Re: [OpenWrt-Devel] Slow DNSMasq with > 100, 000 entries in additional addresses file

2016-12-27 Thread TheWerthFam
Thanks for the feedback, I'll look into NFQUEUE. I'm forcing the use of my dns by iptables. I'm also using a transparent squid and e2guardian to filter content. I like the idea of the dns based blacklist to add some filtering capabilities since I don't want to try and filter https types

Re: [OpenWrt-Devel] [LEDE-DEV] Any interest in adding runit to OpenWRT?

2016-12-27 Thread Martin Tippmann
On Tue, Dec 27, 2016 at 9:43 AM, John Crispin wrote: > Hi, > > currently procd service restart/reload can be triggered by config > changes and network interface changes. from what i understand you are > missing the following features > > * an option to simply run a script to

Re: [OpenWrt-Devel] Slow DNSMasq with > 100, 000 entries in additional addresses file

2016-12-27 Thread philipp_subx
> On Dec 26, 2016, at 10:32 AM, TheWerthFam wrote: > > Using the adblock set of scripts to block malware and porn sites. The porn > sites list is 800,000 entries, about 10x the number of sites adblock normally > uses. With the full list of malware and porn domains

Re: [OpenWrt-Devel] Slow DNSMasq with > 100, 000 entries in additional addresses file

2016-12-27 Thread Lucian Cristian
On 27.12.2016 04:54, TheWerthFam wrote: Problem with this method is that it misses lots of HTTPS based sites. I do already run squid though. Am I wrong that it will not proxy https sites unless you use MITM type setup? Thanks On 12/26/2016 08:47 PM, Lucian Cristian wrote: On 26.12.2016

Re: [OpenWrt-Devel] [LEDE-DEV] Any interest in adding runit to OpenWRT?

2016-12-27 Thread John Crispin
On 27/12/2016 01:07, Martin Tippmann wrote: > On Mon, Dec 26, 2016 at 5:32 PM, Rob Landley wrote: >> On 12/26/2016 08:05 AM, Martin Tippmann wrote: >>> On Sun, Dec 25, 2016 at 9:01 PM, Denys Vlasenko >>> So TL;DR: procd is fine for init but having runit/runsvdir easily >>>