Site policy allow list should override Universal List blocks
now
P
Patrick Telling
Allow Site Filtering Policy allow lists (and block lists) to override the global enforcement of Universal List block/allow lists.
You could add a a per-policy toggle: “Allow policy to override Universal Lists”
Use case:
We manage multiple client sites with a consolidated global blocklist applied via Universal Lists. For certain clients/sites, we need to permit specific domains that are blocked globally, without weakening the global list for everyone.
Our currently non-ideal workaround is:
- Remove the domain from the Universal List.
- Add the domain manually to every other site’s block list, because each site uses a custom filtering policy.
Minetta Gould
marked this post as
now
Minetta Gould
Patrick Telling Thank you for your patience while our Engineering team reviewed this.
We’ve confirmed this is a
UI bug related to the prompt’s trigger behavior
. The warning message should only appear when the action would not succeed (for example, attempting to add a domain to a policy block list when it already exists on the Universal Allow List). At the moment, the prompt is appearing for any duplicate addition attempt, even when the override should be permitted.It will take some time before Engineering can prioritize a fix, but there is a workaround available in the meantime.
Using the API, you can successfully add domains to policy allow lists to override Universal Block Lists. You’ll want to use either the Update Policy or Bulk Edit endpoints:
- Update Policy: https://api.dnsfilter.com/docs#/operations/V1_Policies-update
- Bulk Edit: https://api.dnsfilter.com/docs#/operations/V1_Policies_Bulk_Actions-add_allowlist_domains
You can find instructions for generating API keys in our documentation. If you’d like assistance setting this up, Pax8 Support can also help guide you through the process.
Thank you so much for bringing this to our attention, and we'll update this post when the issue is resolved.
Minetta Gould
marked this post as
more information needed
Thanks for the detailed write-up, Patrick Telling—we want to make sure we’re understanding this correctly. As things work today,
Allow List entries always take precedence
, including over domains blocked via Universal Lists
. In other words, adding a domain to a site’s policy Allow List should already permit it, even if that domain exists on a Universal Block List. You can see our policy priority article for more detail.Can you share a specific example where this isn’t behaving as expected (for example, the domain, policy type, or deployment method)? If there’s a gap or edge case we’re missing, that context will help us determine whether there’s a bug or a different workflow at play.
P
Patrick Telling
Minetta Gould Attached are screenshots showing the error that occurs when we try to Allow List a website that's also in the Universal Block List.
Thanks for sharing the priority article. This feature request can be completed once the issue I shared is resolved.
Minetta Gould
Patrick Telling: thank you! I asked our Engineers to dig into this to determine if there's a bug causing this issue. I'll let you know when I have any updates!