Suggestions for blocklists!

Questions
45

I went down the rabbit hole a few months ago and had a bunch enabled before I realized it was slowing down my router.

One Linux friendly solution is to download the blocklist files, sort them and then compare their contents to see how much overlap is present in the blocklists and remove the lists that are redundant:

Here’s a rough outline:

curl -LO path/to/first/blocklist
curl -LO path/to/second/blocklist
sort firstblocklist.txt > sortFirstBlocklist.txt
sort secondtblocklist.txt > sortSecondBlocklist.txt
comm -12 sortFirstBlocklist.txt sortSecondBlocklist.txt | wc -l
1 Like
46

Mullvad DNS Over HTTPS. Specifically all.dns.mullvad.net

Combined with a good privacy browser, this serves its purpose. Works on phones as well.

1 Like
47

That’s what I thought, but what about at the DNS level? Would the attack surface area be as big or smaller? I was thinking of letting NextDNS handle this.

48

NextDNS takes that matter into its own hands. Like my comment above, it’s the preferred way of blocking domains. You don’t have to lift your finger. And the chance of exposing attack surface is very thin. I don’t know what’s the reasoning behind it, like - malicious rules to redirect google.com domain to a malicious resource? Most of these providers have verified blocklists. It’s also why I still stay by Mull, they publicly show their blocklists in the usage: GitHub - mullvad/dns-blocklists: Lists and configuration for our DNS blocking service

1 Like
49

Switching from NextDNS to AdGuard went super smoothly and painlessly. It really feels like the first one is 10 years behind the times, and there haven’t been any updates or even new lists in a really long time, even though lots of people on the forums have been asking for years. Well, I hope many others make the necessary switch too. I probably would have stayed if they had at least added HaGeZi’s TIF, but nope. You’re supposed to trust their own list, which is closed-source, and you have no idea when it was even last updated.

image
image852×933 13 KB

50

I use Hagezi’s Ultimate blacklist for Unbound; this applies network-wide.

On my main rig, I alo run uBlock and uMatrix. I configured uMatrix to block all third-party domains by default and I manually allow CDNs and other dependencies. At this point in 2025, it seems to be easier to whitelist than to blacklist. The amount of unnecessary scripts loaded by many websites (in particular news websites) is downright scary; this is all blocked.

2 Likes
51

I use Hagezi Pro ++ on every device and so far it is good. I had some false positives but Hagezi fixed it within one day, which is awesome.

52

That’s good too, but it also needs TIF support and it’s slow to run in the browser.

53

Well, they are running on my Control D for my whole network. On browser side I put Brave settings to aggressive and that works usually :slight_smile:

54

So are you using Pro++ and TIF? I’ve also got Brave’s top four and Ultimate mini in my browser.

55

Pro++ and TIF are on my General profile for everything, plus other blocklists configured to each member of my household. I have also set Control D’s own blocklists for General blocklist

56

That sounds good!

57

Hello everyone, how can we add Hagezi list inside AdGuard on MacOS? On Native Tracker - Broadband tracker of devices, services and operating systems section, there are different categories on the specific line Apple (iOS, macOS, tvOS) (AdBlocker, Domains, etc.) with diffferent sub categories (GH, GL, GB). Which one do I have to choose?

Thanks

58

This and for example GH, i.e. Github.

image
image1197×128 2.78 KB

59

Oh okay, because I was looking for a blocklist specific to macos to optimize

60

Don’t mess with the settings yourself. If you want a set-and-forget solution, pick the Pro version. It’s already optimized right out of the box.

1 Like
61

Okay thanks!

1 Like
62

Hey all :slight_smile: a little late to the party lol.

I’ve been using your list (among others) on my pihole and just a heads-up for people who that might bother; it blocks the connection to Facebook.

63

image
image1207×110 3.07 KB

1 Like
64

I use a large assortment of blocklists, and I always choose the most aggressive version if given the choice.

On pages I decide to override, in uBlock Origin, I use “Open the logger”, refresh the page, and selectively allow the blocked assets. After performing the steps two or three times, it becomes second nature.

Admittedly, I miss using uMatrix (deprecated) playing the ‘tile game’ to get a site working with temporal graylists. :slight_smile: