Block lists and rules
Lists and rules available to install on your router. The entries come from the signed catalogue routers download; the explanations below describe their use and limits.
On the router: DNS Filter, Sources, Recommended lists and policies. Nothing is installed until the administrator chooses it.
Catalogue 15, generated 2026-11-07 07:00 (UTC), signed with the release key.
Block lists
A GADNET-hosted list is a normalised snapshot prepared in the publishing process. Its digest is protected by the signed catalogue; the router downloads and verifies it. External lists are downloaded directly from their providers. A recommended list is a suggested starting point for its stated use, not a guarantee of complete protection.
A dash in the domain count means that this catalogue does not report a count for the provider’s directly downloaded list; it does not mean the list is empty.
Ads and trackers (5)
| List | Origin | Domains | Provider |
|---|---|---|---|
|
AdGuard DNS filter
recommended
Ads, trackers and mobile ad networks. Composed by AdGuard from EasyList, EasyPrivacy and its own filters, simplified for DNS-level blocking. |
GADNET copy; digest in signed catalogue
block list |
189,356 domains
snapshot 2026-11-07 |
AdGuard
licence: GPL-3.0 provider's list |
|
HaGeZi Multi NORMAL
Ads, tracking, metrics, telemetry, phishing and malware domains. This list and AdGuard DNS filter partly overlap. Start with one and add others as needed; more entries alone do not establish better protection or fewer false positives. |
GADNET copy; digest in signed catalogue
block list |
200,994 domains
snapshot 2026-11-07 |
HaGeZi
licence: GPL-3.0 provider's list |
|
Polish ad filters (Pi-hole)
recommended
Ads and trackers on Polish websites. GADNET links to the provider instead of hosting a copy. The provider publishes these filters under CC BY-NC-SA 4.0; consult its licence and terms of use. |
External provider
block list |
— |
MajkiIT / PolishFiltersTeam
licence: CC BY-NC-SA 4.0 provider's list |
|
Polish Filters - ad servers
recommended
Whole-domain rules from the Official Polish Filters for AdBlock, uBlock Origin and AdGuard. By default, the router fetches them daily; the authors control upstream publication. Page-element rules do not work at DNS level. GADNET links to the provider instead of hosting a copy. The provider’s licence is CC BY-NC-SA 4.0; consult its terms. |
External provider
block list |
— |
PolishFiltersTeam / MajkiIT
licence: CC BY-NC-SA 4.0 provider's list |
|
StevenBlack unified hosts
Adware and malware domains consolidated from several curated hosts files. |
GADNET copy; digest in signed catalogue
block list |
77,756 domains
snapshot 2026-11-07 |
Steven Black
licence: MIT provider's list |
Security and scams (2)
| List | Origin | Domains | Provider |
|---|---|---|---|
|
KADhosts - Polish scams
recommended
Fake shops, SMS subscription traps, phishing and malware aimed at Polish users; includes entries from CERT Polska and legalniewsieci.pl. |
GADNET copy; digest in signed catalogue
block list |
44,523 domains
snapshot 2026-11-07 |
FiltersHeroes (PolishFiltersTeam)
licence: CC BY-SA 4.0 provider's list |
|
CERT Polska warning list
recommended
Phishing and scam domains targeting users in Poland, maintained by CSIRT NASK. The router downloads this list directly from CERT Polska. Consult the provider’s integration guidance, which recommends refreshing every five minutes; check the router’s configured refresh interval. |
External provider
block list |
— |
CERT Polska (NASK)
licence: Provider terms (not stated) provider's list Provider integration guidance |
Conditional rules
A conditional rule activates when the router detects a trigger domain, including background requests or opening a bank website without logging in. Newly installed catalogue rules have no device or zone restriction, so their DNS blocking can affect the whole network served by the router. The administrator can restrict the assignment to selected devices or zones. Consider the initial network-wide scope before installation and adjust the assignment afterwards if needed.
These rules restrict selected domains and, where enabled, network traffic. They do not guarantee stopping fraud, do not block ordinary cellular calls and do not protect devices outside this router’s network. Domain blocking is not a complete shutdown of an application. Detection, network enforcement, cached or existing connections, direct-IP access, VPNs and other DNS resolvers can affect results. The rules may also interrupt legitimate calls or remote support.
Bank login protection: messengers and remote desktop recommended
When the router detects a listed bank or public-login domain, this rule restricts selected messengers and remote-desktop services. Domain blocking follows the rule’s device or zone assignment, or the whole router network when unassigned; configured remote-desktop port blocking targets the triggering device. Install together with the video-call rule.
Default block time: 30 minutes; adjustable on the router. Further trigger lookups may renew it. Traffic-based renewal is enabled by default; after 120 minutes from activation the default configuration stops granting further traffic-based renewals. This is not a universal maximum block duration. Router settings can change this behaviour.
With network enforcement enabled, the rule also attempts to block its configured remote-desktop ports for the triggering device.
Trigger domains (36)
aliorbank.plbankbps.plbankmillennium.plbgk.plbnpparibas.plbosbank.plbosbank24.plcentrum24.plcitibank.plcitibankonline.plcredit-agricole.plerste.plgetinbank.pling.plingbank.plinteligo.plipko.pllogin.gov.plmbank.plmillenet.plmobywatel.gov.pln26.comnestbank.plpekao.com.plpekao24.plpkobp.plplusbank.plpocztowy.plpodatki.gov.plpz.gov.plrevolut.comsantander.plsgb.pltoyotabank.plvelobank.plzus.pl
Blocked while active (53)
aeroadmin.comairdroid.comammyy.comanydesk.comassist.zoho.comatera.combeyondtrust.combomgar.comconnectwise.comdiscord.comdiscord.ggdiscordapp.comdwservice.netgetscreen.megotomypc.comhelpwire.apphoptodesk.comiperiusremote.comline.melogmein.comlogmeininc.comm.memeshcentral.commessenger.comnanosystems.itparsec.appradmin.comrealvnc.comremoteassistance.support.services.microsoft.comremotedesktop-pa.googleapis.comremotedesktop.google.comremotepc.comremoteutilities.comrsupport.comrustdesk.comscreenconnect.comsignal.mesignal.orgskype.comsplashtop.comsupremocontrol.comt.meteamviewer.comtelegram.metelegram.orgthreema.chtightvnc.comultraviewer.netviber.comwa.mewhatsapp.comwhatsapp.netzohoassist.com
Bank login protection: video calls and screen sharing recommended
Uses the same trigger domains as the messenger rule to restrict selected video-call, screen-sharing and remote-support services. Domain blocking follows the rule’s device or zone assignment, or the whole router network when unassigned. Install together with the messenger and remote-desktop rule.
Default block time: 30 minutes; adjustable on the router. Further trigger lookups may renew it. Traffic-based renewal is enabled by default; after 120 minutes from activation the default configuration stops granting further traffic-based renewals. This is not a universal maximum block duration. Router settings can change this behaviour.
Trigger domains (36)
aliorbank.plbankbps.plbankmillennium.plbgk.plbnpparibas.plbosbank.plbosbank24.plcentrum24.plcitibank.plcitibankonline.plcredit-agricole.plerste.plgetinbank.pling.plingbank.plinteligo.plipko.pllogin.gov.plmbank.plmillenet.plmobywatel.gov.pln26.comnestbank.plpekao.com.plpekao24.plpkobp.plplusbank.plpocztowy.plpodatki.gov.plpz.gov.plrevolut.comsantander.plsgb.pltoyotabank.plvelobank.plzus.pl
Blocked while active (30)
8x8.vcanyviewer.comaweray.comclickmeeting.comdeskin.ioelement.iogoto.comgotomeeting.comimo.imjoin.melivewebinar.comlogmeinrescue.commatrix.orgmeet.google.commeet.jit.simeeting.zoho.commeeting.zoho.euoray.comringcentral.comscreenleap.comshowmypc.comteams.cloud.microsoftteams.live.comteams.microsoft.comtodesk.comwebex.comwhereby.comwire.comzoom.comzoom.us
Policy presets
Category rules a router can install as a DNS policy and assign to a zone, device or user.
Family safe recommended
For children’s devices: enables supported search filters and blocks domains in the listed categories using the sources below. Installing the preset adds those sources to the router. Domain lists and search filters are not complete protection and can also block legitimate content.
The policy enables the supported search-engine filters and YouTube Restricted Mode for its assigned scope. These filters reduce exposure to unwanted content; they do not guarantee that all results or videos are suitable.
Lists behind these categories (9)
| List | Origin | Domains | Provider |
|---|---|---|---|
|
HaGeZi NSFW
Adult content |
External provider
block list |
— |
HaGeZi, Germany
licence: GPL-3.0 provider's list |
|
UT1 mixed_adult
Partly adult |
External provider
block list |
— |
Universite Toulouse Capitole (UT1), France
licence: CC BY-SA 4.0 provider's list |
|
Rejestr domen hazardowych MF
Gambling |
External provider
block list |
— |
Ministerstwo Finansów, Polska
licence: CC0 1.0 provider's list |
|
HaGeZi Gambling mini
Gambling |
External provider
block list |
— |
HaGeZi, Germany
licence: GPL-3.0 provider's list |
|
Block List Project drugs
Drugs |
External provider
block list |
— |
The Block List Project, USA
licence: Unlicense provider's list |
|
UT1 drogue
Drugs |
External provider
block list |
— |
Universite Toulouse Capitole (UT1), France
licence: CC BY-SA 4.0 provider's list |
|
UT1 agressif
Violence |
External provider
block list |
— |
Universite Toulouse Capitole (UT1), France
licence: CC BY-SA 4.0 provider's list |
|
UT1 dangerous_material
Weapons |
External provider
block list |
— |
Universite Toulouse Capitole (UT1), France
licence: CC BY-SA 4.0 provider's list |
|
UT1 dating
Dating |
External provider
block list |
— |
Universite Toulouse Capitole (UT1), France
licence: CC BY-SA 4.0 provider's list |
Installing the preset adds these lists to the router's categories; the router downloads them from the provider. A list the router already has is kept, not duplicated.