unbound blocking apple private relay.

[vdemarco]

this is just a PSA i couldn't find the answer.

so i recently installed unbound (its working great) i wanted to block iclould private relay on my network, so it took a bit of messing around but i did it

so in `/opt/var/lib/unbound/adblock/` you have a file called `firefox_DOH`
mine looks like this

local-zone: "use-application-dns.net" always_nxdomain
local-zone: "mask.icloud.com" always_nxdomain
local-zone: "mask-h2.icloud.com" always_nxdomain

the first line blocks the firefox DOH, the last 2 block the apple private relay.

So now all adblocking, filtering etc,now works on my network.
and i could use private relay for other networks.

Hope this helps someone else.

 

[Tech9]

You can just block QUIC, port 443/UDP in Network Services Filter.

Prepare Your Network or Web Server for iCloud Private Relay - Support - Apple Developer

developer.apple.com

Some other device on your network may start using DoQ and going around your filtering.