Advice Request NextDNS/ControlD vs Quad9, AV Web Protection

[vettejock99]

Apologies if this has been mentioned before, but this is news to me. Apparently there is a firefox plugin that gives NextDNS a lot of the abilities I liked about ControlD. With it you can import large lists, export configs, sort lists, and highlight domains in lists. But the ability to import lists was a huge plus for controlD over NextDNS. Not anymore!

See the addon, or tampermonkey script.

The author just discontinued these. Seems he/she reached out to NextDNS about working together to improve performance and enhance future capabilities, and NextDNS didn't seem to be receptive. It's a shame. This addressed some of the nagging administrative issues that have had me looking at ControlD, RethinkDNS, and others even though I've been a paid NextDNS user for several years.

 

[n8chavez]

The author just discontinued these. Seems he/she reached out to NextDNS about working together to improve performance and enhance future capabilities, and NextDNS didn't seem to be receptive. It's a shame. This addressed some of the nagging administrative issues that have had me looking at ControlD, RethinkDNS, and others even though I've been a paid NextDNS user for several years.

I'm thinking of switching to ControlD full time because of these issues, which is a shame. NextDNS is just faster for me, and I have no issues with ocsp queries wit them like I do with ControlD.

 

[n8chavez]

Does anyone have a copy of the NXEnhanced browser extension, either browser? The script file doesn't allow exporting so I can't use it.

 

[Kongo]

 

[jetman]

Very interesting video.
I‘d still like to see the DNS providers tested by a professional lab however.

 

[blackice]

I liked this video a bit more than the last one. I think he learned a lot from the first go around.

 

[Kongo]

 

[ForgottenSeer 97327]

What is great about this guy is that he is open to suggestions to improve his testing method.

His tests more or less have the same outcome as an advice I once got from a security specialist, so I think his approach is okay

Spoiler: Recap of a talk to a security specialist

Quad9 outperforms Next when blocking C&C servers (it was also intended as free DNS for SME and Soho). NEXT does better when blocking Phishing, they are more or less equal when it comes to Malware blocking.

When you like to play and fine tune your DNS, there is no better free DNS than NEXT (with great reporting insights and lots of security and privacy options).When you are a set and forget type of user with privacy concerns (regarding DNS logs) there is no better free DNS than Quad9.

Note: the guy did tell me thay had not tested AdGuard DNS because they consider it a Russian company (although its HQ is in Cyprus when I recall right, but that is what we call in a Dutch only a "postbox" office for legal and tax purposes).

Disclaimer: his advice was for EU citizens only, because resolving time depends on server distance.

Someone should ask him to include DNS0.eu

Thanks for posting

 

[Moonhorse]

Someone should ask him to include DNS0.eu

Dns0 beats all of them easily. Would like to see paid controld vs dns0

Weird comment:

 

[ForgottenSeer 97327]

@Moonhorse, based on what are you so confident that DNS0.eu beats them all easily?

 

[Moonhorse]

@Moonhorse, based on what are you so confident that DNS0.eu beats them all easily?

Tested products on video were cloudflare, quad9, nextDNS, adguard dns
dns ZERO , i have tested it several times against all those four and dns.zero is the winner always
Its more aggressive than nextdns does

you can read what it blocks here

ZERO — Karkaistettua suojausta tietoturvaherkkiin ympäristöihin.

Nostaa haitallisten verkkotunnusten havaitsemista huomattavasti — etenkin niiden kriittisinä alkutunneilla — käyttämällä ihmisten arvioimaa kehittyneellä heuristiikalla tehtyä uhkakartoitusta, joka automaattisesti tunnistaa haitallista toimintaa.

www.dns0.eu

Its been discussed many times on the forum and only product wich beats it is paid controlD

None of those four blocks newly registered domains, or high risk TLDS, if he included paid cloudflare zero trust in video it would have been better

​

 

[ForgottenSeer 97327]

Tested products on video were cloudflare, quad9, nextDNS, adguard dns
dns ZERO , i have tested it several times against all those four and dns.zero is the winner always
Its more aggressive than nextdns does

you can read what it blocks here

ZERO — Karkaistettua suojausta tietoturvaherkkiin ympäristöihin.

Nostaa haitallisten verkkotunnusten havaitsemista huomattavasti — etenkin niiden kriittisinä alkutunneilla — käyttämällä ihmisten arvioimaa kehittyneellä heuristiikalla tehtyä uhkakartoitusta, joka automaattisesti tunnistaa haitallista toimintaa.

www.dns0.eu

Its been discussed many times on the forum and only product wich beats it is paid controlD

None of those four blocks newly registered domains, or high risk TLDS, if he included paid cloudflare zero trust in video it would have been better

​

As far as I know DNS0.eu is NextDNS without the AI, but with some additional threat feeds. So I would expect them to be more or less similar in protection

 

[Moonhorse]

As far as I know DNS0.eu is NextDNS without the AI, but with some additional threat feeds. So I would expect them to be more or less similar in protection

Yeah youre correct, the ai is in beta in nextdns , dns0 dont have that feature ''yet''

 

[Kongo]

None of those four blocks newly registered domains, or high risk TLDS

NextDNS does that

 

[Moonhorse]

NextDNS does that

Yeah was in my mind, sorry

 

[Templarware]

"uad9 outperforms Next when blocking C&C servers"
Is that very impotant? Or not as much as phishing and malware?

 

[ForgottenSeer 103564]

"uad9 outperforms Next when blocking C&C servers"
Is that very impotent? Or not as much as phishing and malware?

Blocking C&C servers means blocking remote control of infected devices and coordinated attacks.

 

[ForgottenSeer 97327]

What is great about this guy is that he is open to suggestions to improve his testing method.

His tests more or less have the same outcome as an advice I once got from a security specialist, so I think his approach is okay

Spoiler: Recap of a talk to a security specialist

Quad9 outperforms Next when blocking C&C servers (it was also intended as free DNS for SME and Soho). NEXT does better when blocking Phishing, they are more or less equal when it comes to Malware blocking.

When you like to play and fine tune your DNS, there is no better free DNS than NEXT (with great reporting insights and lots of security and privacy options).When you are a set and forget type of user with privacy concerns (regarding DNS logs) there is no better free DNS than Quad9.

Note: the guy did tell me thay had not tested AdGuard DNS because they consider it a Russian company (although its HQ is in Cyprus when I recall right, but that is what we call in a Dutch only a "postbox" office for legal and tax purposes).

Disclaimer: his advice was for EU citizens only, because resolving time depends on server distance.

Someone should ask him to include DNS0.eu

Thanks for posting

His results were not that far off compared to LINK so I think he tested correctly

 

[SpiderWeb]

What security/privacy lists should we enable to get a similar performance to DNS0 in terms of security?

It seems strange to me that nobody is specifying what configuration NextDNS was tested in in that comparison.

 

[likeastar20]

Weird, MalwareTips was being blocked by the Malware filter (ControlD)