Advice Request Which DNS Server do you use? /DNS Tunnelling

[ForgottenSeer 55474]

I use STOFA DNS

 

[DeepWeb]

Sprint's DNS servers. They use DNSSEC and are faster than Google's and my ISP's. All I need to know.
IP/MPLS Products from Sprint

 

[ForgottenSeer 58943]

One more Secure DNS server to share. It's from Pi Hole

It's IP4 address is 192.168.1.200

I think it's using other Secure DNS providers like Google Public DNS, OpenDNS, Norton ConnectSafe and Comodo Secure DNS

192.168.1.200 is a local IP address. That'll get you nowhere.

 

[HarborFront]

192.168.1.200 is a local IP address. That'll get you nowhere.

Yup. Gave the wrong address

Sorry

 

[DeepWeb]

This new DNS server has been all the rage recently
Quad 9 which is run in collaboration with IBM, PCH, Global Cyber Alliance, F-Secure and a few others.
Quad9 | Internet Security & Privacy In a Few Easy Steps

They guarantee privacy, and security, all for free.... yeah right. It does offer DNSSEC and DNS over TLS.
Looking further into the Global Cyber Alliance we will find some interesting members...

Just be aware who may be funding this...

 

[HarborFront]

This new DNS server has been all the rage recently
Quad 9 which is run in collaboration with IBM, PCH, Global Cyber Alliance, F-Secure and a few others.
Quad9 | Internet Security & Privacy In a Few Easy Steps

They guarantee privacy, and security, all for free.... yeah right. It does offer DNSSEC and DNS over TLS.
Looking further into the Global Cyber Alliance we will find some interesting members...
Just be aware who may be funding this...

Privacy and security...with the US Secret Service?

 

[ForgottenSeer 58943]

Everyone should run Pi-Hole. Simple setup. Cheap Raspberry Pi. Secure as hell and YOU control your DNS and Blacklists.

Just plug it into your network, point your router BACK to Pi-Hole IP address and live happy.

 

[klaken]

I occupy comodo DNS is faster than norton dns in my sector (latin america) ... I do not trust google DNS.

 

[Brahman]

I am using simple DNSCRYPT and on that i selects a faster ( which i feels so) dns provider which provides DNSSEC with no logs.

 

[ForgottenSeer 55474]

When I am on VPN I use VYPRVPN DNS & IPVANISHVPN DNS

 

[zzz00m]

I configured my router for Google DNS, but when I use a VPN connection on my PC, the DNS is provided by my VPN server.

 

[DeepWeb]

I've finally given up on my ISP's and my 3rd party DNS. My ISP would not connect me to the correct CDNs... ridiculous. And 3rd party DNS are something I can't fully trust so I'm running a recursive resolver on my computer now.

 

[HarborFront]

I configured my router for Google DNS, but when I use a VPN connection on my PC, the DNS is provided by my VPN server.

You can set any DNS servers you want in your Windows but once you use a VPN the provider's DNS server will override your settings

However, some VPN do allow you to set your own DNS servers

 

[zzz00m]

You can set any DNS servers you want in your Windows but once you use a VPN the provider's DNS server will override your settings

However, some VPN do allow you to set your own DNS servers

I use Google DNS when not connected to my VPN service, which doesn't offer any DNS options.

I was just commenting that when I connect to my VPN provider it overrides my local DNS choice, which is normally Google DNS.

You can set your DNS choice either in the Windows client, or your router. I personally prefer using the router settings, so that way all my clients only need to look to my router for DNS, and it only needs to be set correctly in one place. Some of my clients access the VPN, while others do not. Of course, when you tunnel through VPN, all of your local settings are bypassed, so you become dependent on your VPN client, or VPN service for the DNS configuration at that point.

 

[HarborFront]

More info on DNS servers

20 Best Alternative DNS servers [2017]

Apparently, many of them do log

 

[HarborFront]

Tenta DNS

Tenta DNS is your open source, privacy-first DNS solution that supports DNS over TLS and DNSSEC for a safer and more reliable internet.

A lot of things to read up, here

Tenta DNS Setup Guides

Tenta DNS nameservers are:

ICANN
99.192.182.200
66.244.159.200

OpenNIC
99.192.182.100
66.244.159.100

For testing the above configurations

Browser Privacy - Test IP address, DNS, VPN leaks. Fast & no ads. Protect your online privacy.

 

[Daviworld]

Harborfront pretty much covered it, I use tenta opennic on my router's as an upstream authoritives DNS

 

[ForgottenSeer 58943]

More info on DNS servers

20 Best Alternative DNS servers [2017]

Apparently, many of them do log

Most/Many have logging of some type. To be honest, logging DNS is a bigger problem than people think. Once again, setup a Pi-Hole then you can see the intrusive logging and what it can accomplish. Essentially a full profile of your network, security, programs, and even some vulnerabilities can be gathered from DNS logging.

The problem is, most non-logging, very private DNS have poor pings for me. The sweetspot for DNS is to get your pings to their servers under 50. Anything higher and you will notice some page load latency which can be frustrating. Virtually all of the private ones are 100-175ms for me rendering them useless.

 

[Sunshine-boy]

ForgottenSeer 58943 Is Forti DNS 100% secure against DNS spoofing?

 

[cutting_edgetech]

I just use my ISP's DNS servers. I don't want to use someone like Google because they are getting pretty bad about censoring search results based on political bias.