Hacker News Reader

Is there any name servers that would allow me to block / redirect any non-ASCII domain names? At this point, the value of Unicode domain names is a lot less than local safety.

We currently use unbound for users.

View on HN

You could probably block the `xn--` prefix, which is how it appears over the wire.

You could use libnetfilter_queue and some DNS library like ldns to parse the packets and drop them if the DNS question contains "xn--".

Reply on news.ycombinator.com