DNS污染 处理

openwrt-dnsmasq

config dnsmasq
        option domainneeded     1
        option boguspriv        1
        option filterwin2k      0  # enable for dial on demand
        option localise_queries 1
        option rebind_protection 0  # disable if upstream must serve RFC1918 addresses
        option rebind_localhost 1  # enable for RBL checking and similar services
        #list rebind_domain example.lan  # whitelist RFC1918 responses for domains
        option local    '/lan/'
        option domain   'lan'
        option expandhosts      1
        option nonegcache       0
        option authoritative    1
        option readethers       1
        option leasefile        '/tmp/dhcp.leases'
        option resolvfile       '/tmp/resolv.conf.auto'
        list server             '/twitter.com/208.67.222.222#5353'
        list server             '/twimg.com/208.67.222.222#5353'
        list server             '/google.com/208.67.222.222#5353'
        list server             '/youtube.com/208.67.222.222#5353'
        list server             '/appspot.com/208.67.222.222#5353'
        list server             '/facebook.com/208.67.222.222#5353'
        list server             '/bit.ly/208.67.222.222#5353'
        list server             '/blogger.com/208.67.222.222#5353'
        list server             '/openvpn.net/208.67.222.222#5353'
        list server             '/igfw.net/208.67.222.222#5353'
        list server             '/fbcdn.net/208.67.222.222#5353'
        list server             '/wordpress.com/208.67.222.222#5353'
        list server             '/myalert.info/208.67.222.222#5353'
        list server             '/nabble.com/208.67.222.222#5353'
        #option nonwildcard     1
        #list interface         br-lan
        #list notinterface      lo
        list bogusnxdomain     '221.179.130.169'

config dhcp lan
        option interface        lan
        option start    100
        option limit    150
        option leasetime        2h

config dhcp wan
        option interface        wan
        option ignore   1