MIS DNS Whitelist

zone-whitelist.conf

server:
	# ptr
	local-zone: "arpa." transparent

	# google
	local-zone: "google." transparent
	local-zone: "google.com." transparent
	local-zone: "google.co.jp." transparent
	local-zone: "googleapis.com." transparent
	local-zone: "googlegroups.com." transparent
	local-zone: "googleusercontent.com." transparent
	local-zone: "gstatic.com." transparent
	local-zone: "goo.gl." transparent
	local-zone: "www.google.com." redirect
	local-data: "www.google.com. 120 IN CNAME forcesafesearch.google.com."
	local-zone: "www.google.co.jp." redirect
	local-data: "www.google.co.jp. 120 IN CNAME forcesafesearch.google.com."

	# apple
	local-zone: "apple." transparent
	local-zone: "apple.com." transparent
	local-zone: "icloud.com." transparent
	local-zone: "icloud-content.com." transparent
	local-zone: "aaplimg.com." transparent
	local-zone: "mzstatic.com." transparent
	local-zone: "apple-dns.net." transparent
	local-zone: "cdn-apple.com." transparent
	# apple mdn
	local-zone: "jamfcloud.com." transparent

	# microsoft
	local-zone: "microsoft." transparent
	local-zone: "microsoft.com." transparent
	local-zone: "windowsupdate.com." transparent
	local-zone: "msftconnecttest.com." transparent
	local-zone: "msftncsi.com." transparent
	local-zone: "windows.com." transparent
	local-zone: "office.com." transparent
	local-zone: "office365.com." transparent
	local-zone: "outlook.com." transparent
	local-zone: "hotmail.com." transparent
	local-zone: "msn.com." transparent
	local-zone: "live.com." transparent
	local-zone: "bing.com." transparent
	local-zone: "trafficmanager.net." transparent
	local-zone: "edgesuite.net." transparent
	local-zone: "msedge.net." transparent
	local-zone: "wac.phicdn.net." transparent
	local-zone: "www.bing.com." redirect
	local-data: "www.bing.com. 120 IN CNAME strict.bing.com."

	# aws
	local-zone: "amazonaws.com." transparent
	local-zone: "cloudfront.net." transparent
	local-zone: "elasticbeanstalk.com." transparent

	# cdn
	local-zone: "fastly.net." transparent
	local-zone: "cloudflare.com." transparent
	local-zone: "akamai.net." transparent
	local-zone: "akadns.net." transparent
	local-zone: "edgekey.net." transparent
	local-zone: "akamaiedge.net." transparent
	local-zone: "akamaihd.net." transparent
	local-zone: "akamaized.net." transparent

	# js cdn
	local-zone: "aspnetcdn.com." transparent
	local-zone: "jquery.com." transparent

	# loilo
	local-zone: "loilo.tv." transparent
	local-zone: "crashlytics.com." transparent

	# seesaw
	local-zone: "seesaw.me." transparent
	local-zone: "app-measurement.com." transparent

	# quizlet
	local-zone: "quizlet.com." transparent
	local-zone: "branch.io." transparent

	# nhk
	local-zone: "nhk.or.jp." transparent
	local-zone: "nhk.jp." transparent
	local-zone: "apigee.net." transparent
	local-zone: "stream.co.jp." transparent
	local-zone: "stream.ne.jp." transparent

	# wikipedia
	local-zone: "wikipedia.org." transparent
	local-zone: "wikimedia.org." transparent

	# line
	local-zone: "line-apps.com." transparent
	local-zone: "line-scdn.net." transparent
	local-zone: "line.naver.jp." transparent

	# docomo
	local-zone: "docomo.ne.jp." transparent
	local-zone: "spmode.ne.jp." transparent

	# yahoo norikae
	local-zone: "yahooapis.jp." transparent
	local-zone: "yimg.jp." transparent

	# spotify
	local-zone: "spotify.com." transparent
	local-zone: "scdn.co." transparent
	local-zone: "pscdn.co." transparent
	local-zone: "adjust.com." transparent

	# slack
	local-zone: "slack.com." transparent
	local-zone: "bugsnag.com." transparent

	# nintendo switch
	local-zone: "nintendo.net." transparent
	local-zone: "nintendo.com." transparent

	# fb/tw
	local-zone: "facebook.com." transparent
	local-zone: "messenger.com." transparent
	local-zone: "fbcdn.net." transparent
	#local-zone: "api.twitter.com." transparent
	#local-zone: "api-stream.twitter.com." transparent
	#local-zone: "twimg.com." transparent

	# for raspi
	local-zone: "nict.jp." transparent
	local-zone: "ntp.org." transparent
	local-zone: "raspberrypi.org." transparent

	# misc
	local-zone: "ed.jp." transparent
	local-zone: "ac.jp." transparent
	local-zone: "go.jp." transparent
	local-zone: "ad.jp." transparent
	local-zone: "gov." transparent
	local-zone: "edu." transparent

	local-zone: "ted.com." transparent
	local-zone: "tedcdn.com." transparent
	local-zone: "d-library.jp." transparent
	local-zone: "ebook.yodobashi.com." transparent
	local-zone: "code.org." transparent

	local-zone: "opendns.com." transparent
	local-zone: "dnsomatic.com." transparent
	local-zone: "ampproject.org." transparent
	local-zone: "bitdefender.com." transparent
	local-zone: "bitdefender.biz." transparent

	# ocsp
	local-zone: "digicert.com." transparent
	local-zone: "omniroot.com." transparent
	local-zone: "amazontrust.com." transparent
	local-zone: "usertrust.com." transparent
	local-zone: "cybertrust.ne.jp." transparent
	local-zone: "symantec.com." transparent
	local-zone: "thawte.com." transparent
	local-zone: "sectigo.com." transparent

	# catch all
	local-zone: "." static