dns forwarding blacklist hosts source myhosts description 'Blacklist file source'
set service dns forwarding blacklist hosts source myhosts dns-redirect-ip 0.0.0.0
set service dns forwarding blacklist hosts source myhosts file /config/user-data/blist.hosts.src
```
* File contents example for /config/user-data/blist.hosts.src:
```bash
gsmtop.net
click.buzzcity.net
ads.admoda.com
stats.pflexads.com
a.glcdn.co
wwww.adleads.com
ad.madvertise.de
apps.buzzcity.net
ads.mobgold.com
android.bcfads.com
req.appads.com
show.buzzcity.net
api.analytics.omgpop.com
r.edge.inmobicdn.net
www.mmnetwork.mobi
img.ads.huntmad.com
creative1cdn.mobfox.com
admicro2.vcmedia.vn
admicro1.vcmedia.vn
```
[[Top]](#contents)
### **How do I use standalone or failover mode?**
* The update-dnsmasq binary checks for an active configuration in the following locations:
1. Uses the EdgeOS/UniFi shell API to get the active blacklist configuration
1. /config/config.boot (only used if -safe switch is used)
1. /config/user-data/blacklist.failover.cfg (only used if it has been created and the -safe switch is used)
* If no configuration is found, update-dnsmasq will remove any dnsmasq blocklists it previously created
[[Top]](#contents)
### **How do I keep my USG configuration after an upgrade, provision or reboot?**
* Follow these [instructions](https://britannic.github.io/install-edgeos-packages/) on how to automatically install edgeos-dnsmasq-blacklist
* Generate and download a config.gateway.json file from your USG following these [instructions](https://help.ui.com/hc/en-us/articles/215458888-UniFi-USG-Advanced-Configuration-Using-config-gateway-json)
* Here's a sample [config.gateway.json](https://raw.githubusercontent.com/britannic/blacklist/master/config.gateway.json)
* Once the config.gateway.json has been generated, it will need to be uploaded to your **UniFi controller** per the [instructions](https://help.ui.com/hc/en-us/articles/215458888-UniFi-USG-Advanced-Configuration-Using-config-gateway-json)
* Alternatively follow the instructions for [how do I use standalone or failover mode?](#how-do-i-use-standalone-or-failover-mode)
[[Top]](#contents)
### **How do I add or delete sources?**
* Using the CLI configure command, to delete domains and hosts sources:
```bash
configure
delete service dns forwarding blacklist domains source malc0de
delete service dns forwarding blacklist hosts source yoyo.org
commit;save;exit
```
* To add a source, first check it can serve a text list and also note the prefix (if any) before the hosts or domains, e.g. [No Coin Filter](https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt) has this format:
```text
# No Coin Filter List #
# https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt #
# Last updated: Mon, 04 Dec 17 19:18:42 +0000 #
127.0.0.1 localhost
127.0.0.1 0koryu0.easter.ne.jp
127.0.0.1 109-204-26-16.netconnexion.managedbroadband.co.uk
127.0.0.1 1866809.securefastserver.com
```
* So the prefix is "127.0.0.1 "
* Here's how to creating the source in the CLI:
```bash
configure
set service dns forwarding blacklist hosts source nocoinfilterlist description '127.0.0.1 based host and domain list'
set service dns forwarding blacklist hosts source nocoinfilterlist prefix '127.0.0.1 '
set service dns forwarding blacklist hosts source nocoinfilterlist url 'https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt'
commit;save;exit
```
[[Top]](#contents)
### **How do I globally exclude or include hosts or a domains?**
* Use these example commands to globally include or exclude blacklisted entries:
```bash
configure
set service dns forwarding blacklist exclude cdn.visiblemeasures.com
set service dns forwarding blacklist include www.nastywebsites.com
commit;save;exit
```
[[Top]](#contents)
### **How do I exclude or include a host or a domain?**
* Use these example commands to include or exclude blacklisted entries:
```bash
configure
set service dns forwarding blacklist domains exclude visiblemeasures.com
set service dns forwarding blacklist domains include domainsnastywebsites.com
set service dns forwarding blacklist hosts exclude cdn.visiblemeasures.com
set service dns forwarding blacklist hosts include www.nastywebsites.com
commit;save;exit
```
[[Top]](#contents)
### **How does whitelisting work?**
* dnsmasq whitelists any entries it finds in the configuration files domains and hosts (or servers) that have a hash in place of the IP address (the "#" forces dnsmasq to forward the DNS request to the router's configured nameservers)
* e.g. for servers (hosts)
```bash
server=/www.bing.com/#
```
* e.g. for domains
```bash
address=/bing.com/#
```
[[Top]](#contents)
### **Does update-dnsmasq run automatically?**
* Yes, a scheduled task is created and run daily at midnight with a random start delay is used ensure other routers in the same time zone won't overload the source servers.
* The random start delay window is configured in seconds using this command - this example sets the start delay between 1-10800 seconds (0-3 hours):
```bash
set system task-scheduler task update_blacklists executable arguments 10800
```
* It can be reconfigured using these CLI configuration commands:
```bash
set system task-scheduler task update_blacklists executable path /config/scripts/update-dnsmasq-cronjob.sh
set system task-scheduler task update_blacklists executable arguments 10800
set system task-scheduler task update_blacklists interval 1d
```
* For example, to change the execution interval to every 6 hours, use this command:
```bash
set system task-scheduler task update_blacklists interval 6h
```
* In daily use, no additional interaction with update-dnsmasq is required. By default, cron will run update-dnsmasq at midnight each day to download the blacklist sources and update the dnsmasq configuration files in /etc/dnsmasq.d. dnsmasq will automatically be reloaded after the configuration file update is completed.
[[Top]](#contents)
### **How do I use the command line switches?**
* update-dnsmasq has the following commandline switches available:
```bash
/config/scripts/update-dnsmasq -h
-dir string
Override dnsmasq directory (default "/etc/dnsmasq.d")
-f <file>
<file> # Load a config.boot file
-h Display help
-safe
Fail over to /config/user-data/blacklist.failover.cfg
-v Verbose display
-version
```
[[Top]](#contents)
### **How do I configure dnsmasq?**
* dnsmasq may need to be configured to ensure blacklisting works correctly
* Here is an example using the EdgeOS configuration shell
```bash
configure
set service dns forwarding cache-size 2048
set service dns forwarding except-interface [Your WAN i/f]
set service dns forwarding name-server [Your choice of IPv4 Internet Name-Server]
set service dns forwarding name-server [Your choice of IPv4 Internet Name-Server]
set service dns forwarding name-server [Your choice of IPv6 Internet Name-Server]
set service dns forwarding name-server [Your choice of IPv6 Internet Name-Server]
set service dns forwarding options bogus-priv
set service dns forwarding options domain-needed
set service dns forwarding options domain=mydomain.local
set service dns forwarding options enable-ra
set service dns forwarding options expand-hosts
set service dns forwarding options localise-queries
set service dns forwarding options strict-order
set service dns forwarding system
set system name-server 127.0.0.1
set system name-server '::1'
commit; save; exit
```
[[Top]](#contents)
### **What is the difference between blocking domains and hosts?**
* The difference lies in the order of update-dnsmasq's processing algorithm. Domains are processed first and take precedence over hosts, so that a blacklisted domain will force update-dnsmasq's source parser to exclude subsequent hosts from the same domain. This reduces dnsmasq's list of lookups, since it will automatically redirect hosts for a blacklisted domain.
[[Top]](#contents)
### **How do I troubleshoot dnsmasq blacklisting?**
* View last update log:
```bash
tail /var/log/update-dnsmasq.log
Total entries extracted = Total sites blocked
Timestamp = Last time the update ran
```
* Manually update the dnsmasq configuration files from sources:
```bash
sudo /config/scripts/update-dnsmasq -v
```
* Check if a domain or hostname is being blocked or manually excluded:
```bash
grep [host.domain.tld] /etc/dnsmasq.d/*
```
* Or:
```bash
grep [domain.tld] /etc/dnsmasq.d/*
```
* Note: If the domain/hostname is manually excluded it will appear in one of the *.whitelisted-*.conf files
* Display installed edgeos-dnsmasq-blacklist version:
```bash
sudo /config/scripts/update-dnsmasq -version
```
[[Top]](#contents)