The Blocker page showed all_domains even when nothing was in force, and its copy still called a bare '*' an invalid expansion. Hostnames now comes from the live list (empty while blocking is off), the routed DNS zones get their own stat, and the banners distinguish junk labels from masks no hosts file can express — which is what the server now reports.