← Back to Docs

Blocklists

How Blocklists Work

TLSOps uses AdGuard Home to enforce DNS-based blocklists. When a device queries for a domain that appears in an enabled blocklist, TLSOps returns a blocked response and the domain is never contacted. Blocklists are managed globally for the whole network. Device policies can add per-device blocked services, blocked domains, and filtering toggles, but there is no separate per-device blocklist switch.

Built-In Blocklists

TLSOps can work with community-maintained blocklists for categories such as ads, trackers, malware, and phishing. The exact bundled lists may change over time, so treat the dashboard as the current source of truth for what is available on your appliance.

List updates are handled automatically. You can enable or disable individual lists without affecting the rest of the filtering setup.

Enabling and Disabling Lists

  1. Go to the Global Policy page in the TLSOps dashboard
  2. Scroll to the Domain Blocking section
  3. Use the Blocklists panel to enable or disable the available lists

Blocklist toggles are applied immediately. You do not need to save the whole Global Policy page just to turn a list on or off.

Manually Blocking a Domain

To block a single domain immediately without adding a full blocklist:

  1. Go to the Global Policy page
  2. In the Domain Blocking section, use the Blocked Domains list
  3. Enter one domain per line — for example: badsite.com
  4. Click the Save Policy button in the top action bar of the Global Policy page

Troubleshooting a Blocked Domain

If a site you expect to work is being blocked, check the Logs tab to see the DNS query activity and confirm the domain being requested. Then review the Blocked Domains list and the enabled items in the Blocklists panel under Global Policy to identify the source of the block.