unbound blocking apple private relay.

[vdemarco]

this is just a PSA i couldn't find the answer.

so i recently installed unbound (its working great) i wanted to block iclould private relay on my network, so it took a bit of messing around but i did it

so in `/opt/var/lib/unbound/adblock/` you have a file called `firefox_DOH`
mine looks like this

local-zone: "use-application-dns.net" always_nxdomain
local-zone: "mask.icloud.com" always_nxdomain
local-zone: "mask-h2.icloud.com" always_nxdomain

the first line blocks the firefox DOH, the last 2 block the apple private relay.

So now all adblocking, filtering etc,now works on my network.
and i could use private relay for other networks.

Hope this helps someone else.

 

[Tech9]

You can just block QUIC, port 443/UDP in Network Services Filter.

Prepare your network or web server for iCloud Private Relay - iCloud - Apple Developer

iCloud Private Relay is a new internet privacy service built into iCloud that allows users to connect to and browse the web more privately and securely.

developer.apple.com

Some other device on your network may start using DoQ and going around your filtering.