ads

wget http://malc0de.com/bl/ZONES -O /etc/blackhole/malcode.tmp
cat /etc/blacklist/malcode.tmp | cut -d'"' -f2 | grep -v -E "//|^$|#"| cut -d'?' -f1 | sed -e '/^M/d' >> /etc/blacklist/master.list
wget http://dns-bh.sagadc.org/domains.txt -O /etc/blacklist/dns-bh.sagadc.org.tmp
cat /etc/blacklist/dns-bh.sagadc.org.tmp | grep -v '#' | awk '$1 ~ /^20/ {print}' | awk '$6 ~ /^20/ {print $2}' | sort -u | sed -e '/^M/d' >> /etc/blacklist/master.list
cat /etc/blacklist/master.list | grep -v '<' | grep -v '>' | grep -v '#' | grep -v '//' \
| sed '/^$/d' | grep -v -E "\.$" | sort -u > /etc/blacklist/master.list.tmp
rm -rf /etc/blacklist/master.list
dos2unix /etc/blacklist/master.list.tmp
cat /etc/blacklist/master.list.tmp | sort | uniq > /etc/blacklist/master.list
for a in `cat /etc/blacklist/master.list | grep -v '#'`; do
echo 'local-data: "'$a' A 172.16.40.226"' >> /etc/blacklist/blacklisted_domains.tmp
done
curl -sS -L --compressed "http://pgl.yoyo.org/adservers/serverlist.php…" > /etc/blacklisted/ad_servers
cat /etc/blacklisted/ad_servers >> /etc/blacklist/blacklisted_domains.tmp
cat /etc/blacklisted/blacklisted_domains.tmp | sort | uniq > /etc/blacklisted/blacklisted
malc0de.com
// This bind zone is intended to be included in a running dns server for a local net // It will return 127.0.0.1 for domains serving malicious executables observed by malc0de.com/database/ // This file will be automatically updated daily and populated with the last 30 days of malicious domains. // A…
malc0de.com
11:25AM
blocked

Joko
#### unbound DNS filtering buat ads dan malware ####
#!/bin/bash
today=`date "+%Y-%m-%d-%H-%M-%S"`

mv /etc/unbound/blackhole/blacklisted /etc/unbound/blackhole/backup/blacklisted.$today
wget -t 3 http://malc0de.com/bl/ZONES -O /etc/unbound/blackhole/malcode.tmp
cat /etc/unbound/blackhole/malcode.tmp | cut -d'"' -f2 | grep -v -E "//|^$|#"| cut -d'?' -f1 | sed -e '/^M/d' >> /etc/unbound/blackhole/master.list
wget http://dns-bh.sagadc.org/domains.txt -O /etc/unbound/blackhole/dns-bh.sagadc.org.tmp
cat /etc/unbound/blackhole/dns-bh.sagadc.org.tmp | grep -v '#' | awk '$1 ~ /^20/ {print}' | awk '$6 ~ /^20/ {print $2}' | sort -u | sed -e '/^M/d' >> /etc/unbound/blackhole/master.list
cat /etc/unbound/blackhole/master.list | grep -v '<' | grep -v '>' | grep -v '#' | grep -v '//' \
        | sed '/^$/d' | grep -v -E "\.$" | sort -u > /etc/unbound/blackhole/master.list.tmp
rm -rf /etc/unbound/master.list
dos2unix /etc/unbound/blackhole/master.list.tmp
cat /etc/unbound/blackhole/master.list.tmp | sort | uniq > /etc/unbound/blackhole/master.list
for a in `cat /etc/unbound/blackhole/master.list | grep -v '#'`; do
                echo 'local-data: "'$a' A 127.0.0.1"' >> /etc/unbound/blackhole/blacklisted_domains.conf
done
curl -sS -L --compressed "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=unbound&showintro=0&mimetype=plaintext" > /etc/unbound/unbound_ad_servers
cat /etc/unbound/unbound_ad_servers >> /etc/unbound/blackhole/blacklisted_domains.conf
cat /etc/unbound/blackhole/blacklisted_domains.conf | sort | uniq > /etc/unbound/blackhole/blacklisted
rm  -rf /etc/unbound/unbound_ad_servers