Advice Request What DNS client to use?

[Divine_Barakah]

Hello,

I am currently reinstalling Windows on all the devices in my household. I have chosen not to run any security solution that does https filtering using a root certificate even if I can disable that option. Thus, using Adguard Desktop is not an option for me.

I need a DNS client that allows me to use Adguard DNS or NextDNS using DNS over https. What do you think is the best client for that use? Thank you very much.

 

[Gangelo]

I think that your best bet would be YogaDNS. Simple and highly configurable with rules and you can set it up with any DNS server you want.

 

[Divine_Barakah]

I think that your best bet would be YogaDNS. Simple and highly configurable with rules and you can set it up with any DNS server you want.

I am playing with it right now. Do I need to enter IP address when I configure for example Adguard Default DNS?

 

[Kongo]

Adguard Windows is a good option after all. As you already said, you can disable the other protections so that there will be no HTTPS filtering. Otherwise YogaDNS is a good pick as @Gangelo said.

 

[Divine_Barakah]

Adguard Windows

Adguard, though I have a family lifetime license, is useless if I keep the https filtering disabled. Thus, I am looking for an alternative that allows me to use a custom DNS system-wide.

 

[Kongo]

Adguard, though I have a family lifetime license, is useless if I keep the https filtering disabled. Thus, I am looking for an alternative that allows me to use a custom DNS system-wide.

try the NextDNS client if it isn't suspicious to you. It was detected by quite a lot of AV engines before, not sure about now.

 

[Templarware]

I think Cloudfire Families is the best, the speed of Cloudfire with malware protection.

 

[Kongo]

I think Cloudfire Families is the best, the speed of Cloudfire with malware protection.

he is looking for a client, not a provider.

 

[Divine_Barakah]

try the NextDNS client if it isn't suspicious to you. It was detected by quite a lot of AV engines before, not sure about now.

That incident made me stay away. In my case, I experienced a lag (high latency) when using NextDNS and for that reason I want a client that allows me to flip between dns services. So far Yoga DNS ticks all the boxes but I keep getting (request timed out) error messages from time to time and I do not know why. Maybe an error in my configuration?

 

[Gandalf_The_Grey]

I think Cloudfire Families is the best, the speed of Cloudfire with malware protection.

Speed should be good, but its malware protection is not according to these tests:

DNS Blocking Effectiveness: Recent Independent Tests | Quad9

Quad9’s DNS blocking service has recently been part of an independent test done to compare various DNS-based blocking systems.

www.quad9.net

Comparing Malware-blocking DNS Resolvers, Redux - andryou

Inspired by this DNS malware-blocking comparison, I’ve slightly modified the script provided and added in CIRA’s Canadian Shield and re-ran it to see how it fares with others. Updates: 2020-06-02: important note – “Cisco does not claim that [OpenDNS] blocks threats but only filters content.” – I...

www.andryou.com

Malicious site filters on DNS in 2020 – Skadligkod.se

 

[Divine_Barakah]

I think Cloudfire Families is the best, the speed of Cloudfire with malware protection.

I am looking for a client not a provider as @SecureKongo said. Moreover, I get the highest latency when using Cloudflare as a DNS provider.

 

[Divine_Barakah]

Speed should be good, but its malware protection is not according to these tests:

DNS Blocking Effectiveness: Recent Independent Tests | Quad9

Quad9’s DNS blocking service has recently been part of an independent test done to compare various DNS-based blocking systems.

www.quad9.net

Comparing Malware-blocking DNS Resolvers, Redux - andryou

Inspired by this DNS malware-blocking comparison, I’ve slightly modified the script provided and added in CIRA’s Canadian Shield and re-ran it to see how it fares with others. Updates: 2020-06-02: important note – “Cisco does not claim that [OpenDNS] blocks threats but only filters content.” – I...

www.andryou.com

Malicious site filters on DNS in 2020 – Skadligkod.se

When I set Quad9 DNS, I cannot access the internet. Maybe my ISP blocked it? Is it even possible?

 

[Kongo]

That incident made me stay away. In my case, I experienced a lag (high latency) when using NextDNS and for that reason I want a client that allows me to flip between dns services. So far Yoga DNS ticks all the boxes but I keep getting (request timed out) error messages from time to time and I do not know why. Maybe an error in my configuration?

Understandable. Just take YogaDNS then, I think it won't fail you.

 

[Gandalf_The_Grey]

When I set Quad9 DNS, I cannot access the internet. Maybe my ISP blocked it? Is it even possible?

Could be or the DNS is not available in your region... I really don't know unfortunately.
Maybe you can contact Quad9 to find out:

Get support | Quad9

Get support from Quad9, We can help with setting up your DNS, answering general queires, and false postive or malicous domain reports.

www.quad9.net

 

[Divine_Barakah]

Could be or the DNS is not available in your region... I really don't know unfortunately.

Well it is not a big deal for there are many great alternatives. And I prefer a DNS with ad-blocking capabilities.

 

[Divine_Barakah]

Spoiler: NextDNS ping

time=45ms TTL=50
time=100ms TTL=50
time=51ms TTL=50
time=69ms TTL=50

I have set up NextDNS using DNS over https in Yoga DNS and this is the ping result

 

[Divine_Barakah]

I have two questions about NextDNS. When I configure NextDNS (manually using dns over https), do I have to enter the IP displayed in my NextDNS profile? The second question is: is there a way to see blocked dns queries in Yoga DNS

 

[silversurfer]

When I configure NextDNS (manually using dns over https), do I have to enter the IP displayed in my NextDNS profile?

Yes, it's required for your personal setup (your filters, settings, ect.) of NextDNS

 

[EndangeredPootis]

YogaDNS with NextDNS.

 

[The_King]

YogaDNS is great I have used it in the past but the best DNS client I have used is SimpleDNSCrypt 0.7.1.

It has the better interface and is already integrated with over 100 resolvers. Support for IPv4/6

https://github.com/bitbeans/SimpleDnsCrypt/

I use Cloudflare doH has its noticeably faster than all other resolvers at my location.