Block *.zip and *.mov

Devilmaycare

Chief Brah Officer
Moderator
Joined
Jan 5, 2019
Posts
6,385
Reaction score
9,022
Location
Scottsdale
I highly recommend blocking the new .zip and .mov TLDs in your firewall, pihole, adguard home, etc. They're a security nightmare waiting to happen.

If you haven’t seen some idiot at google approved them as TLDs. It’s going to be a huge security risk. Something like http://apple.com/[email protected] looks legit to 99.9999% of people but would take you do a nefarious site that looks like Apple’s. There's other possible attacks with them too. I really don't know what they were thinking.

Firewall rules will vary depending on which you use.
In a PiHole goto Domains and add regex filters with "\.zip$" and "\.mov$" without the quotes.
In AdGuard Home go Filters -> Custom filtering rules and add on separate lines:
Code:
||*.zip^
||*.mov^
 
Top