Custom Answers at DNS Section How To ?

[Oblivion 2013 8]

The custom answers at the DNS Section have several fields.

Field 1= Match: something
Field 2= Mode: exact,domain,contain,wildcard,start with, end with
Field 3= Allow, deny, custom

With Field 1, I filled in 'testufo.com'
With Field 2, I filled in 'domain'
With Field 3, I filled in deny

Since I want to test. But what beside this very simple example do the other Field 2 Mode options actually do?

I can block websites with a wildcard e.g. but how? Is the wild card like
*testufo.com
????ufo.com

Linux and Windows have wildcards too, like * and the ?

If i only fill in the . ( the little dot) every website has it, and if i would deny that e.g.

In my situation i need to allow a domain to bootstrap DNS over TLS, for Private DNS Android 9 or higher.

And also i would like to block all .info domains, but how? I tried several things, but at this time i stop at doing exactly specified websites only, since I don't know the correct syntax to deny all .info domains.

Do other people have explored these options in the DNS Section with Custom DNS Rules?

It is important to know that DNS requests are cached, and it takes time that the cache expires, so changes won't be immediately active, but after TTL for DNS in cache expires the changes should work.

I only know the AdGuard Syntax at this moment, which is also comprehensible after several tries.
 

[OpenSourcerer 1435]

On 7/27/2023 at 4:24 PM, Oblivion 2013 said:

I can block websites with a wildcard e.g. but how? Is the wild card like

In Wildcard mode, * means any. *testufo.com would block everything that ends with testufo.com, but not testufo.com itself because * implies there is something before that. It would block abc.testufo.com and also things like abc.123testufo.com and 456testufo.com, but again, not testufo.com itself with nothing before it.
 

On 7/27/2023 at 4:24 PM, Oblivion 2013 said:

And also i would like to block all .info domains, but how? I tried several things, but at this time i stop at doing exactly specified websites only, since I don't know the correct syntax to deny all .info domains.

In order of suitability:
Ends with mode, .info.
Wildcard mode, *.info.
Contain mode, .info.
The other modes don't suit your use case; they work quicker but require an actual domain name. Though, maybe Domain mode, .info could work as well, unsure.

[Oblivion 2013 8]

Match: testallowedwebsite.info  Mode: End With, Action: Allow
Match: *.info                               Mode: Wildcard, Action: Deny
Match: testallowedwebsite.info  Mode: Domain, Action: Allow


With these 3 settings i can block all .info websites and visit testallowedwebsite with its subdomains too.

For Firefox users, due to domain caching type this in your URL Bar


about:networking#dns

There in Firefox you can clear the Firefox browser DNS cache. But pinging from the commandline first like this:


ping randomwebsite.info

That should return 0.0.0.0 or 127.0.0.0 or resolve to localhost, since it is blocked.




 

[benfitita 39]

Tip: you can clear DNS cache by disconnecting and connecting again to  your network. Easy to remember and seems to work with any OS and software.

[OpenSourcerer 1435]

3 hours ago, Oblivion 2013 said:

Match: testallowedwebsite.info  Mode: End With, Action: Allow
Match: *.info                               Mode: Wildcard, Action: Deny
Match: testallowedwebsite.info  Mode: Domain, Action: Allow

I think #1 contains #3, so it's redundant. But otherwise correct.