Advice Request NextDNS thoughts and experiences?

[ForgottenSeer 85179]

New network diagnostic tool
https://www.reddit.com/r/nextdns/comments/jvl1sg/new_network_diagnostic_tool/
If you are experiencing network latency issue to NextDNS servers, we just released a diagnostic tool to help you submit key measurements that will help us improve our network.
You can find the instructions on this FAQ page.

 

[Overkill]

How many blocklists do you all use, and how many queries all together? My weather/news apps only work if I'm using AdGuard DNS by itself, if I add any other blocklists then my videos won't play and I cannot figure out what is being blocked. When I had AdGuard on my phone, I had to whitelist imasdk.googleapis.com but it's not being blocked

 

[ForgottenSeer 85179]

How many blocklists do you all use, and how many queries all together? My weather/news apps only work if I'm using AdGuard DNS by itself, if I add any other blocklists then my videos won't play and I cannot figure out what is being blocked. When I had AdGuard on my phone, I had to whitelist imasdk.googleapis.com but it's not being blocked

Sounds like you use a <overkill> number of lists.
I use only the default one from NextDNS with my settings from e.g. Thread 'NextDNS: a DoH/ DoT guide' (malwaretips.com)

 

[Jan Willy]

How many blocklists do you all use, and how many queries all together? My weather/news apps only work if I'm using AdGuard DNS by itself, if I add any other blocklists then my videos won't play and I cannot figure out what is being blocked. When I had AdGuard on my phone, I had to whitelist imasdk.googleapis.com but it's not being blocked

In NextDNS I only used Steven Blacks filter list. This setting didn't give any problem on my laptop. But on my Android phone videos in news apps didn't play. This was caused by Steven Blacks filter list. And indeed what you already figured out, whith Adguard filter list everything is o.k. Notice that Steven Blacks filter is integrated in the default NextDNS filter list. I have about 100,000 queries a month.

 

[oldschool]

I use only the default one from NextDNS with my settings from e.g. Thread 'NextDNS: a DoH/ DoT guide' (malwaretips.com)

@Overkill I agree with @security123 . Either default list or Easy Privacy & List work well.

 

[Overkill]

I have tried all kinds of combo's both overkill, minimal and everything in between, but currently all I have is AdGuard DNS filter list and my news/weather app videos play fine. I just wanted to know how to troubleshoot incase I needed to allow something. it was pretty easy in the AdGuard app.

 

[ForgottenSeer 85179]

I have tried all kinds of combo's both overkill, minimal and everything in between, but currently all I have is AdGuard DNS filter list and my news/weather app videos play fine. I just wanted to know how to troubleshoot incase I needed to allow something. it was pretty easy in the AdGuard app.

In NextDNS online account you have a overview with all blocked and allowed domains
you can even filter it with search.

 

[Overkill]

In NextDNS online account you have a overview with all blocked and allowed domains
you can even filter it with search.

Yes. I have looked all through the blocked domains and can't find anything related to the app videos that should/could be allowed.

 

[Overkill]

My current configuration...

 

[Jan Willy]

Yes. I have looked all through the blocked domains and can't find anything related to the app videos that should/could be allowed.

Now I had some time to find out who's to blaim for blocking videos in news apps etc. on Android. Your and my first solution was the easiest way: changing the filter list. It was evident that Steven Blacks filter list and the default NextDNS filter list caused the problem. My conclusion is that it depends on a rule that blocks www.googletagservices.com. If you whitelist this domain, the problem is solved.
Edit: this solution worked only for a short time. After a restart of my phone the problem was back. So for now the best thing is to choose another filter list.

 

[ForgottenSeer 85179]

My conclusion is that it depends on a rule that blocks www.googletagservices.com. If you whitelist this domain, the problem is solved.

Try allowing affiliate links in account settings which may solve your problem

 

[ForgottenSeer 85179]

39,524 - requests in 2 days. I don't know how 300,000 can be enough for people.

Depends on your filter lists. If you block e.g. telemetry from devices they try again and again which boost your queries.

 

[ForgottenSeer 85179]

Oh, I didn't think about that, that they would try again and again, and I turned on all possible filters.

Try with only NextDNS default filter and see how it performs for you.
I only use this list which already use a lot (50+) of sources.

 

[oldschool]

@Jan Willy @Trismer try Easy Privacy and Easy List as an option. They're not aggressive and they're well maintained.

 

[oldschool]

I'm not sure that they will block the telemetry of Microsoft and Xiaomi,

No, they won't.

 

[Jan Willy]

try Easy Privacy and Easy List as an option. They're not aggressive and they're well maintained.

In my NextDNS now runs Adguard SDNS ad- and tracking list in a satisfying way.

 

[ForgottenSeer 85179]

New Help Center / Community support
Please welcome our new Help Center. In addition to the knowledge base, you now have a community support on which users can help each others. The NextDNS team will participate too.
https://help.nextdns.io

 

[valvaris]

Does anyone know if it's even possible to force the browser to use Nextdns at the same time as the VPN extension? I tried with Windscribe it seemed to work for some time, but it was constantly disconnected, and now it stably connects its DNS when activated. It didn't work out with ZenMate either.

I use this settings:
user_pref("network.trr.mode", 3);
user_pref("network.trr.uri", "https://dns.nextdns.io/my_id");
user_pref("network.trr.custom_uri", "https://dns.nextdns.io/my_id");
user_pref("network.trr.bootstrapAddress, "1.1.1.1")
user_pref("network.proxy.socks_remote_dns", true);

Seems that it work with
user_pref("network.trr.wait-for-A-and-AAAA", true);
but i don't know why I will continue to experiment, I am glad that in Firefox such fine settings are in principle possible.

Hello @Trismer

I am not sure but it seems that Line 4 "bootstrapAddress" still refers to Cloudflare. The other thing is how VPN Protocol will handle your IP routing.

For Example in OpenVPN you can force in the config to Route DNS Traffic to specific servers! The other part is how the Provider handles DNS Requests.

Another Example known VPN Client connects to Provider Network and the Appliance or Server has specific rules on how DNS will be handled.

Like: If Source Port is 53 UDP send to Destination IP on Port 53 UDP - Some even try to MiM the 53 TCP requests for DoH.

Your best bet is to go DoT from start to finish since the encapsulation has to start from the requester to recursively obtain the destination address. Since NextDNS Suppports DoT very well you could do a easy implementation and go full IPv6 from the Client but it could break other things in the Home-Network. Still the safest way to have a Direct Connection to NextDNS since IPv6 is a Point to Point Protocol. So even if you have a VPN connected and it allows for IPv6 to go thru you will always have a direct Link to NextDNS from the Client to the Server. If the VPN Provider prevent you from using IPv6 or forces a DNS server then there could be another reason behind it since some of those providers use Proxy Chain Servers to bypass Netflix - Funimation and so on checks.

If you are in need for more Explanation I am here to help do not hesitate to ask.

Sincerely
Val.

 

[ForgottenSeer 78429]

39,524 - requests in 2 days. I don't know how 300,000 can be enough for people. Or do my devices spam requests to the DNS server without control? But it looks like I'll have to buy a subscription, since I'm hooked on this thing. =(

Are you talking about queries shown in Analytics section? You should check in the account setting page under the email id which shows actual queries you have used out of 300k.

 

[ForgottenSeer 85179]

I compare default NextDNS with Kees' TOP_EU_US_Ads_Trackers_HOST and the result is:
1340 / 4372 entries are missed at NextDNS side.

So i hope NextDNS add this list. You can take a message/ vote if you agree: https://github.com/Kees1958/W3C_annual_most_used_survey_blocklist · Issue #128 · nextdns/metadata