mirror of
https://github.com/yokoffing/NextDNS-Config.git
synced 2025-11-08 11:23:50 -05:00
Compare commits
2 Commits
ced56ff270
...
99ad8b186a
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
99ad8b186a | ||
|
|
9ced7ba27a |
16
README.md
16
README.md
@@ -4,11 +4,11 @@
|
||||

|
||||

|
||||

|
||||
[](https://hits.seeyoufarm.com)
|
||||
[![Hits]()](https://hits.seeyoufarm.com)
|
||||
|
||||
***
|
||||
# Guidelines :bookmark:
|
||||
1) Prevent overblocking by utilizing the [law of diminishing returns](https://web.archive.org/web/20231108092752if_/https://pmctraining.com/site/wp-content/uploads/2018/04/Law-of-Diminishing-Returns-CHART.png) (e.g., using [sane](https://www.privacyguides.org/en/basics/threat-modeling/), quality [blocklists](https://github.com/yokoffing/NextDNS-Config#blocklists-1); allowing most [TLDs](https://github.com/yokoffing/NextDNS-Config#block-top-level-domains-tlds-1-2-3-4-5-); etc.).
|
||||
1) Prevent overblocking by utilizing the [law of diminishing returns]() (e.g., using [sane](https://www.privacyguides.org/en/basics/threat-modeling/), quality [blocklists](https://github.com/yokoffing/NextDNS-Config#blocklists-1); allowing most [TLDs](https://github.com/yokoffing/NextDNS-Config#block-top-level-domains-tlds-1-2-3-4-5-); etc.).
|
||||
2) Pass the [girlfriend test](https://www.urbandictionary.com/define.php?term=Grandma%20Test) with few exceptions. These deviations are documented throughout the guide.
|
||||
|
||||
***
|
||||
@@ -41,12 +41,12 @@ Security settings protect your data from harm, theft, and unauthorized use.<sup>
|
||||
> [!CAUTION]
|
||||
> Leave this feature enabled if you use something other than the [recommended blocklists](https://github.com/yokoffing/NextDNS-Config#privacy-lock) (see https://github.com/yokoffing/NextDNS-Config/issues/31).
|
||||
|
||||
 Enable Cryptojacking Protection
|
||||
![Disabled]() Enable Cryptojacking Protection
|
||||
|
||||
## DNS Rebinding Protection <sup><sup>[1](https://help.nextdns.io/t/35hmval/what-is-dns-rebinding-protection) [2](https://www.reddit.com/r/nextdns/comments/t0ne8r/does_dns_rebinding_protection_block_remote_access/?context=3)</sup></sup>
|
||||
 Enable DNS Rebinding Protection
|
||||
## IDN Homograph Attacks Protection <sup><sup>[1](https://web.archive.org/web/20230325073817/https://blog.riotsecurityteam.com/idn-homograph-attacksprevention) [2](https://akamai.com/blog/security/watch-your-step-the-prevalence-of-idn-homograph-attacks)</sup></sup>
|
||||
 Enable Homograph Attacks Protection
|
||||
![Enabled]() Enable Homograph Attacks Protection
|
||||
## Typosquatting Protection <sup><sup>[1](https://github.com/nextdns/metadata/blob/6f9b6cd0670e7e31ad2ca716742088c2fc0616c2/security/typosquatting/protected-domains)</sup></sup>
|
||||
 Enable Typosquatting Protection
|
||||
## Domain Generation Algorithms (DGAs) Protection
|
||||
@@ -167,7 +167,7 @@ Add all the device brands you use.
|
||||
</details>
|
||||
|
||||
## Block Disguised Third-Party Trackers <sup><sup>[1](https://github.com/nextdns/cname-cloaking-blocklist/blob/master/domains) [2](https://www.reddit.com/r/nextdns/comments/10nenu3/disguised_trackers_are_blocked_regardless_of) [3](https://medium.com/nextdns/cname-cloaking-the-dangerous-disguise-of-third-party-trackers-195205dc522a) [4](https://arxiv.org/pdf/2102.09301.pdf) [5](https://tma.ifip.org/2020/wp-content/uploads/sites/9/2020/06/tma2020-camera-paper66.pdf) </sup></sup>
|
||||
 Block Disguised Third-Party Trackers
|
||||
![Enabled]() Block Disguised Third-Party Trackers
|
||||
|
||||
## Allow Affiliate & Tracking Links <sup><sup>[1](https://github.com/nextdns/click-tracking-domains) [2](https://x.com/NextDNS/status/1539229377560461312) </sup></sup>
|
||||
> [!TIP]
|
||||
@@ -205,11 +205,13 @@ Some DoH providers block this feature automatically.
|
||||
mask.icloud.com
|
||||
mask-h2.icloud.com
|
||||
|
||||
possibly:
|
||||
And possibly:
|
||||
|
||||
apple-relay.cloudfare.com
|
||||
apple-relay.fastly-edge.com
|
||||
doh.dns.apple.com
|
||||
doh.dns.apple.com.v.aaplimg.com
|
||||
|
||||
|
||||
***
|
||||
|
||||
# Allowlist :white_check_mark:
|
||||
|
||||
Reference in New Issue
Block a user