Asr07
Level 1
- Oct 4, 2017
- 10
Which DNS Server do you use? /DNS Tunnelling
- Thread starter Logethica
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
- Status
FortiGuard DNS no longer supports ANY filtration (Malware/Spam/Ads/Phish) for free. The DNS without a licensed Fortigate is just a normal DNS, with a licensed forgate on the gateway IP it activates not only the above, but also SNI based Web Filtration.
So I do not recommend FortiGuard DNS as a free option unless you are just looking for a secured, corporate focused DNS with high reliability.
Pi-Hole is by far the best option for everyone anyway.
So I do not recommend FortiGuard DNS as a free option unless you are just looking for a secured, corporate focused DNS with high reliability.
Pi-Hole is by far the best option for everyone anyway.
- May 13, 2017
- 2,377
You can check using this test, it gives various info about your current DNS, including DNSSEC support.
Browser Privacy - Test IP address, DNS, VPN leaks. Fast & no ads. Protect your online privacy.
- Apr 1, 2017
- 1,749
@ForgottenSeer 58943
Thanks for your timely reply! Will Pi-Hole work with Windows 7 64bit as I thought Pi-Hole only worked with Linux...
Thanks for your timely reply! Will Pi-Hole work with Windows 7 64bit as I thought Pi-Hole only worked with Linux...
Pi-Hole is designed to be run in a VM or on a Raspberry Pi, it's not designed to run on a Windows PC, it's a DNS server on your network, not an endpoint DNS server.
Last edited by a moderator:
- Dec 24, 2011
- 480
I am looking in the Pi-hole direction, what DNS do you point your Pi-hole to, your provider, openDNS or any other "open" DNS services?
/W
- Sep 14, 2017
- 31
I switched to UncensoredDNS since it supports DNS over TLS and DNSSEC, without beeing Google, Quad9 or Cloudflare.
Even if the DNS Privacy Project tells otherwise, both the unicast and the anycast Server supports DNS over TLS and DNSSEC.
- May 13, 2017
- 2,377
Thanks for the link. I wonder, why dns.watch does not support encryption yet. I always considered it top notch.
I understand people not trusting big corporations with DNS, but trusting some random guy, who runs a server? It is not like, he has to honor his privacy policy, he is not as bound by laws as corporations, which are being scrutinized.
- Sep 14, 2017
- 31
@TairikuOkami
This "random Guy" offers his DNS service since 2009 under the name CensurfriDNS, which many people used for years without any problems.
Im going away from DNS.Watch since they had 2 outages in the last 3 month without any explanation and they don't update their social media or blog anymore.
While this "random Guy" is active and answers questions.
If DNS.Watch upgrades to DNS over TLS and take their service more serious im would switch back.
Since i have my own local DNS Resolver and Cache, most of the time his DNS won't even get used, since pfBlockerNG with Unbound send their request to the 13 root DNS servers anyway.
This "random Guy" offers his DNS service since 2009 under the name CensurfriDNS, which many people used for years without any problems.
Im going away from DNS.Watch since they had 2 outages in the last 3 month without any explanation and they don't update their social media or blog anymore.
While this "random Guy" is active and answers questions.
If DNS.Watch upgrades to DNS over TLS and take their service more serious im would switch back.
Since i have my own local DNS Resolver and Cache, most of the time his DNS won't even get used, since pfBlockerNG with Unbound send their request to the 13 root DNS servers anyway.
- Status