&gt; Does anyone have a convenient way to convert this to a bind9 config format?<p>If you use BIND RPZs, you can convert from &#x2F;etc&#x2F;hosts format to BIND zonefile format, (or just pump the new entries to nsupdate) which should be pretty trivial. Some information and useful links are in this comment and subsequent commentary. [0]<p>IMO RPZs are <i>substantially</i> easier to manage than an ever-growing set of master blackhole zones, <i>especially</i> when you have slave DNS servers.<p>[0] <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11085521" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=11085521</a>