How niammuddin/zet-dns works
Zet-DNS is a DNS filtering server built around Unbound, with a web admin dashboard and an automatically refreshed Komdigi Trust Positif blocklist. DNS clients send queries to the resolver, which provides filtering and documented DNS features; administrators use the dashboard to manage rules. A separate updater builds a replacement CDB, and Unbound hot-remaps it without a resolver reload. The README documents these capabilities, but no source excerpts were provided, so implementation-level calls and several internal links cannot be verified.
Main entry points: unbound Unbound resolver · dnstrust-admin Admin dashboard · nftables.conf nftables firewall · update-blacklist.sh Blacklist updater
Components 21
DNS service
- Unbound resolver
src/bin/unbound - Resolver configuration
src/etc/unbound/unbound.conf - Trust+ filtering
src/etc/unbound - SafeSearch
src/etc/unbound/safesearch.conf - Whitelist
src/etc/unbound/whitelist.conf - Local DNS
src/etc/unbound/hosts.conf - T-Proxy DNS
src/etc/unbound/tproxy.conf - DNSSEC
src/etc/unbound
Administration
- Admin dashboard
src/bin/dnstrust-admin - Rule management
src/bin/dnstrust-admin - DNS inspector
src/bin/dnstrust-admin - Activity log
src/bin/dnstrust-admin - Block page
src/bin/dnstrust-admin
Blocklist updates
- Blacklist updater
src/scripts/update-blacklist.sh - Update schedule
src/systemd/unbound-blacklist-update.timer - Blocklist CDB
src/etc - Hot-remap worker
src/systemd/dnstrust-admin-worker.path
Host security
- nftables firewall
src/etc/nftables.conf
Other components
- DNS clients
- Redirecting router
- Admin browser
Connections 19
- DNS clients → Unbound resolver: sends queries
README.md - Unbound resolver → DNS clients: answers queries
README.md - Redirecting router → Unbound resolver: redirects DNS
README.md - Unbound resolver → Trust+ filtering: filters domains
README.md - Unbound resolver → SafeSearch: applies
README.md - Unbound resolver → Whitelist: honors exceptions
README.md - Unbound resolver → Local DNS: resolves locally
README.md - Unbound resolver → T-Proxy DNS: accepts redirected DNS
README.md - Unbound resolver → DNSSEC: supports
README.md - Admin browser → Admin dashboard: opens
README.md - Admin dashboard → Rule management: manages
README.md - Admin dashboard → DNS inspector: provides
README.md - Admin dashboard → Activity log: provides
README.md - Admin dashboard → Block page: serves
README.md - Update schedule → Blacklist updater: schedules
README.md - Blacklist updater → Blocklist CDB: builds and replaces
README.md - Hot-remap worker → Unbound resolver: triggers hot-remap
README.md - nftables firewall → Unbound resolver: allows DNS traffic
README.md - nftables firewall → Admin dashboard: allows dashboard traffic
README.md