hagezi / dns-blocklists

DNS-Blocklists: For a better internet - keep the internet clean!
GNU General Public License v3.0
6.76k stars 226 forks source link

parrot Sec os #1701

Closed Amateur-God closed 1 year ago

Amateur-God commented 1 year ago

Which AdBlocker/DNS cloud service do you use?

Pi-hole

Other

No response

NextDNS users only

Which blocklist(s) do you use?

Fake, Threat Intelligence Feeds, DoH/VPN/TOR/Proxy Bypass

Which domain(s) should be unblocked?

parrotsec.org

Why should the domain(s) be unblocked?

this domain is a secure domain for a Linux Penetration testing OS, im not sure why it would be blocked as a malicious domain, it is in the Match found in https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/doh-vpn-proxy-bypass.txt: ||parrotsec.org^

hagezi commented 1 year ago

@Amateur-God Thanks, it was not blocked as a malicious domain, but in the bypass list because it allows you to bypass your DNS. That's why it's included in https://github.com/hagezi/dns-blocklists#bypass.

"Prevent method to bypass your DNS. To ensure the bootstrap is your DNS server you must redirect or block standard DNS outbound (TCP/UDP 53) and block all DNS over TLS (TCP 853) outbound."