Repository navigation
Home
I use python-blocklists to turn mixed indicator feeds into one set of domain, IPv4, and IPv6 blocklists, with installers for each enforcement layer. The compiler runs without privileges. Applying its output is a separate operation.
Start with a local offline feed, inspect the generated lists and report, then apply the layers your target host uses. DNS enrichment is bounded, IP coverage is checked after optimization, and eBPF operates independently of iptables on the interfaces it covers.
- Getting started
- Input formats and sources
- Complete CLI reference
- DNS enrichment and exclusions
- Progress and report fields
- Output bundle
- Firewall, Wrappers, and resolver deployment
- eBPF enforcement and monitoring
- Troubleshooting and recovery
- Development and testing
- References and license
The tool generates ipset/iptables rules, TCP Wrappers entries, Unbound zones, dnscrypt-proxy patterns, and TC eBPF programs. It does not promise complete reverse-domain enumeration, process-level connection tracing, or protection against a privileged administrator who can change network policy.
The pages in docs/wiki/ are the version-controlled source for this wiki.
Copyright and license terms are in References.
python-blocklists