For a few months now I have used the software package named Pi-Hole as an internal network DNS server to prevent ad sites in addition to malicious websites from being accessible form compute resources on my home network.
Pi-Hole is a small install that can be installed on any Linux system and it works like a charm.
Install is simple, just run the following command:
curl -sSL https://install.pi-hole.net | bash
Answer a few questions about how you would like the software configured and your up and running.
This is a very useful software this gives you many options to report on the activity of the systems on your network and what connections were requested and those blocked.
For more information and details please visit: https://pi-hole.net/
The following video also shows the installation process via a Putty SSH session.
[youtube id=”4uogMYk-ero” width=”600″ height=”350″]
Malicious Lists – used to block phishing, and malware sites
https://v.firebog.net/hosts/Airelle-hrsk.txt
https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt
https://mirror1.malwaredomains.com/files/justdomains
https://hosts-file.net/exp.txt
https://hosts-file.net/emd.txt
https://hosts-file.net/psh.txt
https://mirror.cedia.org.ec/malwaredomains/immortal_domains.txt
https://www.malwaredomainlist.com/hostslist/hosts.txt
https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txt
https://v.firebog.net/hosts/Prigent-Malware.txt
https://v.firebog.net/hosts/Prigent-Phishing.txt
https://raw.githubusercontent.com/quidsup/notrack/master/malicious-sites.txt
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://v.firebog.net/hosts/Shalla-mal.txt
https://raw.githubusercontent.com/StevenBlack/hosts/master/data/add.Risk/hosts
https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist
*Update*
Almost 50% of my home network traffic is junk, and so is yours. Do something about it, because your privacy is being taken from you and sold.
7 replies on “Network Wide Ad & Malicious Website Blocking | Pi-Hole”
My Current List –
# The below list amalgamates several lists we used previously.
# See `https://github.com/StevenBlack/hosts` for details
##StevenBlack’s list
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
##MalwareDomains
https://mirror1.malwaredomains.com/files/justdomains
##Cameleon
http://sysctl.org/cameleon/hosts
##Zeustracker
https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist
##Disconnect.me Tracking
https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt
##Disconnect.me Ads
https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
##Hosts-file.net
https://hosts-file.net/ad_servers.txt
## jermsmit Custom List
http://winhelp2002.mvps.org/hosts.txt
https://hosts-file.net/download/hosts.txt
https://v.firebog.net/hosts/Airelle-hrsk.txt
https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt
https://mirror1.malwaredomains.com/files/justdomains
https://hosts-file.net/exp.txt
https://hosts-file.net/emd.txt
https://hosts-file.net/psh.txt
https://mirror.cedia.org.ec/malwaredomains/immortal_domains.txt
https://www.malwaredomainlist.com/hostslist/hosts.txt
https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txt
https://v.firebog.net/hosts/Prigent-Malware.txt
https://v.firebog.net/hosts/Prigent-Phishing.txt
https://raw.githubusercontent.com/quidsup/notrack/master/malicious-sites.txt
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://v.firebog.net/hosts/Shalla-mal.txt
https://raw.githubusercontent.com/StevenBlack/hosts/master/data/add.Risk/hosts
https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist
How much would you charge to build this for someone.
are these the sites you are saying we should blacklist?
Is there a safe way to test that its working ?
These are sites holding lists of domains that should be added for max protection.
[…] More on setup here […]
Is there an easy way of implementing all of these blocks into pi-hole?
Thanks
Yes actually there is. The simplest way to do this is to add the full list that I shared on this blog post. Please note that you may have to wait list some things for social media like Facebook Instagram. It’s always advised to do some fine-tuning after implementing such a broad spectrum of blocking. Pihole by default has the capability of using DNSSEC. And if you add openvpn to the same host as the pihole they can become an all-in-one solution