This is the documentation of NFDNSBL, a NF_QUEUE client that can check any DNSBL and act accordingly.

What is a DNSBL?

In a nutshell, a DNSBL is way to publish blacklists. See for more informations.

How does it work?

We simply redirect packets to a queue in userspace (target NFQUEUE) using iptable. NFDNSBL then get these packets, extract the source IP address, query a dnsbl server and act. It can accept the packet, drop it or mark it and reinject it in iptable.

Table Of Contents

Previous topic

Welcome to NFDNSBL project page!

Next topic


This Page