block hosts via dns

gistfile1.txt

#!/bin/sh

(
# Retrieves ad blacklist and adds them to unbound as NXDOMAIN

ftp -V -o - http://winhelp2002.mvps.org/hosts.txt | awk '!/^#/ {print $2}' |egrep -v '^$|localhost' | sort -u | sed -e 's/
//g' | sed 's/^/local-zone: \"/' | sed 's/$/\" static/'

# Retrieves URLs from phishtank and adds them to unbound as NXDOMAIN
# It might be a good idea to get an API key at phishtank for the download

ftp -V -o - http://data.phishtank.com/data/online-valid.csv.gz | gzcat | awk -F ',' '{print $2}' | awk -F '/' '{print $3}' | sort -u | sed 's/^/local-zone: \"/' | sed 's/$/\" static/' | sed 's/local-zone: "" static//g'
) | tr '[A-Z]' '[a-z]' | sort -u > /var/unbound/etc/blacklist.conf

rcctl reload unbound