Blocked malware/phishing

[GlenBod]

Very new to AdGuard Home, I have it running on a Pi. Looking at the Dashboard I see a category of blocking named "Blocked malware/phishing". But the statistics say that has not blocked anything. I suppose that's actually possible, but I just wanted to make sure I had that feature turned on / enabled / configured whatever. Can you point me to a how to for that?

[Dynamic5912]

Do you want or need to use it?

Do you not have a blocklist sufficient enough to cover blocking malware domains?

[GlenBod]

Why is it there if not to be used? Why does the dashboard report blocks of that type and the number is always zero?

I have the default AdGuard DNS Blocklist, OISD Full list and the StevenBlack Adware + malware. Is that sufficient enough? I don't know. Newbie, as I said.

Since there was separate stats reporting for that type of malware and it = 0 while the "Blocked by filters" is normally about 20% of my DNS Queries, I figured I must not have it turned on, or not have provided a blocklist that was used for that purpose.

Just asking for a pointer to the How To for this feature.

[Dynamic5912]

If you need it then enable it.

If you don't need it, leave it disabled.

If you're already using a decent blocklist that covers malware and malicious sites then definitely leave it disabled.

The counter will only increase if you enable the service - it won't increase based on blocks by filter lists.

[GlenBod]

I agree with everything you said. I'm still looking for information to make the decisions you suggest.

1 - I listed above the 3 blocklists I have loaded so far. Is that a "decent" blocklist? Does it cover malware and malicious sites? I have no idea. Let's assume I DO want to reject malware and malicious sites then are there any additional lists I should add in order to have a decent set?

2 - How do I know if I have "enabled the service", where is that toggle? Once enabled is there anything I have to do to specify the sites to reject? Is that just another blocklist, and where does one enter that?

3 - I have 12,000 DNS Queries and 20% of them are blocked by filters and 0% are blocked by malware/phishing. I am assuming that means that either I have not tried to access any malware/phishing sites OR the mechanism to block those is not active / functional.

That's all I know. That's why I'm still looking for details on HOW TO do this. I may in the end decide all is fine as is. But when you don't know then you don't know what you don't know. You know?

[Dynamic5912]

Genuine question - have you read the AdGuard Home Wiki that explains all of this???

To enable it, it's under General Settings.

It's an API service that parses your DNS requests via AdGuards security tooling (adding latency etc.) - personally I don't recommend using it and using a widely renowned and recognised blocklist like ones from Hagezi instead.

[GlenBod]

What Wiki? That would probably be quite useful to a newbie. Ahhh, found it https://github.com/AdguardTeam/AdGuardHome/wiki.
I will enable that mal/phish and see if it catches anything - that will inform the need to keep it active or not.
I will search for Hagezi and add it to the 3 I have. It looks like it overlaps OISD and StevenBlack so I turned those 2 off.
My remaining filters are the AdGuard starter kit, Hagezi Pro (Full) and the Hagezi TIF Mini. Would you call that "decent"?
Thanks for your help and opinions.

[Dynamic5912]

I run Hagezi Ultimate and TIF (full) along with some of this other filters.

No need to run any others.