Vallanx Universal Blocklist Syntax

The modern format for an infinite number of use cases. For block- / whitelists & filters on your router, server, in your apps and networks.

Build versatile and precise filters

The Vallanx Universal Blocklist Syntax in current version 3.0 was developed to cover as many use cases as possible. Here we present the special features and possible use cases for working with Vallanx UBS. The key principles of UBS are:

Line-based: One rule per line
Comments: # for comments (full line or inline)
Sections: Optional [SECTION] headers for organization
Directives: ! prefix for metadata and special instructions
Modifiers: :modifier1,modifier2 for context-specific behavior
TTL: Set the time to live (TTL) for (individual) rules

The Vallanx Universal Blocklist Syntax is therefore a powerful, flexible and intelligent system for managing blocklists for DNS servers, browser extensions, web application firewalls, networks and intrusion detection systems / intrusion prevention systems or agents. UBS offers a unified syntax that can be exported to over 21 different target formats.

Core Syntax

One of the many special features of the Vallanx Universal Blocklist Syntax is its compatibility with various existing formats, such as AdBlock Plus / uBlock Origin, Pi-hole, pfSense/pfBlockerNG, OPNsense BIND, Proxy PAC, or Suricata. It also has a built-in validation and linting.

Domain Blocking at DNS Level

URL Pattern for Browser / WAF Level

Content Filter

Suricata & IDS Integration

Proxy Auto-Config & Routing

Whitelist

To illustrate the use of the Universal Blocklist Syntax, we have compiled a gallery here with examples for various purposes. Using the selection on the left, you can find corresponding example rules for a blocklist.

Universal modifiers

With inline modifiers, rules can be extended with special functions. This allows even greater flexibility in the use of UBS and opens up a greatly extended range of applications compared to previous ad blocker approaches. Particularly for servers, digital services, and web apps, security can be increased very easily here.

Action Modifiers

Network Modifiers

Security Modifiers

In the examples stored here, you can see the use of modifiers. Your ideas are therefore unlimited for developing innovative solutions for a secure and open internet.

Form & Function

In addition to the modifiers and core syntax mentioned above, UBS offers some special options for specifying and functioning of rules. For example, since version 3.0, TTL (Time-to-Live) can be defined for individual rules. Sections, metadata and directives allow an improved, structured organization of complex filters. Integrated syntax checks guarantee safe and reliable work with UBS.

Metadata & Directives

Set TTL for Rules

Sections for Organization

Validation & Linting

In the examples stored here, you can see the use of modifiers. Your ideas are therefore unlimited for developing innovative solutions for a secure and open internet.

UBS Ressourcen

To get started with Vallanx UBS, you will find the most important resources here. Use the UBS Demo Machine to automatically validate your own blocklists, for example. For your own deployments, such as generating your own rule sets via API, you will also find the GitHub repository here.

Browser Extensions

UBS uses the Vallanx Privacy Shield browser extension. The browser extension is available free of charge and without restriction for all major browsers. You can either download Vallanx Privacy Shield directly as a developer version or install it via the Chrome or Mozilla extension stores. You can find out more at Vallanx Privacy Shield.

		
! Title: My Universal Security & Privacy List
! Version: 2.1.0
! Expires: 1 day
! Target: dns,browser,waf

[Malware-Domains]
evil-malware.com :severity=critical :category=malware
*.phishing.net :action=block :log

[Tracking-Blocker]
||analytics.google.com^$third-party :category=tracker
||facebook.com/tr/*$script :log
facebook.com##div[data-testid="cookie-banner"]

[WAF-Protection]
>>http content:"union select" :severity=high :msg="SQL Injection Attempt"
>>http content:"eval(atob(" :action=drop :category=malware
||*/wp-admin/admin-ajax.php :rate-limit=10/min

[Suricata-Style]
alert http any any -> any any (msg:"Crypto Mining JS"; content:"coinhive"; :severity=medium)

[Ad-Blocking]
||doubleclick.net^$third-party
/ads/*$domain=~advertiser.com
###ad-container

[Proxy-Rules]
||company-internal.* :proxy=DIRECT
*.onion :proxy=SOCKS5 127.0.0.1:9050

[Whitelist]
@@||paypal.com^ :reason="Payment processor"
@@||cdn.cloudflare.com^$first-party

Imprint

nsakldnalksd mlasödalsdmklasmdlasm lakms ksadm klam klasm kldmaslkd m

Contact Vallanx

Proven technologies, secure and simple: Vallanx is your Cyber Security Command Center. Vallanx protects your systems & data from bots, hackers, and fraudsters.

Home

Euro Stack: Data Warehouse & Processing in EU European Union

Audit in CH Switzerland

Proven technologies, secure and simple: Vallanx is your Cyber Security Command Center. Vallanx protects your systems & data from bots, hackers, and fraudsters.

Euro Stack: Data Warehouse & Processing in EU European Union

Audit in CH Switzerland