AdguardTeam / AdGuardHome

Network-wide ads & trackers blocking DNS server
https://adguard.com/adguard-home/overview.html
GNU General Public License v3.0
25.76k stars 1.85k forks source link

Request for RPZ File Support in AdGuard Home #6661

Open relvinarsenio opened 10 months ago

relvinarsenio commented 10 months ago

Prerequisites

The problem

Currently, AdGuard Home lacks support for RPZ files, which are crucial for efficiently managing DNS-based threat intelligence and policy enforcement. RPZ files allow users to define custom DNS policies, enabling a more granular control over domain resolution.

Proposed solution

Integrating RPZ file support into AdGuard Home would empower users to implement and enforce specific DNS policies, enhancing the overall security and customization capabilities of the application. This feature would be particularly valuable for users who rely on DNS threat intelligence feeds and need a flexible mechanism to respond to emerging threats.

Alternatives considered and additional information

Benefits:

  1. Enhanced Security: RPZ support would enable users to block or allow specific domains based on their DNS policies, adding an extra layer of security to their network.
  2. Customization: Users would have the flexibility to tailor DNS resolutions according to their specific requirements, allowing for a more personalized and efficient network management.
  3. Adaptability: With RPZ support, AdGuard Home can better adapt to the evolving landscape of online threats, providing users with a dynamic and responsive DNS filtering solution.

I believe that incorporating RPZ file support into AdGuard Home would greatly benefit the user community and further solidify AdGuard Home's position as a robust DNS filtering solution.

Thank you for considering this feature request. I look forward to the continuous improvement of AdGuard Home and appreciate your dedication to providing a secure and customizable DNS filtering experience.

emanzx commented 10 months ago

+1 for this features. This will greatly improved the distribution of the blacklist too as RPZ is just like normal DNS zone so it can use AXFR/IXFR and can also rely on DNS notify for zone update.