Help setting up an exception

[giorgiga]

I don't seem to be able to setup an exception in blocky: I think I followed the documentation, but it doesn't work so I'm probably doing something wrong.

Here's what I did in my config (yes, it's json.. it would be a long story, but it's still valid yaml)

"blocking": {
    "allowlists":        { "default": [ "click.discord.com" ] },
    "denylists":         { "default": [ "http://sbc.io/hosts/hosts" ] },
    "clientGroupsBlock": { "default": [ "default" ] }
}

[0xERR0R]

Tested with following config:

upstream:
  default:
    - 1.1.1.1
    - 1.0.0.1

blocking:
  # Allowlist should override the denylist
  allowlists:
    default:
      - |
        click.discord.com

  # Denylist from the user's configuration
  denylists:
    default:
      - http://sbc.io/hosts/hosts

  # Apply blocking to default client group
  clientGroupsBlock:
    default:
      - default

  blockType: zeroIp
  refreshPeriod: 4h

ports:
  dns: 5335
  http: 4000

log:
  level: info
  format: text

click.discord.com is on the "http://sbc.io/hosts/hosts" list

dig @127.0.0.1 -p 5335 click.discord.com +short

returns

162.159.135.232
162.159.128.233
162.159.136.232
162.159.137.232
162.159.138.232

so it looks like allow list is working properly

[giorgiga]

Thanks for double-checking and, if you wish, please feel free to close this without reading further since at this point this isn't a bug but a support request.

---

This is what I get:

~ ❱❱❱ dig @dns.quad9.net +https click.discord.com +short # the upstream I use
162.159.128.233
162.159.138.232
162.159.136.232
162.159.137.232
162.159.135.232
~ ❱❱❱ dig @192.168.10.10 click.discord.com +short # my blocky instance
0.0.0.0

Can you spot anything wrong in my configuration? (converted from json to yaml - I generate it as json from provisioning scripts - the lists are now called "basic" instead of "default")

blocking:
  allowlists:
    basic:
      - click.discord.com
  blockTTL: 5m
  blockType: zeroIP
  clientGroupsBlock:
    default:
      - basic
  denylists:
    basic:
      - 'http://sbc.io/hosts/hosts'
bootstrapDns:
  - upstream: 9.9.9.9
  - upstream: 1.1.1.1
caching:
  prefetching: true
conditional:
  mapping:
    .: 192.168.10.1
    lan: 192.168.10.1
customDNS:
  customTTL: 5m
ede:
  enable: true
log:
  level: debug
  privacy: true
ports:
  dns: 53
  http: 4000
prometheus:
  enable: true
queryLog:
  type: none
upstreams:
  groups:
    default:
      - 'https://dns.quad9.net/dns-query'
      - 'https://freedns.controld.com/p1'
  strategy: strict

I'm running v0.27.0 through the ghcr.io/0xerr0r/blocky container.