Question Which DNS Server do you use? /DNS Tunnelling

[Asr07]

I use DNS.Watch:

Me too. Plus UncensoredDNS.

 

[Slyguy]

FortiGuard DNS no longer supports ANY filtration (Malware/Spam/Ads/Phish) for free. The DNS without a licensed Fortigate is just a normal DNS, with a licensed forgate on the gateway IP it activates not only the above, but also SNI based Web Filtration.

So I do not recommend FortiGuard DNS as a free option unless you are just looking for a secured, corporate focused DNS with high reliability.

Pi-Hole is by far the best option for everyone anyway.

 

[TairikuOkami]

Hey do you know if Fortinet supports DNSSEC

You can check using this test, it gives various info about your current DNS, including DNSSEC support.

Browser Privacy - Test IP address, DNS, VPN leaks. Fast & no ads. Protect your online privacy.

 

[Sunshine-boy]

Fori DNS support dnssec I already tested it.

 

[71Hemi]

@Slyguy
Thanks for your timely reply! Will Pi-Hole work with Windows 7 64bit as I thought Pi-Hole only worked with Linux...

 

[Slyguy]

@Slyguy
Thanks for your timely reply! Will Pi-Hole work with Windows 7 64bit as I thought Pi-Hole only worked with Linux...

Pi-Hole is designed to be run in a VM or on a Raspberry Pi, it's not designed to run on a Windows PC, it's a DNS server on your network, not an endpoint DNS server.

 

[woodrowbone]

Pi-Hole is designed to be run in a VM or on a Raspberry Pi, it's not designed to run on a Windows PC, it's a DNS server on your network, not an endpoint DNS server.

I am looking in the Pi-hole direction, what DNS do you point your Pi-hole to, your provider, openDNS or any other "open" DNS services?

/W

 

[Forsaked]

I use DNS.Watch:

I switched to UncensoredDNS since it supports DNS over TLS and DNSSEC, without beeing Google, Quad9 or Cloudflare.
Even if the DNS Privacy Project tells otherwise, both the unicast and the anycast Server supports DNS over TLS and DNSSEC.

91.239.100.100
2001:67c:28a4::

89.233.43.71
2a01:3a0:53:53::

 

[TairikuOkami]

DNS Privacy Project

Thanks for the link. I wonder, why dns.watch does not support encryption yet. I always considered it top notch.

UncensoredDNS

I understand people not trusting big corporations with DNS, but trusting some random guy, who runs a server? It is not like, he has to honor his privacy policy, he is not as bound by laws as corporations, which are being scrutinized.

 

[Forsaked]

@TairikuOkami

This "random Guy" offers his DNS service since 2009 under the name CensurfriDNS, which many people used for years without any problems.
Im going away from DNS.Watch since they had 2 outages in the last 3 month without any explanation and they don't update their social media or blog anymore.
While this "random Guy" is active and answers questions.
If DNS.Watch upgrades to DNS over TLS and take their service more serious im would switch back.

Since i have my own local DNS Resolver and Cache, most of the time his DNS won't even get used, since pfBlockerNG with Unbound send their request to the 13 root DNS servers anyway.