mirror of
https://github.com/yokoffing/NextDNS-Config.git
synced 2025-11-18 08:03:38 -05:00
Update README.md
This commit is contained in:
36
README.md
36
README.md
@@ -45,8 +45,6 @@ Security settings protect your data from harm, theft, and unauthorized use.
|
|||||||
### Block Top-Level Domains (TLDs) <sup><sup>[1](https://webtribunal.net/blog/tld-statistics/) [2](https://www.spamhaus.org/statistics/tlds/) [3](https://www.bleepingcomputer.com/news/security/verified-twitter-accounts-hacked-to-send-fake-suspension-notices/) [4](https://github.com/iam-py-test/my_filters_001/blob/main/enhanced_protection.txt) [5](https://github.com/DandelionSprout/adfilt/blob/master/Dandelion%20Sprout's%20Anti-Malware%20List.txt) </sup></sup>
|
### Block Top-Level Domains (TLDs) <sup><sup>[1](https://webtribunal.net/blog/tld-statistics/) [2](https://www.spamhaus.org/statistics/tlds/) [3](https://www.bleepingcomputer.com/news/security/verified-twitter-accounts-hacked-to-send-fake-suspension-notices/) [4](https://github.com/iam-py-test/my_filters_001/blob/main/enhanced_protection.txt) [5](https://github.com/DandelionSprout/adfilt/blob/master/Dandelion%20Sprout's%20Anti-Malware%20List.txt) </sup></sup>
|
||||||
:warning: Blocking [TLDs](https://www.geeksforgeeks.org/components-of-a-url/) may cause [false positives](https://csrc.nist.gov/glossary/term/false_positive) since this feature blocks both site nagviations and subrequests. However, the entries below should allow for everyday browsing while offering protection against commonly abused TLDs. *If you plan to [set-and-forget](https://glosbe.com/en/en/set-and-forget) your configuration, skip this setting.*
|
:warning: Blocking [TLDs](https://www.geeksforgeeks.org/components-of-a-url/) may cause [false positives](https://csrc.nist.gov/glossary/term/false_positive) since this feature blocks both site nagviations and subrequests. However, the entries below should allow for everyday browsing while offering protection against commonly abused TLDs. *If you plan to [set-and-forget](https://glosbe.com/en/en/set-and-forget) your configuration, skip this setting.*
|
||||||
|
|
||||||
<details>
|
|
||||||
|
|
||||||
```
|
```
|
||||||
.associates
|
.associates
|
||||||
.bid
|
.bid
|
||||||
@@ -65,8 +63,6 @@ Security settings protect your data from harm, theft, and unauthorized use.
|
|||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
</details>
|
|
||||||
|
|
||||||
:stop_sign: Here are additional TLDs you may block, but you may need to [allowlist](https://github.com/yokoffing/NextDNS-Config#allowlist-white_check_mark) sites on occasion:
|
:stop_sign: Here are additional TLDs you may block, but you may need to [allowlist](https://github.com/yokoffing/NextDNS-Config#allowlist-white_check_mark) sites on occasion:
|
||||||
|
|
||||||
<details>
|
<details>
|
||||||
@@ -108,30 +104,22 @@ Privacy is a [spectrum](https://blog.thenewoil.org/the-privacy-myth-binary-vs-sp
|
|||||||
|
|
||||||
### Blocklists <sup><sup>[1](https://github.com/nextdns/metadata/tree/master/privacy/blocklists)</sup></sup>
|
### Blocklists <sup><sup>[1](https://github.com/nextdns/metadata/tree/master/privacy/blocklists)</sup></sup>
|
||||||
|
|
||||||
Blocklists are community generated lists that block ads and [trackers](https://www.freecodecamp.org/news/what-you-should-know-about-web-tracking-and-how-it-affects-your-online-privacy-42935355525/). Filters can be categorized into five tiers of coverage:
|
Blocklists are community generated lists that block ads and [trackers](https://www.freecodecamp.org/news/what-you-should-know-about-web-tracking-and-how-it-affects-your-online-privacy-42935355525/). Filters can be categorized into four tiers of coverage:
|
||||||
1) **None**: no breakage; NextDNS still protects against malicious threats (à la [security settings](https://github.com/yokoffing/NextDNS-Config#security-cop)) but will allow ads and trackers
|
1) **None**: no breakage; NextDNS still protects against malicious threats (à la [security settings](https://github.com/yokoffing/NextDNS-Config#security-cop)) but will allow ads and trackers
|
||||||
2) **Basic**: rare breakage; prioritizes functionality over blocking; very forgiving; ideal for router profiles
|
2) **Balanced**: minimal breakage; prioritizes functionality over blocking; largely [set-and-forget](https://glosbe.com/en/en/set-and-forget) but you may need to allowlist occasionally
|
||||||
3) **Balanced**: minimal breakage; should not interfere with everyday browsing; largely [set-and-forget](https://glosbe.com/en/en/set-and-forget) but you may need to allowlist occasionally
|
3) **Strict**: moderate breakage; prioritizes privacy over user experience; must [manage your allowlist](https://github.com/yokoffing/NextDNS-Config#allowlist-white_check_mark) regularly
|
||||||
4) **Strict**: moderate breakage; prioritizes privacy over user experience; must [manage your allowlist](https://github.com/yokoffing/NextDNS-Config#allowlist-white_check_mark) regularly
|
4) **Aggressive**: excessive breakage; use on a separate profile to [lockdown single-purpose devices](https://old.reddit.com/r/nextdns/comments/uqap3n/comment/i8q8alf/?context=3)
|
||||||
5) **Aggressive**: excessive breakage; use on a separate profile to [lockdown single-purpose devices](https://old.reddit.com/r/nextdns/comments/uqap3n/comment/i8q8alf/?context=3)
|
|
||||||
|
|
||||||
Here's a compliation of popular blocklists available in NextDNS:
|
Here's a compliation of popular blocklists available in NextDNS:
|
||||||
|
|
||||||
| Basic | Balanced | Strict | Aggressive |
|
| Balanced | Strict | Aggressive |
|
||||||
|:-------------------: |:---------------: |:-----------------------------: |:--------------------: |
|
|:---------------: |:-----------------------------: |:--------------------: |
|
||||||
| 1Hosts (mini) | 1Hosts (Lite) | 1Hosts (Pro) | 1Hosts (Xtra) |
|
| 1Hosts (Lite) | 1Hosts (Pro) | 1Hosts (Xtra) |
|
||||||
| oisd | oisd | NextDNS Ads & Trackers Blocklist | Goodbye Ads |
|
| oisd | NextDNS Ads & Trackers Blocklist | Goodbye Ads |
|
||||||
| | | Lightswitch05 - Ads & Tracking | Energized Ultimate |
|
| | Lightswitch05 - Ads & Tracking | Energized Ultimate |
|
||||||
|
|
||||||
:bulb: The **Balanced** tier is recommended for the average user, based on my testing and user feedback.<sup>[1](https://old.reddit.com/r/nextdns/comments/s2gzc5/oisd_vs_1hostsminiliteproxtra/hsgmp5n/) [2](https://old.reddit.com/r/nextdns/comments/xoyyw2/nextdns_as_a_set_it_and_forget_it_solution/iq1k6tx/) [3](https://old.reddit.com/r/nextdns/comments/vuon2a/one_profile_for_lan_devices_another_profile_for/iffegc5/?context=2) [4](https://old.reddit.com/r/nextdns/comments/vn8olr/please_could_someone_recommend_me_a_good/ie5meel/?context=2) </sup>
|
:bulb: The **Balanced** tier is recommended for the average user, based on my testing and user feedback.<sup>[1](https://old.reddit.com/r/nextdns/comments/s2gzc5/oisd_vs_1hostsminiliteproxtra/hsgmp5n/) [2](https://old.reddit.com/r/nextdns/comments/xoyyw2/nextdns_as_a_set_it_and_forget_it_solution/iq1k6tx/) [3](https://old.reddit.com/r/nextdns/comments/vuon2a/one_profile_for_lan_devices_another_profile_for/iffegc5/?context=2) [4](https://old.reddit.com/r/nextdns/comments/vn8olr/please_could_someone_recommend_me_a_good/ie5meel/?context=2) </sup>
|
||||||
|
|
||||||
:radioactive: You will see many [blocklists in NextDNS](https://github.com/nextdns/metadata/tree/master/privacy/blocklists) and around the web.
|
|
||||||
- Some block too much
|
|
||||||
- Some block too little
|
|
||||||
- Some block everything, including what's needed for functionality
|
|
||||||
- A small few are actively maintained and remove false positives
|
|
||||||
- Filtering out false positives is paramount for a good blocklist
|
|
||||||
|
|
||||||
### Native Tracking Protection <sup><sup>[1](https://github.com/nextdns/metadata/tree/master/privacy/native)</sup></sup>
|
### Native Tracking Protection <sup><sup>[1](https://github.com/nextdns/metadata/tree/master/privacy/native)</sup></sup>
|
||||||
|
|
||||||
Add all the device brands that you use. There's no advantage in adding brands you don't have; however, there’s no disadvantage in adding unused brands, either.
|
Add all the device brands that you use. There's no advantage in adding brands you don't have; however, there’s no disadvantage in adding unused brands, either.
|
||||||
@@ -168,10 +156,14 @@ Add all the device brands that you use. There's no advantage in adding brands yo
|
|||||||
|
|
||||||
# Denylist :no_entry:
|
# Denylist :no_entry:
|
||||||
|
|
||||||
Denylist entries block any requests from that source.
|
Denylist entries block any requests from that source. Entries below should not interfere with everyday browsing.
|
||||||
|
|
||||||
<details>
|
<details>
|
||||||
|
|
||||||
|
### Twitter tracker
|
||||||
|
|
||||||
|
syndication.twitter.com
|
||||||
|
|
||||||
### Junk surveillance software
|
### Junk surveillance software
|
||||||
|
|
||||||
spappmonitoring.com
|
spappmonitoring.com
|
||||||
|
|||||||
Reference in New Issue
Block a user