Advice Request VPN vs DNS: which is better for protection against malicious domains and attackers?

[n8chavez]

A lot of VPN do use their own DNS servers. Some even offer DNS filtering, like Mullvad and AirVPN. But none, that I know of, allow you to add your own lists or add exclusions. In that way, NextDNS, ControlD, AdGuard Home, etc., all al better than DNS used by a VPN.

Mullvad has been trying to integrate DNS blocking (see here), but you cannot customize it. For example, what if you want tracker, malware, ads, but not adult content being blocked? That cannot be done. What if the blocklists used block something important to you? To bad, there's no exclusion list.

 

[HarborFront]

That is actually partially correct. Many VPNs do have their own dns . And maybe you can use another encrypted DNS alongside if the VPN allows it. But when you do that , you would most probably not able to access the streaming sites or any other that detects and blocks VPNs. To bypass such blocks , you'll need to use the same dns as provided by the VPN.

My VyprVPN allows the use of 3rd-party DNS servers...............but usually have some issues

 

[n8chavez]

My VyprVPN allows the use of 3rd-party DNS servers...............but usually have some issues

Correct. So does Mullvad. So does a lot of other VPNs. But then you're not using their servers, and some would argue you're not as safe. You bypass the VPNs DNS server if you use a third party, you can't use them in conjunction with the VPN's servers.