Same here 7/9
New Update NextDNS adds several new Early Access security features
-
Thread starter
Brahman
- Start date
- 55 Replies
- 5,436 Views
@Sampei.Nihira
Uhm sorry on more disabled here : data drop services, don't remember why, maybe my bank account or searxng
Uhm sorry on more disabled here : data drop services, don't remember why, maybe my bank account or searxng
@Sampei.Nihira
Uhm sorry on more disabled here : data drop services, don't remember why, maybe my bank account or searxng
Try it out.
If it's just one website, you can add it to the whitelist.
Otherwise, it's not worth the trouble.
Added to the disabled - Newly Active Domains.
So only 6/9 are enabled.
Disabled:
So only 6/9 are enabled.
Disabled:
- Newly Active Domains
- DNS Payload Delivery
- Residential Hosting
@to all
Another issue with these new Early Access features is that you may encounter them on streaming websites.
On these sites, each video is usually a series of linked websites.
If the video doesn’t play and gives you a generic (numeric) error, it may be that a specific required domain is blocked.
In this case,as happened to me,you have no way of immediately seeing which required domain is blocked, since it isn’t highlighted on the screen even if you’ve enabled the block page.
I discovered this using the browser’s developer tools, but it might also be highlighted in the NextDNS log.
Another issue with these new Early Access features is that you may encounter them on streaming websites.
On these sites, each video is usually a series of linked websites.
If the video doesn’t play and gives you a generic (numeric) error, it may be that a specific required domain is blocked.
In this case,as happened to me,you have no way of immediately seeing which required domain is blocked, since it isn’t highlighted on the screen even if you’ve enabled the block page.
I discovered this using the browser’s developer tools, but it might also be highlighted in the NextDNS log.
To all the more advanced members here who have been posting what works for them, or problems encountered with the newer filters, thank you 
ghostkernel
Level 1
Depends on your usage. I have all but residential hosting and data drop enabled, using only hagezi multi pro++ list and utilize the allowlist for broken sites and apps and have zero issues.To all the more advanced members here who have been posting what works for them, or problems encountered with the newer filters, thank you
It's easy to run a test.
Just enable all the features in NextDNS - Security.
And, of course, in my case, don't disable uBo + APIVoid Script Stop, and try watching the video below:
streamingcommunityz.photography/
Search - Star
Star Trek - Strange New Worlds
Episodi
Stagione 4
Valle Marineris
P.S.
In one week, the domain will switch TLDs; it would be interesting to repeat the test because accumulating 100 exceptions in a year isn't exactly exciting.
Last edited:
ghostkernel
Level 1
Yes but can easily be handled by using wild cards wisely, and if need be dial back the TLR and Free Hosting filters which will eradicate around 90% of the issues. At this point I have not had any issues to warrant this though.
It's easy to run a test.
Just enable all the features in NextDNS - Security.
And, of course, in my case, don't disable uBo + APIVoid Script Stop, and try watching the video below:
streamingcommunityz.photography/
Search - Star
Star Trek - Strange New Worlds
Episodi
Stagione 4
Valle Marineris
View attachment 300473
P.S.
In one week, the domain will switch TLDs; it would be interesting to repeat the test because accumulating 100 exceptions in a year isn't exactly exciting.
Indeed, but Netflix and Youtube works, as for the, cough, other streaming webpages, I just switch to AdguardDNS. It is easier than searching, what to allow.
Code:
rem Add DoH for Edge, to reset, remove the entry/policy
rem https://adguard-dns.io/kb/general/dns-providers
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "BuiltInDnsClientEnabled" /t REG_DWORD /d "1" /f
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DnsOverHttpsMode" /t REG_SZ /d "secure" /f
reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DnsOverHttpsTemplates" /t REG_SZ /d "https://dns.adguard-dns.com/dns-query?" /f
ipconfig /flushdns
edge://net-internals/#dnsBut as for the mentioned webpage, merely 2 exceptions will do, for now.
Code:
sc-u18-01.secretsparrow14.boats
streamingcommunityz.photographyAttachments
@TairikuOkami
Good job.
But in a week, the website's TLD will be different.
And if you want to watch other videos as well, you'll probably have to add more exceptions.
This test shows that adding exceptions isn't always feasible, at least for some websites.
Good job.
But in a week, the website's TLD will be different.
And if you want to watch other videos as well, you'll probably have to add more exceptions.
This test shows that adding exceptions isn't always feasible, at least for some websites.
Yeah, I used a separate browser, Chromium for streaming, but Windows Insider broke it.This test shows that adding exceptions isn't always feasible, at least for some websites.
It's easy to run a test.
Just enable all the features in NextDNS - Security.
And, of course, in my case, don't disable uBo + APIVoid Script Stop, and try watching the video below:
streamingcommunityz.photography/
Search - Star
Star Trek - Strange New Worlds
Episodi
Stagione 4
Valle Marineris
View attachment 300473
P.S.
In one week, the domain will switch TLDs; it would be interesting to repeat the test because accumulating 100 exceptions in a year isn't exactly exciting.
@TairikuOkami
Correction.
The TLD has already changed......
Can not be forked whitelisting stuff. Learnt my lesson from my networking days. It's a pita to whitelist everything.
As long as there is no issues with enabling those settings I may have a go when I get around to it
As long as there is no issues with enabling those settings I may have a go when I get around to it
It's interesting to note that:
Newly Active Domains
+ the old protection against domains registered less than 30 days ago block 90% of all these scam websites:
hxxps://db.aa419.org/fakebankslist.php
So I've reactivated the protection mentioned above.
P.S.
The combination of the other protective measures does the rest; the resulting block rate is 100%.
Any legitimate websites may be added to the whitelist:
Anti Softworks
___________________________________________________________________________
Disabled:
Newly Active Domains
+ the old protection against domains registered less than 30 days ago block 90% of all these scam websites:
hxxps://db.aa419.org/fakebankslist.php
So I've reactivated the protection mentioned above.
P.S.
The combination of the other protective measures does the rest; the resulting block rate is 100%.
Any legitimate websites may be added to the whitelist:
Anti Softworks
___________________________________________________________________________
Disabled:
- DNS Payload Delivery
- Residential Hosting
Last edited:
Recently browsing
Members who viewed this thread in the last 5 minutes
