Battle Which DNS would you choose for Security and Content blocking?

[Tempnexus]

I would like to add a second opinion Content and Malware blocking on top of my Sophos UTM.
Giving that speculation which DNS would you choose?
Norton DNS
Comodo DNS
Open DNS
Fools DNs

 

[Evjl's Rain]

According to my recent tests
Neustar Recursive DNS performed the best in all categories

Norton DNS and Quad9 had their own days. They performed similarly

Norton is slightly better against malwares while Quad9 is a lot better against phishings

DNS threat-blocking comparison: 8 DNS services

 

[Decopi]

@Evjl's Rain ... as usual, very nice comparisons from your side! Thank you!
In my opinion, DNS tests are complex, in the sense that server proximity should be taken into account. Even the best DNS with filters, if the server is not near, internet speed will hurt.
Also considering your tests (and my own tests), DNS filters are not so good. I prefer the faster DNS without filters (CloudFlare).
A better filtering can be done with add-ons/extensions (Netcraft, Malwarebytes etc).
Perhaps the Pi-hole is the ultimate solution. I need to test.

 

[Evjl's Rain]

@Evjl's Rain ... as usual, very nice comparisons from your side! Thank you!
In my opinion, DNS tests are complex, in the sense that server proximity should be taken into account. Even the best DNS with filters, if the server is not near, internet speed will hurt.
Also considering your tests (and my own tests), DNS filters are not so good. I prefer the faster DNS without filters (CloudFlare).
A better filtering can be done with add-ons/extensions (Netcraft, Malwarebytes etc).
Perhaps the Pi-hole is the ultimate solution. I need to test.

exactly, DNS is indeed a complex problem
in my location, Quad9 is extremely slow and Cloudflare is blocked by the ISP

DNS blocking useful for users who don't have a proper web filter

 

[Decopi]

@Evjl's Rain , yes CloudFlare has some issues in several countries. You will find more details by googling it. However, it seems that most of the problems are being solved very quickly. In part due to very proactive CloudFlare' actions. If you let me a suggestion, go to CloudFlare forum, and post your problem... I believe your ISP can't block your DNS (at least in democratic countries)... CloudFlare will contact your ISP.

But there is another nasty problem with CloudFlare. The 1.1.1.1 address was already taken by many modem/routers in order to access their gateway gui. In other words, in your case it might be that the problem is not your ISP, but your modem/router. This problem demands a firmware update. At the CloudFlare forum you will find the list of the modem/routers affected. The good news is that most of them have not problems with 1.0.0.1.

 

[Vasudev]

exactly, DNS is indeed a complex problem
in my location, Quad9 is extremely slow and Cloudflare is blocked by the ISP

DNS blocking useful for users who don't have a proper web filter

Cloudfare was slow for me and Quad9 was tad bit faster than CF and miles ahead of google DNS.
Time to switch ISP.

 

[Digmor Crusher]

I am using cloudfare, seems a bit faster than my ISP's.

 

[KalEl82]

Norton is shutting down their DNS ConnectSafe.

"On November 15, 2018, Norton ConnectSafe service is being retired or discontinued meaning the service will no longer be available or supported. You may continue to use ConnectSafe until November 15, 2018. "

 

[HarborFront]

I'm using keweonDNS and CleanBrowsing DNS. They don't collect your personal data

 

[DeepWeb]

None. I'm the level of tinfoil hat that I have a local resolver running.

Deadwood - a tiny recursive DNS server

 

[71Hemi]

@HarborFront
are you using keweonDNS with windows and if you are how do you set this up in your router as I don't have any servers and I didn't see any primary and secondary DNS addresses

 

[HarborFront]

@HarborFront
are you using keweonDNS with windows and if you are how do you set this up in your router as I don't have any servers and I didn't see any primary and secondary DNS addresses

Yes, I just set it in Windows nothing in the router. Just scroll down in the below link and you can find the Pri and Sec DNS addresses

keweonDNS - now with DoH on INTRA

 

[71Hemi]

@HarborFront
Thanks I found it. Seems CleanBrowsing is much faster. Guess it depends on what location you live in.

 

[thrillskr]

Cisco /OpenDNS Umbrella is also a great option. $20 a year.

 

[Evjl's Rain]

Neustar and cleanbrowsing seem to be the 2 kings of free content-blocking DNS
tested with 23 live links on vxvault with different urls (removed links from the same domain). Norton DNS is dead so it's out of the test
cleanbrowsing 17/23
neustar 18/23
greenteam 1/23
Quad9 5/23
OpenDNS 0/23
adguard 0/23

 

[upnorth]

Neustar seems to be consistent.

DNS threat-blocking comparison: 8 DNS services

I performed a test between well-known DNS-es with multiple links OpenDNS: 208.67.222.222, 208.67.220.220 Norton ConnectSafe: 199.85.126.10, 199.85.127.10 Quad9: 9.9.9.9, 149.112.112.112 SafeDNS: 195.46.39.39, 195.46.39.40 Neustar Free Recursive: 156.154.70.2, 156.154.71.2 Comodo Shield...

malwaretips.com

 

[toto_10]

Which DNS is best for privacy, speed and trustworthy?

My Antivirus will take care of threat protection.

 

[HarborFront]

Which DNS is best for privacy, speed and trustworthy?

My Antivirus will take care of threat protection.

Cleanbrowsing and KeweonDNS don't keep logs

 

[monkeylove]

I use DNS Jumper to do a DNS test and see which server is fastest. Results change, and sometimes I have to use what the ISP has.

 

[AriDfoix]

I use my PiHole+Unbound on a little RaspberryPi3, I have to admit that I log everything, the device is inside my home and I find a Man In the Middle quite hard to happen. Anyway:

I could be vulnerable: DNS Amplification DDoS Attack | Cloudflare :O

 

[Andrew3000]

I use AdGuard DNS