Remember, folks, if your DNS-based adblocking mechanism returns 0.0.0.0 or 127.0.0.1, attackers can use that to their advantage.

Either return NXDOMAIN or NOERROR (aka, no results) instead.

#infosec