======================================================
  SurfGuardDns  P4  |  local DNS blocker (Windows service)
  ~258k domains across 5 categories.
  Auto-starts at boot. No console window in day-to-day use.
======================================================

Files:
  SurfGuardDns.exe             the proxy (console + service in one)
  config.json                  which categories are on
  blocklists\malware.txt       ~80k domains
  blocklists\trackers.txt      ~40k domains
  blocklists\ads.txt           ~50k domains
  blocklists\annoyances.txt    ~1k domains  (strict-filtered)
  blocklists\adult.txt         ~76k domains (disabled by default)
  blocklists\allowlist.txt     YOUR always-allow list (edit freely)

  Batches (right-click -> Run as administrator):
    1-install-service.bat      register + start as Windows service
    2-set-dns-loopback.bat     capture current DNS + point Windows at 127.0.0.1
    3-reset-dns.bat            restore automatic DNS
    4-uninstall-service.bat    stop + remove the service
    5-run-console.bat          (optional) run in console for debugging

Log file:  %ProgramData%\SurfGuardDns\service.log

--------------------------------------------------------
  FIRST-TIME INSTALL (5 minutes, do ONCE)
--------------------------------------------------------
1. Right-click 1-install-service.bat -> Run as administrator
     -> service registered, started, and set to auto-start at boot
2. Right-click 2-set-dns-loopback.bat -> Run as administrator
     -> captures the current system DNS (so corporate/internal names still work)
     -> points Windows DNS at 127.0.0.1
3. That's it. Reboot, browse, done. Nothing to run at startup ever again.

--------------------------------------------------------
  DAY-TO-DAY
--------------------------------------------------------
Just use your PC normally. The service runs in the background.
Watch the log to see blocks: %ProgramData%\SurfGuardDns\service.log

Turn categories on/off:  edit config.json, then
    sc stop SurfGuardDns
    sc start SurfGuardDns

Add allow-listed domains: edit blocklists\allowlist.txt, then same 2 sc lines.

--------------------------------------------------------
  UNINSTALL
--------------------------------------------------------
1. Right-click 3-reset-dns.bat        -> Run as admin   (restore DHCP DNS)
2. Right-click 4-uninstall-service.bat -> Run as admin   (remove service)
3. Delete the folder.

--------------------------------------------------------
  CONSOLE MODE (for debugging only)
--------------------------------------------------------
If you want to see live block messages in a console:
1. Uninstall the service first (4-uninstall-service.bat)
2. Right-click 5-run-console.bat -> Run as administrator
Keep the window open. Ctrl+C to stop.
