DnsLiar - Implementing a whitelist

DnsLiar is a DNS forwarder that uses a blacklist to block unwanted domains and IPs. Upon first initialization, it fetches a few million domains to feed its database so you can just start using it after a few minutes. My project features MISP as a source, which can be set as a side-task that continuously updates the database with more content.

DnsLiar can easily be run from a fresh docker instance, but it currently lacks reproducibility. While it is possible to exclude domains and IPs from the blacklist using my provided redis-ctl tool, my project is missing some way to store the whitelisted domains and IPs out of the Redis database so the whitelist can easily be re-used across re-installs.

So I started working on this whitelist during Hackathon 2026.
I also helped KylVGoi test my project and identify some ongoing issues that I will have to look into.