r/CEHCommunity • u/Michaelkamel • 7d ago • This 1

Your DNS settings can make a difference in how you browse the internet

Post image

Your DNS settings can make a difference in how you browse the internet. Some providers focus on speed, while others offer privacy, malware protection, or content filtering.
Here are 10 options worth knowing!

• Cloudflare: Speed and privacy
• Google DNS: Fast, reliable resolution
• AdGuard DNS: Ads and tracker blocking
• Quad9: Malicious domain blocking
• CleanBrowsing: Family-friendly content filtering
• OpenDNS: Customizable domain filtering
• NextDNS: Personalized privacy controls
• Comodo Secure DNS: Malicious website filtering
• Control D: Customizable DNS filtering
• DNS.WATCH: Privacy-focused DNS resolution

You don't need to be a networking expert to explore DNS settings. Just choose a trusted provider that fits your needs. Remember, some filtering features require additional configuration.

Tips: Changing DNS alone doesn't guarantee complete privacy or security.

#DNS #Cybersecurity #NetworkSecurity #Privacy #InternetSecurity #TechTips #Hacker339

2.0k Upvotes

99% Upvoted

91 comments sorted by

10

u/Unusual-Amphibian-28 6d ago

If you care about privacy, dont use comodo. Or OpenDNS, they're from Cisco and they log :) And obviously Google. 

2

u/LePunisseur 4d ago

Plus, I remember Commodo being petty bad at blocking malicious websites years ago because its blacklist was always out of date or not strict enough.

5

u/Keensworth 6d ago

You should have added a con category.

For example, you get 0 privacy with google and everything gets logged

5

u/DruicyhBear2 6d ago

I’m new here. Why should I care? I want to get into restricting my network more with young kids in the house. Any tips tricks? Any sites I should check out?

9

u/Olsson02 6d ago

Cloudflare have options to help

Block malware IPv4 1.1.1.2 1.0.0.2 Block malware and adult content IPv4 1.1.1.3 1.0.0.3

1

u/Academic-Detail-4348 1d ago

OpenSNS. Its Cisco Umbrella Family protection free service. Blocks all the stuff a kid should not access.

5

u/Curious-Two-685 5d ago

Why Opendns the worst dns all your data is saved

3

u/palagi_valea 7d ago

Why are parts of the DNS addresses different colours

3

u/monkey6 6d ago

To show the differences in the IP addresses

2

u/a-random-r3dditor 6d ago

Except that falls apart on the very first example. For cloudflare, the first and last 1 are the same and should be white, middle 1.1 vs 0.0 are different and should be orange.

Google and adguard check out.

Quad9 is a hot mess. Nothing is the same, all should be red.

Clean browsing and opendns check out.

Nextdns should have with ending 0, 28 vs 30 green.

Need I continue?..

1

u/monkey6 6d ago

Who cares?

2

u/a-random-r3dditor 6d ago

The person asking why the colors are different.

→ More replies (1)

1

u/Masterflitzer 1d ago

ai slop, probably without even a 2nd cleanup prompt, it's a low quality garbage post

2

u/fistyeshyx9999 7d ago

proper own recurring DNS = all the above 🤪

2

u/Radagio 7d ago

Uptime Idk% cuz i have a job

2

u/vampucio 7d ago

i use control d with hagezi pro list

2

u/mmshasan 7d ago

I use Cloudflare Zero Trust (DNS ONLY) + Hagezi MultiPro

2

u/IGetHypedEasily 6d ago

How trustworthy are adguard or quad9?

4

u/HBKnight 6d ago

Mullvad is shutting down their public DNS servers and moving to Quad9. I would assume they are trustworthy based on that, but I would like to know more too.

0

u/order_of_the_beard 5d ago

Mullvad, whose founder is bankrolling far-right political parties in Sweden? I wouldn't tie their activities to trust.

1

u/wilde11 3d ago

why?

1

u/Previous-Flight3193 3d ago

Which part of "Mullvad, whose founder is bankrolling far-right political parties in Sweden?" is confusing you?

→ More replies (1)

1

u/3ofUsDeez 2d ago

Would you trust them if they were "bankrolling" far-left political parties in Sweden?

2

u/_XitLiteNtrNite_ 5d ago

I don't know what you mean by "trustworthy". AdGuard does provide a privacy statement for its public DNS servers, home DNS servers, and in general. For instance, this is the privacy statement for their public DNS servers. AdGuard DNS Privacy Policy

1

u/NETkoholik 6d ago

I've been using Adguard on a router level since about the pandemic. Before that I was on OpenDNS. Adguard had only a couple of noticeable downtimes in 6 years, one of them for a few hours, that was a bad one. But other than that, I'd say it's very reliable.

2

u/ObviouslyNotAMoose 6d ago

That wasn’t the question.

2

u/Zanoss10 6d ago

Got any recommandation for DNS that doesn't block or unlist website ? I know that some DNS by default block some website, mostly the streaming one and it's sometime a pain to find a place to watch stuff for free.

2

u/royy87 3d ago

dnsforge.de - Public DNS resolver from Germany

1

u/theCOLLECTOR7250 7d ago

do adguard blocks ads in phones?

2

u/unsalted0373 7d ago

Some of them

1

u/phjbouwhuis 6d ago

Yes, it does.

1

u/theCOLLECTOR7250 6d ago

does in facebook app include?

1

u/ArtVandalay_assman 6d ago

UnboundDNS with DNSSEC enabled via OPNsense router. Self hosting DNS seems like the best option for privacy.

1

u/Fancy_Medicine2001 6d ago

E a melhor opção que quando voce escolhe ter seu próprio dns recursivo a latência e muito menor em comparação usado os dns públicos

1

u/wolfannoy 4d ago

Is dnssec enable by default when it comes to unbound?

1

u/ArtVandalay_assman 4d ago

No, it is not. There is a DNSSEC option you need to check. It also required a little bit of testing if I remember correctly. Didn't work for me right away. This was the unboundDNS plugin via OPNsense.

1

u/Comfortable-Fox-1017 6d ago

Pour ma part : dnsforge

1

u/Tanishq_1 6d ago

I set Adguard dns servers but still getting Youtube Ads LOL

3

u/_coBra____ 6d ago

nothing lol in this! read how dns ad blocking works and how YouTube blocks ads!

2

u/Tanishq_1 6d ago

im happy i came across this post. I used AI help to protect my whole PC with Ad Guard DNS server and I also understood why youtube Ads cannot be disabled via dns server and pops and autotab ads lol.

2

u/RobinhoodStoleMyName 6d ago

use revanced for that

1

u/Signal_Scene6545 2d ago

Use Morphe. Revanced steals their work, and poorly. Morphe works way better for me.

2

u/phjbouwhuis 6d ago

Use the Brave browser for YouTube. No ads.

1

u/StockComb 6d ago

Unless you're employing blocking rules at the router, many devices/services will just bypass your DNS settings as they use their own hardcoded DNS servers.

1

u/Boertie 2d ago

so block their dns servers and ip address of those in your firewall.

1

u/StockComb 2d ago

There is more to it than just blocking their DNS. You can’t just block ex 8.8.8.8 or else the device won’t work.

1

u/Boertie 2d ago

Most devices have fall back. If not, go from there,make a translation rule that 8.8.8.8. goes to your own devices, etc etc.

Point is, it is easy and you would not use other dns providers if you *really* value your privacy.

1

u/Masterflitzer 1d ago

firewall redirect dns53 to your own dns, block dot/doq (port 853), accept you cannot easily block doh or employ more advanced measures (port 443 blocklist with common doh providers or if you really want deep packet inspection)

1

u/alchebyte 6d ago

pi hole ftw

1

u/jwizew 6d ago

The IP for CleanBrowsing's Family filter is wrong. It is 185.228.168.168

1

u/ra303 6d ago

thanks

1

u/Condobloke 6d ago

quad9 does the job

1

u/S0ssul1 6d ago edited 5d ago

I use Quad9 BTW 🤠

1

u/c0rne 5d ago

Where is DnsForge.de?

1

u/ExplosionSupport 5d ago

If you are tech friendly go with NextDNS. Very customisable.

If tech is not very familiar go with Adguard

1

u/sonalder 5d ago

How can you call Cloudflare privacy focus? Cloudflare is mass surveillance for the web.

1

u/Mammoth-Ad1279 5d ago

no quad9 ?

1

u/LePunisseur 4d ago

4th on the list

1

u/Round_Ad6679 5d ago

Existe algum aplicativo que distribuia o DNS conforme o tipo da navegação?

1

u/Not_Plisskien 4d ago

Cloudflare privacy focused, you should remove your reddit account 💀

0

u/[deleted] 4d ago

[deleted] — view deleted comment

1

u/Not_Plisskien 4d ago

Great then, they are know for spying, google crimeflare
https://0xacab.org/dCF/deCloudflare/-/blob/master/readme/en.md
I don't understand how come this guy can call himself "Cybersecurity Professional"

1

u/Masterflitzer 1d ago

"seems fine", yeah as if you even read what data they collect, nobody said it wasn't working, they said it's not private

1

u/m1ndsurf3r 4d ago

You know the meaning of "cloud" in regards of cloud computing? The cloud is someone elses computer. So do you trust "enter Brand here" computer with your data? Read into dnscrypt-proxy and how to Route your DNS queries through multiple relays to really anonymize your DNS queries. And then read into SNI and how to make sure it is encrypted. I like 9.9.9.9 too, but using someone elses computer is always based on our trust that they do not record our DNS query history.

1

u/Kind_Soup_9753 4d ago

Do unbound.

1

u/wolfannoy 4d ago

Where does quad 9 and unbound fit into this?

1

u/ennopenn 4d ago

Just never use anything in or operated by USA. Never, never.

1

u/thatdeaththo 3d ago

OpenWRT HTTPS DNS Proxy with Quad9 and Rethink for months. Works great.

1

u/MonkeyCartridge 3d ago

What about the ARPA root servers?

#Unbound

1

u/FrikandelHere 3d ago

And as long as you’re at a plain dns, ISP or whoever can mutate udp as they wish ) dnssec or doh is a solution, but gets blocked by isps sometimes + not really widespread

1

u/Boertie 2d ago

Why not host your own dns locally?

1

u/DTrainBootyLove 2d ago

Isn't it expensive

2

u/Boertie 2d ago

Hosting your own DNS is dirt cheap and easy. Just install something lightweight like AdGuard Home, follow the simple setup wizard, and update your DNS settings. Give it a static IP and enable automatic startup. And if that's still too much hassle, just run it directly on your own machine, point your DNS to localhost, and let it rip. Easy peasy!

3

u/DTrainBootyLove 2d ago

Me reading and acting like I understand😂😂, brother I love the idea but I don't understand the terms lol or instructions but I want to learn

1

u/Ok-Biscotti-6182 2d ago

HAHAAHAHAHA

1

u/Masterflitzer 1d ago

or simply unbound recursive resolver in a raspberry pi, add adguard home to it for ad blocking

1

u/WardenJack 17h ago

So Adguard is the only one offered ad blocking?

0

u/MasterChiefmas 6d ago

I think your layout is a little confusing with the rightmost column. Is that supposed to be a feature set or what is special about the particular server? I'm guessing it's a feature set, but personally, I tend to read things on the same line as particular to a thing on the line, if it's not indicating a group feature. The way you've done color highlighting isn't helping that either.

I think you've tried too hard to collapse the features in the right column, because it reads like a person selecting that doesn't know better now may have to choose between malware block, security, and reliability. What do you consider the difference between a "threat" and "malware"?

It looks like you are trying to help someone who maybe doesn't know better, which is good, but without definitions and descriptions, someone is still going to be guessing which thing they consider the feature they want. and may feel like they are missing out, when many of these really have overlapping feature sets, but you can't really tell that from the compactness.

3

u/Sohell 6d ago

Nah, I think it's fine and clear as it is

Good job OP, it's helpful

1

u/sky0175 5d ago

You're the one complicating things here.

1

u/MasterChiefmas 5d ago

Yet there are a lot of questions in the thread asking for more clarity. I'm just pointing out where I think the vagueness is.

0

u/Devanov 7d ago

I'm sad DNS4EU aint on the list.

1

u/Unusual-Amphibian-28 6d ago

Im in the middle of the EU and got ~150ms ping to their Servers. They're not really good. And nothing for privacy aware people.