RPZ zone response delay time ?

[Peter van Dijk]

On Fri, 2023-04-07 at 17:27 +0100, Jason Vas Dias wrote:
> 
> *.google-analytics.com A 0.0.0.0
> *.clarity.ms A 0.0.0.0
> *.adtelligent.com A 0.0.0.0
> 
>   (there are over 15,000 entries in it).
> 
>   This serves to speed up my internet accesses about 10 times,
>   normally, and acts great as an ad+spyware site blocker,
>   like a do-it-yourself RBL list.
> 
>   I create a static route at boot-up :
> 
> blackhole 0.0.0.0/8

A /8 blackhole route will not win from the 0.0.0.0/32 "route" (it is
implicit, but you can see it with `ip route get` on Linux) that goes to
your local system.

0.0.0.0 is not the right DNS response here, or almost anywhere. NXDOMAIN
likely fits better.


Kind regards,
-- 
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/