Battle Which DNS would you choose for Security and Content blocking?

[Tempnexus]

I would like to add a second opinion Content and Malware blocking on top of my Sophos UTM.
Giving that speculation which DNS would you choose?
Norton DNS
Comodo DNS
Open DNS
Fools DNs

 

[Threadripper]

I use NextDNS on all of my devices.

I used AdguardDNS on parents devices and advised friends to use it but they were annoyed by the fact it blocked the links Google gives you for "shopping" so I resorted to Quad9 in their cases.

 

[alakazam]

No need to install anything, just set it up in your router, windows or a browser by entering 4 numbers, that is all. You can test various DNS services for effectiveness.

A List of Free and Public DNS Servers for 2024

A list of the best public and completely free DNS servers, plus why you might want to change them.

www.lifewire.com

Or you can use this utility for a quick setup. Pick Family Safe DNS List, pick one DNS and Apply DNS.

Dns Jumper v2.3

DNS Jumper is a free and portable software that lets you change DNS with a few clicks and is the world's first IPv6 support software.

www.sordum.org

How do I return to my original IP if I decide I no longer want to use the DNS?

 

[cryogent]

I tested many DNS providers and for now i stick with NextDNS, is fast enough for me, parental control works ok, paired with AdGuard desktop i think protection is allready overkill.

 

[FireHammer]

Hi, Neither, I use AdGuard DNS with Malware Filter.

 

[Vincent Valentine]

For Best Security - Quad9
All in one balanced dns - AdGuard
Customization - NextDNS
I personally use AdGuard Windows and Quad9 DNS for best performance, security and content blocking experience.

 

[monkeylove]

How do I return to my original IP if I decide I no longer want to use the DNS?

At least for Windows PC, check out programs like DNS Jumper, which also comes with a tester:

Dns Jumper v2.3

DNS Jumper is a free and portable software that lets you change DNS with a few clicks and is the world's first IPv6 support software.

www.sordum.org

 

[Stopspying]

I've used DNSJumper a lot in the past but now I stick to AdGuard DNS.

I use NextDNS on all of my devices.

I used AdguardDNS on parents devices and advised friends to use it but they were annoyed by the fact it blocked the links Google gives you for "shopping" so I resorted to Quad9 in their cases.

AdGuard does make using commercial sites a bit of a pain to use for this reason, but I'd rather they did this than Google slurps up even more about my online activities, a bit of extra tweaking as and when i want to access certain sites isn't too much of a hassle.

 

[valvaris]

Changed things up again - Went away from NextDNS to Commercial ones like 1.1.1.2 / 1.0.0.2 @853 DoT and Quad9 as fallback - For Content Control I build a OPNsense Firewall with Sensei from SunnyValley - Extension on the browser Ublock Origin for Edge Chromium.

Have to say the performance is nice and reporting with exclusions for lists is as easy as just clicking the Checkmark and go...

PC refers to Local DNS 192.168.100.254 -----> Firewall (OPNsense with Unbound Default) Uplink to <-----DoT----> Cloudflare / Quad9

Sincerely
Val.

 

[acyclovir]

Why not RPi with pi-hole and Unbound and the ISP´s DNS?

 

[valvaris]

Why not RPi with pi-hole and Unbound and the ISP´s DNS?

Why?

It would be another device in the network and since OPNsense has this feature build inside it will take care of the DNS requests very reliable.

Why not using the ISPs DNS here is a nice read from Cloudflare -> Introducing 1.1.1.1 for Families

So I do not need to take care of lists anymore and with Sensei (Sunny Valley) NGFW Lists for Application Protection / Web Protection and Control they work very reliable too. The Reports are very good and if something gets blocked its easy as 1-2-3 to troubleshoot including what Ports communicate with stats.
Here is a read for Sensei -> Sensei: Overview — OPNsense documentation

Pihole:
PC ----> PIhole ----> Router -----> DNS

OPNsense DNS:
PC -----> OPNsense ----> DNS

Long story short since OPNsense is your gateway communication is shorter and all under one console/webinterface.

Sincerely
Val.

 

[ForgottenSeer 85179]

The @Quad9DNS service was blocking our grapheneos.network connectivity check server for a period of time yesterday/today. It was unblocked after users reported it. It's very strange and I think it reflects quite badly on their processes for blocking supposed malware domains.

I'd really like to know why a domain using DNSSEC and running an HTTP / HTTPS server serving empty 204 responses for /generate_204 was blocked.

It doesn't serve anything else beyond redirects to GrapheneOS Frequently Asked Questions for /, a static MTA-STS configuration and 404 responses...

Maybe they accidentally block .network domains so more then just this domain was affected but who knows. At least nice to see a fast fix.

 

[PSLGmail]

would it be for individual or for business use? if for business use, then of course webtitan

 

[yashiscool]

Has anyone even tried cloudflare’s 1.1.1.2/3?

 

[yashiscool]

yep google. the fastest and reliable. I tried comodo norton and opendns google is the best.

Fastest DNS probably yes but secured DNS, I suppose no.

Also, you might want to try an app called YogaDNS.

 

[Templarware]

Has anyone even tried cloudflare’s 1.1.1.2/3?

It's what I use on PC and mobile. Fastest DNS, with some malware blocking.

 

[Ink]

Has anyone even tried cloudflare’s 1.1.1.2/3?

Only 1.1.1.1

• 1.1.1.2 – blocks known malware
• 1.1.1.3 – blocks malware and adult content

Edit:

Problems where filtering may cause censorship concerns:

The Mistake that Caused 1.1.1.3 to Block LGBTQIA+ Sites Today

Today we made a mistake. The mistake caused a number of LGBTQIA+ sites to inadvertently be blocked by the new 1.1.1.1 for Families service. I wanted to walk through what happened, why, and what we've done to fix it.

blog.cloudflare.com

 

[alakazam]

@alakazam Have you seent the offers for adguard desktop lifetime? <20$

AdGuard: Lifetime Subscription | StackSocial

Get Rid of Annoying Ads & Protect Your Device from Malware with This Advanced Ad Blocking App

stacksocial.com

P.s Always read any fineprint they have

Is that site safe to buy from?

 

[valvaris]

Is that site safe to buy from?

Hello @alakazam

to be honest I would prefer to buy from the dev. site directly - Like this you support the Devs. fully.

Buy a license key | AdGuard

Purchase licenses for AdGuard to enjoy ad-free, safe, and simply the best web surfing experience!

adguard.com

stacksocial / stackcommerce are trustworthy sites. They do very special deals with the vendors of the products.

www.neowin.net has its own store with such offers and it is powered by stacksocial / stackcommerce

Best regards
Val.

 

[South Park]

The two I always come back to on DoH are Quad9 for pure malware blocking, and AdGuard DNS if it's also necessary to block ads (such as when a modern ad blocker can't be used).