These commands are planned — zshield is not yet released.

Start the DNS resolver daemon. Listens on localhost and intercepts DNS queries, blocking domains that match configured blocklists.

$ zshield start

Stop the DNS resolver daemon.

$ zshield stop

Print current blocking statistics — total queries, blocked count, top blocked domains.

$ zshield status

Block a domain. Queries for this domain will always be blocked, regardless of blocklists.

$ zshield block tracker.example.com

Allow a domain. Queries for this domain will always resolve normally, even if it appears on a blocklist.

$ zshield allow example.com

List all custom block and allow rules. Shows per-domain overrides that have been manually configured.

$ zshield list