Troubleshooting Should DNS Client Service Be Disabled When Using MVPS Host File?

[The Security Guy]

Should I disable DNS Client Service while using MVPS Hosts file? I am asking this question because I am having download slow downs. My downloads are real slow-just 15 Kb/s. I am not sure whether MVPS Hosts file is the reason for this.

 

[Evjl's Rain]

I see. But there's no problem right?

yes, there will be no problem, at east for me and for many users

 

[TairikuOkami]

TCPView does not show traffic, which popups for a milisecond or so. Better to use a network logging like:

NetworkTrafficView - Monitor the traffic on your network adapter

 

[ForgottenSeer 58943]

Just use Netstat -a to see connections. Open command prompt, type netstat -a

Remember, without DNSClient your resolution will not be cached unless you have another program or piece of hardware caching resolutions. Your browser is ALREADY caching resolutions, so DNSClient is redundant and even slows down browsing in some cases added a secondary and unnecessary call. Chrome for example has a DNS Preresolver so once the DNS resolution is established from primary forwarder, you are much better off than using DNSClient.

For non-browsers, DNS resolution without a cache/resolver will be imperceptibly slower. Ping your DNS and find your non-browser cache speed, usually sub-20ms, something you likely won't perceive. For example if you launch a game it's resolving already during the launch period so a >20ms resolution poll won't be perceptible AT ALL..

If you have a local DNS (Pi-Hole, strongly recommended), DNSClient WILL slow everything down because it's adding a second or third layer, totally unnecessary cache to your system. If you use Heimdal, it's adding ANOTHER dns cache because Heimdal itself has a small caching agent from your primary resolver so DNSClient once again gets in your way.

We know over the years, that things like DNSClient are junk and should be disabled..

Flaw in Windows DNS client exposed millions of users to hacking

https://tools.cisco.com/security/center/viewAlert.x?alertId=11487

https://us.norton.com/online-threat...ponsespoofingvulnera-28553-vulnerability.html

https://support.microsoft.com/en-us...nerability-in-dns-client-could-allow-spoofing

 

[The Security Guy]

yes, there will be no problem, at east for me and for many users

Oh I see. Thanks for all the help and info man.

 

[The Security Guy]

TCPView does not show traffic, which popups for a milisecond or so. Better to use a network logging like:

NetworkTrafficView - Monitor the traffic on your network adapter

Will install it man.

 

[The Security Guy]

Just use Netstat -a to see connections. Open command prompt, type netstat -a

Remember, without DNSClient your resolution will not be cached unless you have another program or piece of hardware caching resolutions. Your browser is ALREADY caching resolutions, so DNSClient is redundant and even slows down browsing in some cases added a secondary and unnecessary call. Chrome for example has a DNS Preresolver so once the DNS resolution is established from primary forwarder, you are much better off than using DNSClient.

For non-browsers, DNS resolution without a cache/resolver will be imperceptibly slower. Ping your DNS and find your non-browser cache speed, usually sub-20ms, something you likely won't perceive. For example if you launch a game it's resolving already during the launch period so a >20ms resolution poll won't be perceptible AT ALL..

If you have a local DNS (Pi-Hole, strongly recommended), DNSClient WILL slow everything down because it's adding a second or third layer, totally unnecessary cache to your system. If you use Heimdal, it's adding ANOTHER dns cache because Heimdal itself has a small caching agent from your primary resolver so DNSClient once again gets in your way.

We know over the years, that things like DNSClient are junk and should be disabled..

Flaw in Windows DNS client exposed millions of users to hacking

Microsoft Windows DNS Client Buffer Overflow Vulnerability

Microsoft Windows DNS Client Service Response Spoofing Vulnerability | | Norton

https://support.microsoft.com/en-us...nerability-in-dns-client-could-allow-spoofing

Junk. That is the right word for DNS Client. I will never enable it again. Thanks for all the help and info man.

 

[conceptualclarity]

Back when I used to stock my Hosts file with MVPS Host File through jv tools, i would get blocked from visiting all kinds of legitimate websites, including Newegg. When I quit MVPS Host File and only used Spybot and Malware Domain List (via HostsMan) I quit having that problem. You'll never get me to go back to MVPS Hosts File.

 

[The Security Guy]

Back when I used to stock my Hosts file with MVPS Host File through jv tools, i would get blocked from visiting all kinds of legitimate websites, including Newegg. When I quit MVPS Host File and only used Spybot and Malware Domain List (via HostsMan) I quit having that problem. You'll never get me to go back to MVPS Hosts File.

'Back in the day' it may have happened but 'today' I think no such problem exists.