How-to guides

Route the blocked-domain list through a VPN or alternate DNS so you can reach these sites again. Download the matching export from the domain list.

UniFi + Mullvad

Route specific domains through a WireGuard VPN tunnel on your UniFi gateway using a policy-based route. I use Mullvad in this guide, but any WireGuard-based provider works the same way.

  1. Set up a Mullvad WireGuard tunnel on your UniFi gateway (Settings → VPN → VPN Client).
  2. Go to Traffic Management → Routes and create a new Policy-Based Route.
  3. Set the source to your LAN and the destination to a domain list.
  4. Download the UniFi export (.txt) from the list page.
  5. Import the domains into the route’s domain matching list.
  6. Set the next hop to the Mullvad WireGuard interface and save.

Apple Shortcut

Submit the page you’re viewing in Safari straight to the tracker from the Share Sheet.

  1. Create a new Shortcut and enable “Show in Share Sheet” with URLs as input.
  2. Add a Get Contents of URL action (GET) pointing at:
https://osatracker.co.uk/api/shortcut/submit?url=[Shortcut Input]
  1. Add a Show Notification action using the response text.
  2. In Safari, tap Share → your shortcut. You’ll see “Submitted: example.com” or “Already in list: example.com”.

The endpoint normalises the URL to a bare domain before queuing it for review. (A signed, downloadable .shortcut file must be built and signed on an Apple device — these steps reproduce it exactly.)

dnsmasq / Pi-hole

Route DNS for the blocked domains to an upstream resolver that bypasses the block.

  1. Download the dnsmasq export (.conf) from the list page.
  2. Place it at /etc/dnsmasq.d/osa-blocked.conf (Pi-hole reads this directory).
  3. Set the upstream server for those domains to a resolver reachable via your VPN.
  4. Restart dnsmasq: sudo systemctl restart dnsmasq (or restart the Pi-hole DNS service).