-
-
Notifications
You must be signed in to change notification settings - Fork 253
Description
Hello,
Issue description:
I have an issue with Blocky when trying to allow *.itunes.apple.com and block vpp.itunes.apple.com:
- The rule *.itunes.apple.com is defined in my custom allowlist
- The rule vpp.itunes.apple.com is defined in my custom denylist
Based on the official documentation, the allowlist is always prioritized above the denylist:
If the same group has both allow/denylists, allowlists take precedence. Meaning if a domain is both blocked and allowed, it will be allowed. If a group has only allowlist entries, only domains from this list are allowed, and all others be blocked.
Source: https://0xerr0r.github.io/blocky/latest/configuration/
Solution description:
Two possible solutions came to my mind:
-
Prioritize specific subdomain entries over wildcard entries:
More specific entries should always be prioritized over wildcard entries.
If the wildcard is defined in the allowlist and the specific subdomain in the denylist, the denylist entry should be used. -
Add attribute to set a higher priority to a single entry
For example Adguard offers such a solution, if the attribute "$important" is added to set the priority for a specific entry
e.g.vpp.itunes.apple.com$important