Question 1.1.1. dns shows no?

[SumTingWong]

1.1.1.1 shows no

I use 1.1.1.2 and 1.0.0.2 dns for my asus router, browser, and windows 11.

 

[Bot]

It seems like you might be facing a connection issue. Try restarting your router, computer, and browser. If the problem persists, check your firewall settings or contact your ISP to ensure they're not blocking the DNS.

 

[SumTingWong]

No connection issue. It just 1.1.1.1 shows no

 

[SeriousHoax]

Where have you setup Cloudflare DNS? In your router/windows/browser? How have you set it up?
Also, you should share the site where you're seeing this info so that others can check.
This is the site: 1.1.1.1 — the Internet’s Fastest, Privacy-First DNS Resolver

 

[SumTingWong]

@SeriousHoax

1.1.1.1 — the Internet’s Fastest, Privacy-First DNS Resolver

✌️✌️ Browse a faster, more private internet.

one.one.one.one

Asus AX RT 55 router
1) LAN > DNS and WINS server settings > DNS Server 1: 1.1.1.2 , DNS Server 2: 1.0.0.2

2)

3) Browsers < DNS section, then select Cloudflare dns default.

4) Windows 11 setup follow through here: Set up 1.1.1.1 on Windows · Cloudflare 1.1.1.1 docs

 

[blackice]

On ASUS stubby for the DoT does a round robin run. Does this test always show not connected to 1.1.1.1 of you run it several times? I haven’t used the Cloudflare test in a long time. So I’m not sure, but I think the bot might be right in saying there’s a connection issue with 1.1.1.1 at your location. Your router is properly set.

 

[blackice]

@SeriousHoax

1.1.1.1 — the Internet’s Fastest, Privacy-First DNS Resolver

✌️✌️ Browse a faster, more private internet.

one.one.one.one

Asus AX RT 55 router
1) LAN > DNS and WINS server settings > DNS Server 1: 1.1.1.2 , DNS Server 2: 1.0.0.2

2)
View attachment 283275

3) Browsers < DNS section, then select Cloudflare dns default.

4) Windows 11 setup follow through here: Set up 1.1.1.1 on Windows · Cloudflare 1.1.1.1 docs

Also, for 1, don’t put anything in the LAN dns settings.

 

[7Oz-64]

From my experience (using a asus router too), if you've set DNS on your router, you absolutely don't need to set DNS in Windows or Browser, all requests are filtered by your router, leave windows default and for your browser if it's Chrome then deactivate secure DNS and for Firefox too.

 

[SeriousHoax]

@SeriousHoax

1.1.1.1 — the Internet’s Fastest, Privacy-First DNS Resolver

✌️✌️ Browse a faster, more private internet.

one.one.one.one

Asus AX RT 55 router
1) LAN > DNS and WINS server settings > DNS Server 1: 1.1.1.2 , DNS Server 2: 1.0.0.2

2)
View attachment 283275

3) Browsers < DNS section, then select Cloudflare dns default.

4) Windows 11 setup follow through here: Set up 1.1.1.1 on Windows · Cloudflare 1.1.1.1 docs

I tried setting it up on Edge and Firefox and I get similar result also. Maybe the testing site has issues. One way to verify that you're actually connected to Cloudflare malware blocking DNS is to visit this test site. If your browsers don't respond to this site, then it should mean that it's working fine, and you can ignore the result shown by the test site. Test it on your PC and smartphone:

https://malware.testcategory.com/

The DNS is properly working for me.

 

[TairikuOkami]

https://malware.testcategory.com/ The DNS is properly working for me.

The same here.

From my experience (using a asus router too), if you've set DNS on your router, you absolutely don't need to set DNS in Windows or Browser, all requests are filtered by your router, leave windows default and for your browser if it's Chrome then deactivate secure DNS and for Firefox too.

The way it works, browser is above Windows and Windows is above router. Malware could easily set it's own DNS server and ignore router altogether, unless it is specifically blocked, like:



I keep router's DNS set to ISP, because it does not matter from user's perspective and it is better for ISP's remote maintenance of the router and to prevent network related issues.

 

[silversurfer]

Asus AX RT 55 router
1) LAN > DNS and WINS server settings > DNS Server 1: 1.1.1.2 , DNS Server 2: 1.0.0.2

2)
View attachment 283275

Just my idea... the screenshot of your ASUS router settings shows DNS server: 1.1.1.2 and 1.0.0.2 (as we know both are for Cloudflare Malware Blocking), but with that the Cloudflare DNS test link might doesn't show "YES" for 1.1.1.1 as part of "Connectivity to Resolver IP Addresses"

 

[rashmi]

1.1.1.1 shows no

I think it's an issue with the test site. I'm using Cloudflare, and the test site always shows "NO" for 1.1.1.1

 

[SumTingWong]

On ASUS stubby for the DoT does a round robin run. Does this test always show not connected to 1.1.1.1 of you run it several times? I haven’t used the Cloudflare test in a long time. So I’m not sure, but I think the bot might be right in saying there’s a connection issue with 1.1.1.1 at your location. Your router is properly set.

No for 1.1.1.1 under IP connectivity resolver section. The top says I am connected to 1.1.1.1

Also, for 1, don’t put anything in the LAN dns settings.

Gotcha. I have it remove.

From my experience (using a asus router too), if you've set DNS on your router, you absolutely don't need to set DNS in Windows or Browser, all requests are filtered by your router, leave windows default and for your browser if it's Chrome then deactivate secure DNS and for Firefox too.

I thought browser will use the default dns in the Windows os, not the router?

The same here.

View attachment 283286


The way it works, browser is above Windows and Windows is above router. Malware could easily set it's own DNS server and ignore router altogether, unless it is specifically blocked, like:

View attachment 283283

I keep router's DNS set to ISP, because it does not matter from user's perspective and it is better for ISP's remote maintenance of the router and to prevent network related issues.

Just my idea... the screenshot of your ASUS router settings shows DNS server: 1.1.1.2 and 1.0.0.2 (as we know both are for Cloudflare Malware Blocking), but with that the Cloudflare DNS test link might doesn't show "YES" for 1.1.1.1 as part of "Connectivity to Resolver IP Addresses"

So this is normal? I was baffling why NO for 1.1.1.1 as part of "Connectivity to resolver IP addresses".

I think it's an issue with the test site. I'm using Cloudflare, and the test site always shows "NO" for 1.1.1.1

Are you using 1.1.1.1 or 1.1.1.2 or 1.1.1.3?

 

[blackice]

I thought browser will use the default dns in the Windows os, not the router?

The default of Windows is to ask the router's DHCP server for a DNS. Your ASUS router will forward requests to the one you set for the WAN DNS.

 

[7Oz-64]

@TairikuOkami
Ok am agree, so let me explain how is set my router
My ISP provider don't allow me to change DNS on it's own router (DMZ activated)
I've connected my Asus ac88u to manage entire network (need credentials to connect) (trend micro protection disabled)
I ve temporarily enable SSH on port 22 and installed NextDNS CLI ver 1.43.3 using PuTTY (auto login disabled), after i disable SSH capabilities
All network requests are logged in NextDNS logs, DoH is deactivate in firefox, and Windows is set to use DNS automatically by default
browserleaktest and folks always return that am using ONLY NextDNS.
Bitdefender internet security protect my computer.
All my credentials are protected with a keyfile (on a usb key) and stored on external HDD
With this can you still confirm me that a malware is still able to redirect traffic to it's own DNS server ???
Thanks

 

[TairikuOkami]

With this can you still confirm me that a malware is still able to redirect traffic to it's own DNS server ???

DoH is deactivate in firefox, and Windows is set to use DNS automatically by default

Malware can "simply" install it's own DNS server and connect to Windows via a loopback (127.0.0.1), like DNSCrypt does.
Also you have port 443 allowed, so it could set it's own DoH, since you have not set any in browsers nor Windows.

Meet Godlua, the first known malware that leverages DNS over HTTPS

DNS over HTTPS has been gaining momentum. Last October, the Internet Engineering Task Force formally adopted DoH, published as RCF 8484, and while the concept itself isn't...

www.techspot.com

Of course, this is theoretical, considering your setup, it is highly unlikely, but still possible.
I have allowed only known DNS via a firewall, but it can still by bypassed via DoH set in browsers.

 

[7Oz-64]

@TairikuOkami
Couldn't agree anymore
Of course i can set both router and Windows and/or Firefox with NextDNS, but each time i torrenting (VPN), i've to disable NextDNS on Windows for working, tested on several VPN providers ,there unable to override NextDNS, if i use only Next DNS on router it works, i 've VPN own's dns.
Again thank you.
And sorry for this little bit off topic

 

[rashmi]

Are you using 1.1.1.1 or 1.1.1.2 or 1.1.1.3?

I'm using 1.1.1.1