Contact your DNS provider

I'm a web developer and I provide support for a few websites. Last night I started getting alerts that one of my sites was down, so I checked, and it appeared to be a clear DNS issue - the hostname wasn't resolving, there was nothing wrong with the application (the cloud services portal showed it was available and healthy and I could hit the site from the private endpoint), but the public domain did not resolve at all ("Ping request could not find host"). I emailed the client to notify them of the issue and told them to contact their DNS provider. We had another issue with the DNS provider a month or so ago, so this isn't the first time their DNS has been flaky, which I mentioned in my email.

The next day my client fowards me an email from their IT department:

IT (to client): As the website is managed by a third party [me], someone should reach out to them to find out if any changes were made. We have not made any record updates.

Me (to client): Hi client, no, we have not made any changes. This is a DNS issue and you need to contact your DNS provider.

Client: Could this an issue with [cloud service platform]?

Me: No. The app in [cloud platform] is fine and I can hit the site with the private application URL. The host name does not resolve if you browse to it or ping it. This is a DNS issue and you need to contact your DNS provider.

Client: What was the issue that happened a month or two ago? Did they change where a record was pointing?

Me: I don't know, because all communications were done directly between yourselves and the DNS provider after we notified you of the issue, and all I was informed of is that there was a problem with external DNS which they resolved.

Client: Is this something you can troubleshoot and resolve? If not, what direction would you like us to provide for your IT team?

Me: No, we do not have the ability to update your DNS records or contact your DNS provider on your behalf [otherwise I would be doing that rather than having this migraine inducing conversation]. As for direction for the IT team... contact your DNS provider.

UPDATE: After half a day of emailing back and forth, they finally set up a meeting with their DNS provider, only after which they informed me that they don't actually need that domain to resolve anymore

πŸ‘︎ 1k
πŸ’¬︎
πŸ‘€︎ u/ravencrowe
πŸ“…︎ Dec 15 2020
🚨︎ report
Cloudflare and Apple design a new privacy-friendly DNS protocol - Oblivious DNS-over-HTTPS (ODoH) techcrunch.com/2020/12/08…
πŸ‘︎ 374
πŸ“°︎ r/pihole
πŸ’¬︎
πŸ‘€︎ u/cmfrazier
πŸ“…︎ Dec 08 2020
🚨︎ report
AdGuard v3.6 for Android: DNS-over-QUIC and ad-free YouTube adguard.com/en/blog/adgua…
πŸ‘︎ 163
πŸ“°︎ r/Android
πŸ’¬︎
πŸ‘€︎ u/meantbent3
πŸ“…︎ Dec 16 2020
🚨︎ report
Utredning vill fΓΆrbjuda spelreklam pΓ₯ dagtid - DN.SE dn.se/ekonomi/utredning-o…
πŸ‘︎ 304
πŸ“°︎ r/sweden
πŸ’¬︎
πŸ‘€︎ u/Babar7
πŸ“…︎ Dec 14 2020
🚨︎ report
My project now supports Raspberry Pi 4 and clouds - automate installation of Wireguard VPN, Pi-hole, and DNS over HTTPS

Hey again! About 1 month ago I posted cloudblock - a guide+code for deploying Wireguard and Pihole in a cloud provider.

After some shipping delays, I got a new pi 4 and now include deploying the same services at home (on a pi). It also works on Pi 3s per user testing.

If you're interested in using pihole while mobile, this may be a great project for you.

Text Guides:

https://github.com/chadgeary/cloudblock

Video Guides:

πŸ‘︎ 230
πŸ“°︎ r/pihole
πŸ’¬︎
πŸ‘€︎ u/mindlessgrenade
πŸ“…︎ Dec 10 2020
🚨︎ report
[IV] I might have gotten the most legitimate shiny hunted Arceus in existence. No action replay, no DNS, no void glitch. I used an actual event file coded by gamefreak, explained in the first two minutes of the video for those curious! Took a little over 12,000 and absolutely worth it! youtu.be/MI1-lF5Mrjk
πŸ‘︎ 639
πŸ“°︎ r/ShinyPokemon
πŸ’¬︎
πŸ‘€︎ u/ShinyCollector98_
πŸ“…︎ Nov 30 2020
🚨︎ report
πŸ‘︎ 3k
πŸ“°︎ r/playboicarti
πŸ’¬︎
πŸ“…︎ Nov 09 2020
🚨︎ report
Force all IoT devices to use PiHole DNS

I'm using UDM with Pihole and I heard that a lot of IoT devices have DNS servers hardcode. Is there any way to create a firewall rule which will force all DNS traffic to go thru PiHole?

πŸ‘︎ 97
πŸ“°︎ r/Ubiquiti
πŸ’¬︎
πŸ“…︎ Dec 13 2020
🚨︎ report
Cloudflare and Apple create ODoH (Oblivious DNS over HTTPS) protocol with reference implementation in Rust

Seems like a really interesting concept, and I'm happy to see that Rust is a first-class citizen in the reference implementation.

https://blog.cloudflare.com/oblivious-dns/

https://github.com/cloudflare/odoh-rs/

https://tools.ietf.org/html/draft-pauly-dprive-oblivious-doh-03

πŸ‘︎ 149
πŸ“°︎ r/rust
πŸ’¬︎
πŸ‘€︎ u/rage_311
πŸ“…︎ Dec 09 2020
🚨︎ report
Google Chrome vs. Mozilla Firefox DNS security twitter.com/lukestateson/…
πŸ‘︎ 127
πŸ“°︎ r/firefox
πŸ’¬︎
πŸ‘€︎ u/coolboar
πŸ“…︎ Dec 05 2020
🚨︎ report
DNS bonus not paid

One month ago I have used DNS promo code and transfered assets but didn't received bonus. Should I wait longer?

πŸ‘︎ 46
πŸ“°︎ r/CelsiusNetwork
πŸ’¬︎
πŸ‘€︎ u/arnesg
πŸ“…︎ Dec 14 2020
🚨︎ report
Can the views from a DN home be TOO distracting? Dillon, CO v.redd.it/v20ja2i937161
πŸ‘︎ 755
πŸ“°︎ r/digitalnomad
πŸ’¬︎
πŸ‘€︎ u/cosinecasino
πŸ“…︎ Nov 24 2020
🚨︎ report
Blocking port 53 to outside DNS Server and force use pfsense DNS server

Hey guys.. I am complete noob with pfsense. I have created a rule trying to block LAN devices from using any other DNS server other then quad9 DNS that I have setup on pfsense as upstream.

Having the rule that I circled enabled is blocking Amazon firecube, I feel something is wrong with my rules setup or order, appreciate if anyone can guide me in correct direction.

I am trying to apply theoretical knowledge to practice but real world scenario is completely different :)

https://preview.redd.it/p4a42el9wz461.png?width=1185&format=png&auto=webp&s=23378b5a8116d4a8fe92ae20a7c4a66753535419

πŸ‘︎ 33
πŸ“°︎ r/PFSENSE
πŸ’¬︎
πŸ‘€︎ u/vamgupta
πŸ“…︎ Dec 13 2020
🚨︎ report
dcompass - A high-performance DNS server with routing/DoT/DoH functionality built-in.

https://github.com/LEXUGE/dcompass

Features:

  • Fast (~2500 qps in wild where upstream perf is about the same)
  • Arbitrary routing logic
  • Fearless hot switch between network environments
  • Freestyle routing rules that are easy to compose and maintain
  • DoH/DoT/UDP supports
  • "Always-on" cache mechanism to ensure DNS quality under severe network environments.
  • Option to send no SNI indication to better counter censorship
  • Option to disable AAAA queries for those having network with incomplete IPv6 supports
  • Written in pure Rust

I wrote this to countermeasure DNS pollution and censorship in some countries while not make it slow.

However, since it supports arbitrary routing scheme and custom matchers/actions (if you build your customized binary by adding new implementations for traits), you can do whatever you want to DNS queries while not lose generosity.

In the future, I plan to support multiple inbounds (UDP/TCP/DoT/DoH) sections to make it a general-purpose DNS server that you can deploy on your VPS.

Hope this is useful for those DNS enthusiasts. If you like, please star. :-)

(MIPS builds unavailable due to lacking support from ring)

πŸ‘︎ 136
πŸ“°︎ r/rust
πŸ’¬︎
πŸ‘€︎ u/HarryYing
πŸ“…︎ Dec 12 2020
🚨︎ report
Oblivious DoH: Cloudflare supports new privacy, security-focused DNS standard zdnet.com/article/oblivio…
πŸ‘︎ 28
πŸ“°︎ r/pihole
πŸ’¬︎
πŸ‘€︎ u/It_Is1-24PM
πŸ“…︎ Dec 14 2020
🚨︎ report
Moderaterna: S tar oss tillbaka till migrationskrisen - DN.SE dn.se/sverige/moderaterna…
πŸ‘︎ 56
πŸ“°︎ r/sweden
πŸ’¬︎
πŸ‘€︎ u/Ratatosk123
πŸ“…︎ Dec 06 2020
🚨︎ report
πŸš€ AdGuard is world's first public DNS-over-QUIC resolver! πŸš€

DNS-over-QUIC, or simply DoQ, is a fairly new protocol that takes into account how the Internet works today, and not 20 years ago when all the commonly used protocols were being developed.

We took it upon ourselves to adopt this protocol and create the first ever real world implementation. You can already find it in our apps for Android and iOS, and also in AdGuard Home.

πŸ‘‰ All you need to know about DoQ, how it works, and why it's better than what you're using right now: https://adguard.com/en/blog/dns-over-quic.html

πŸ‘︎ 58
πŸ“°︎ r/Adguard
πŸ’¬︎
πŸ‘€︎ u/fclmfan
πŸ“…︎ Dec 16 2020
🚨︎ report
Use PiHole only as dns server not as DHCP.

Hey,

I am using pihole as DCHP server and everything works OK until a problem occurs (i.e power outage) and then all my home network is dead and I have to unplug piHole, hard reset router to get but DHCP to recover.

In this case I am thinking to keep my router as DCHP (using reserved IPs for some devices at home) but use the pihole for the DNS part (just to resolve specific IP to Hostnames,

Important INFO: I cant configure DNS IP in my router.

Do you think that can work like that? Do you have any other ideas?

πŸ‘︎ 46
πŸ“°︎ r/pihole
πŸ’¬︎
πŸ‘€︎ u/vazma
πŸ“…︎ Dec 04 2020
🚨︎ report
DN'ing in Split, Croatia v.redd.it/dh28th7pne061
πŸ‘︎ 639
πŸ“°︎ r/digitalnomad
πŸ’¬︎
πŸ‘€︎ u/TherapodCBD
πŸ“…︎ Nov 20 2020
🚨︎ report
Moderaterna: S tar oss tillbaka till migrationskrisen - DN.SE dn.se/sverige/moderaterna…
πŸ‘︎ 98
πŸ“°︎ r/svenskpolitik
πŸ’¬︎
πŸ‘€︎ u/Kvmjohan
πŸ“…︎ Dec 05 2020
🚨︎ report
Apple and Cloudflare's Oblivious DNS addresses a gap in the privacy protections of the internet's routing infrastructure businessinsider.com/apple…
πŸ‘︎ 174
πŸ“°︎ r/cybersecurity
πŸ’¬︎
πŸ‘€︎ u/f474m0r64n4
πŸ“…︎ Dec 12 2020
🚨︎ report
It's always DNS!!!! Actually, this time it was DNS, but on the client.

I have two piholes on the network and I hand out both IP addresses for DNS1 and DNS2. As we know, not all clients use DNS servers in order and, today, I found out that the myq garage door gateway only uses 1 DNS server or failed to switch to the second DNS server it knew about, read below.

I noticed that my myq app reported the garage doors as offline for the past 3 days, I don't use the app daily, so I didn't notice (it would be nice to receive an offline email, not sure if that is a setting in the app). This device is on an isolated network, same as my nest, first thing I did was check my nest app and the nest was reporting as online, that tells me the router, firewall, vlans, etc seem to be ok. Next thing I did was power cycle the myq gateway/hub (the doors wireless connect to the hub and the hub is hard wired into my network). I power cycled the device and it didn't come back online. Then I plugged my laptop into the same port that the hub was plugged into (obviously unplugging the hub, first). I wanted to confirm that the port was good even though there were link lights. This rules out DNS (I thought) and DHCP since my laptop could ping google.com and I confirmed that the IP address was the correct address for the port that my laptop was plugged into.

I haven't made any changes in months, had I been testing with firewall rules, vlans, etc I would have gone back to see if I broke something. Then I remembered pi-holes...I thought, it is possible that the myq domain has been added to a block list, that's when I discovered that my primary pihole, the one that is listed first in the DNS IPs handed out had 'lost API connection' or something like that. I could still navigate in the web GUI, but no stats. However, no other device on the network, that I'm aware of, had a DNS problem. There are plenty of phones, tablets, laptops and desktops along with other devices that rely on the internet/DNS.

Both of my piholes run as VMs, I rebooted the problem pihole box and checked my app, the doors are now online.

Take a look at this image...after the fact I decided to click on 30 days (7 would have worked since the app said 3 days offline, but I went to 30...)

Right where DNS1 failed is when the doors appeared as offline (3 days ago). However, the myq hub failed to use the second server, not sure why that is...you can see other devices started using the second pihole based on the images.

This also tells me that the second device isn't really used until the first

... keep reading on reddit ➑

πŸ‘︎ 94
πŸ“°︎ r/pihole
πŸ’¬︎
πŸ‘€︎ u/tdhuck
πŸ“…︎ Dec 09 2020
🚨︎ report
Il DNS hijacking da parte dei provider sarebbe legale in Italia?

Il commento di un utente irlandese che dice che il suo provider sta effettuando DNS hijacking mi ha fatto venire il dubbio: in Italia sarebbe legale una cosa simile?

Non sto parlando del blocco di determinati siti a livello DNS a seguito di un ordine della magistratura, bensì del fatto che il proprio provider possa a tutti gli effetti intercettare una query DNS verso uno specifico server terzo (ad esempio un server root, un server TLD o anche un server autoritativo) e rispondere lui con quello che vuole, che sia una risposta reale o una pagina pubblicitaria.

Ho provato a fare una rapida ricerca ma non mi sembra di trovare qualcosa al riguardo (o sto sbagliando io a cercare).

Sono apprezzati link a fonti, piΓΉ sono autorevoli meglio Γ¨.

πŸ‘︎ 60
πŸ“°︎ r/ItalyInformatica
πŸ’¬︎
πŸ‘€︎ u/JungianWarlock
πŸ“…︎ Nov 30 2020
🚨︎ report
SΓ₯g denna rubrik i DN fΓΆr ett tag sedan. Borde jag kΓ€nna mig dΓ₯lig fΓΆr att jag skrattade?
πŸ‘︎ 319
πŸ“°︎ r/sweden
πŸ’¬︎
πŸ‘€︎ u/Icy-Wall-4512
πŸ“…︎ Dec 08 2020
🚨︎ report
DNS bonus still not paid, anyone else?

(deposit was made on Nov 14)

πŸ‘︎ 14
πŸ“°︎ r/CelsiusNetwork
πŸ’¬︎
πŸ‘€︎ u/MrNotSoRight
πŸ“…︎ Dec 16 2020
🚨︎ report
Why does Network Solutions take so long to push out DNS updates?

Most of our client domains use CloudFlare, which pushes out DNS updates immediately and can be verified at whatsmydns.net within seconds.

However, we still have a handful of clients at Network Solutions because that's where they set up their domains decades ago. For those clients, we have to take special effort to make all DNS updates a day before we need them because they take so long to push out.

Case in point: Earlier today I made a SRV record update for one of our clients, and here I am eight hours later still waiting.

Yes, I know that they provide the disclaimer that DNS updates can take up to 24 hours to be seen, but THIS ISN'T THE 1990s!!!

/rant over

EDIT 1: It is now over 18 hours since the DNS record was updated at Network Solutions, and IT STILL HASN'T PROPAGATED...

πŸ‘︎ 172
πŸ“°︎ r/sysadmin
πŸ’¬︎
πŸ“…︎ Nov 09 2020
🚨︎ report
UDM and DNS Redirects to dual pihole config

I have a dual pihole config and I want to use BoostChickens dns redirect script to point to my two pihole's.

can I set the script to reference the WAN port on the UDM and have my pi-hole DNS addresses configured there?

https://github.com/boostchicken/udm-utilities

πŸ‘︎ 45
πŸ“°︎ r/Ubiquiti
πŸ’¬︎
πŸ“…︎ Dec 05 2020
🚨︎ report
Karolinska stΓ€ller in barnoperationer nΓ€r personal flyttas - DN.SE dn.se/sthlm/karolinska-st…
πŸ‘︎ 57
πŸ“°︎ r/svenskpolitik
πŸ’¬︎
πŸ‘€︎ u/SPiiiRAL
πŸ“…︎ Dec 12 2020
🚨︎ report
Finally took the leap. DN in Cancun
πŸ‘︎ 424
πŸ“°︎ r/digitalnomad
πŸ’¬︎
πŸ‘€︎ u/i_am_nk
πŸ“…︎ Nov 16 2020
🚨︎ report
[How To] Run Wireguard over port 443 in an unprivileged LXC container behind a nginx reverse proxy with DNS security

I spent too much time today getting this to work and piecing together various tutorials. Links at the bottom. I'm not going to run through all of this in meticulous detail, but I do want to touch on the areas where I ran into trouble and had to piece together multiple instruction sets. This assumes you already know the basics of nginx. If you need a tutorial on installing and setting it up, there are plenty of good ones online.

The main reasons I'm posting this:

  • I've seen a lot of comments in a lot of forums from people who can't get this working in an unprivileged container, and most tutorials don't include instructions for how to get it to work. You can also do this for other hardware you need to pass into an unprivileged container.
  • I read a few articles that said you couldn't proxy Wireguard through nginx. That's not correct, but the instructions for setting up a TCP or UDP stream module in nginx usually aren't in Wireguard articles. I use nginx (or you could use Apache) as a reverse proxy for all of my home network's applications so there's one central entry point, making SSL certificate management easier for the various domains I use and map to this server.
  • The Proxmox-specific articles don't typically touch on DNS privacy.
  • Whether your container has systemd-resolved or not makes a big difference in getting Unbound working, but the articles I read on it didn't mention this, so I had to find answers elsewhere.

This is not intended to be a tutorial for how to reliably tunnel through firewalls which actively restrict VPN services. This setup will likely succeed more often with more firewalls than if you were using standard ports, but that's a side benefit.

Normal SSL TCP traffic over 443 will continue to work properly.

Proxmox Host:

Add buster backports repository for access to Wireguard, and get any updates or upgrades for your system.

echo "deb http://deb.debian.org/debian buster-backports main" >> /etc/apt/sources.list.d/backports.conf
apt update

Install the latest kernel headers and necessary Wireguard packages.

apt install pve-headers
apt install -t buster-backports wireguard-dkms
modprobe wireguard
echo "wireguard" >> /etc/modules-load.d/modules.conf

Depending on the timing of the headers installation, you may need to rebuild and confirm installation.

dkms autoinstall
modprobe wireguard

The container needs access to the tun device from the host. Add these 2 lines to your containe

... keep reading on reddit ➑

πŸ‘︎ 60
πŸ“°︎ r/Proxmox
πŸ’¬︎
πŸ‘€︎ u/spushing
πŸ“…︎ Dec 11 2020
🚨︎ report
Microsoft for Domains and DNS

For years we've used DYN for client DNS and a UK based registrar for domains. Oracle bought DYN and now pretty much need to move most things.

In truth I think 90% of our clients don't need anything too special - just reliable! All our clients are on 365. Within 365, maybe always been there, you can do domain and DNS - it seems to use Wild West Domains (owned by GoDaddy) for the registrar and Microsoft for DNS itself. Although Wild West Domains do it - it's all Microsoft billed and control panel looks fine for DNS etc. (TTL etc).

I'd never have gone this route years ago but can see an appeal now in having it all inside 1 tenant for that 1 client.

I was wondering if anyone uses this?

We're a Tier 2 CSP and I've not checked what CSP support is.

πŸ‘︎ 15
πŸ“°︎ r/msp
πŸ’¬︎
πŸ‘€︎ u/vacendakuk
πŸ“…︎ Dec 11 2020
🚨︎ report
Erbjudanden i DN 2 sept 1995. Laptop med 4MB RAM och 10.4” skΓ€rm fΓΆr bara 20 lax. Millennials - ni vet inte vad ni missat!
πŸ‘︎ 125
πŸ“°︎ r/sweden
πŸ’¬︎
πŸ‘€︎ u/ondulation
πŸ“…︎ Nov 29 2020
🚨︎ report
My little Pihole and DNS server still going strong 3 years on.
πŸ‘︎ 3k
πŸ“°︎ r/raspberry_pi
πŸ’¬︎
πŸ‘€︎ u/super_nicktendo22
πŸ“…︎ Oct 05 2020
🚨︎ report
Norge rasar pΓ₯ FN:s utvecklingslista - DN.SE dn.se/varlden/norge-rasar…
πŸ‘︎ 33
πŸ“°︎ r/sweden
πŸ’¬︎
πŸ‘€︎ u/90hagr15
πŸ“…︎ Dec 15 2020
🚨︎ report
It was DNS!

I literally just had this one happen. Never thought I'd actually see it, but here we are.

A customer came in complaining he couldn't connect to the corporate VPN at home. Typically when initiating the connection from the software, the user gets prompted for the credentials. This individual was not getting that prompt.

I take a look and first notice the laptop is not connected to any internet connection. I get it connected to the corporate wifi, attempt the VPN connection, and get the prompt. But something tells me to try another way...make sure. So I then connect the laptop to one of our hotspots that we use to test connectivity to the outside world only. Once that's connected, then I try to connect to the VPN. This time I do not receive the prompt for credentials.

I look at the VPN connection details while it's attempting and it just says "Host Not Found." I open up a web browser and try hitting the URL that we can use for the VPN. The page times out. I try hitting that URL from my phone while it's on mobile data and it gets there.

Back on the laptop, I go check the IP configuration. And there it is...he's got the addresses of the company's DNS servers hard-coded in there. I set the option back to "Automatically Obtain" for DNS and voila, he now gets prompted for the VPN credentials when trying to connect.

TL;DR - It was DNS.

UPDATE: The guy came back in today with the exact same problem. I checked the DNS settings and lo and behold, the DNS server addresses were populated again. This was a true WTF moment. I did a little more troubleshooting and did a few reboots to try to replicate the behavior and determine how the addresses were getting set in the configuration.

I noticed he had the Cisco software installed for his IP phone that his group uses. I know this to be a problem for other things that are unrelated to the DNS issue. Things like when disconnecting from the VPN, it won't reconnect without rebooting the PC. But this software also doesn't allow for the reboot or shutdown...Windows will just go to the "Restarting" or "Shutting Down" screen and sit there indefinitely until a hard shutdown is enforced. I uninstalled the driver associated with the Cisco software that causes that behavior, rebooted, and tried again. On this and subsequent attempts, the DNS servers were no longer getting populated. That setting was staying set to "Automatically obtain" and was then allowing the VPN prompt to appear.

πŸ‘︎ 1k
πŸ’¬︎
πŸ‘€︎ u/fshannon3
πŸ“…︎ Oct 19 2020
🚨︎ report
Does Verizon Fios run a DNS Transparent Proxy?

I found the following interesting:

I'm running Pfsense with pfBlockerNG-devel and I discovered that my DNS (which is set to 1.1.1.2/1.0.0.2 in System|General) was leaking. https://www.dnsleaktest.com showed Verizon rather than Cloudflare.

I also found another test here: https://www.smartydns.com/support/isp-doing-transparent-dns-proxy/

They recommend testing this way:

% nslookup ip.smartydns.com
Server:		192.168.1.1
Address:	192.168.1.1#53

Non-authoritative answer:
Name:	ip.smartydns.com
Address: 167.99.45.163

They say "If you see the result as β€œ136.243.3.103” then you have no problems using our DNS servers." Otherwise, test again this way this:

% nslookup ip.smartydns.com 87.117.205.40
Server:		87.117.205.40
Address:	87.117.205.40#53

Non-authoritative answer:
Name:	ip.smartydns.com
Address: 167.99.45.163

"If you see in your result at β€œAddress:” (2) an IP address other than β€œ136.243.3.103” then your Internet Service Provider is doing Transparent DNS Proxy."

Can someone please explain how this actually works? Is this a legitimate test?

In any case, I figured how to fix the DNS leak. I switched on "Enable Forwarding Mode" and "Use SSL/TLS for outgoing DNS Queries to Forwarding Servers" in "Services | DNS Resolver | General Settings | DNS Query Forwarding". https://www.dnsleaktest.com now shows Cloudflare.

A couple more questions though:

  • Do I need "Use SSL/TLS for outgoing DNS Queries to Forwarding Servers"? I tested without it and also got Cloudflare as a result. Is this to hide the request from the ISP? Can the ISP act as a transparent DNS proxy when I use SSL/TLS?

  • Interestingly, the second test (ip.smartydns.com) test is still behaving the exact same way. Does this mean my ISP (Verizon FIOS) is doing Transparent DNS Proxy?

Finally, I find this somewhat related article fascinating: https://www.techhelpguides.com/2017/06/12/ultimate-pfsense-openvpn-guide/

πŸ‘︎ 19
πŸ“°︎ r/PFSENSE
πŸ’¬︎
πŸ‘€︎ u/peterqu
πŸ“…︎ Dec 08 2020
🚨︎ report
StΓ€ng grΓ€nsen mot Danmark fΓΆr att minska smittan - DN dn.se/insandare/stang-gra…
πŸ‘︎ 123
πŸ“°︎ r/SWARJE
πŸ’¬︎
πŸ‘€︎ u/Martin81
πŸ“…︎ Dec 10 2020
🚨︎ report
Peter Wolodarski: Sverige betalar ett hΓΆgt pris fΓΆr grupptΓ€nkande och hybris - DN.SE dn.se/ledare/peter-woloda…
πŸ‘︎ 103
πŸ“°︎ r/svenskpolitik
πŸ’¬︎
πŸ‘€︎ u/kladdkakamedglass
πŸ“…︎ Nov 29 2020
🚨︎ report
Cloudflare VS Telekom VS Google DNS Server

Reddit ist langsam bei machen Anbietern, Telekom vor allem (oder mit den meisten Kunden).

S. zb den U.g. Post.

Fast alle LΓΆsungen schlagen vor, DNS Server auf entweder Google oder Cloudflare.

Was fΓΌr Erfahrungen oder Meinungen habt ihr dazu?

https://www.reddit.com/r/de_EDV/comments/k2tvyw/warum_laden_so_viele_videos_hier_so_schlecht/?utm_medium=android_app&utm_source=share

πŸ‘︎ 25
πŸ“°︎ r/de_EDV
πŸ’¬︎
πŸ‘€︎ u/letsloosemoretime
πŸ“…︎ Dec 02 2020
🚨︎ report
Saiu horrΓ­vel mas dns vou postar de qualquer forma
πŸ‘︎ 381
πŸ“°︎ r/nhaa
πŸ’¬︎
πŸ‘€︎ u/Etlot
πŸ“…︎ Dec 11 2020
🚨︎ report
DNS hosting

After some outages and issues with our current DNS hosting provider I'm looking to move them to another service. Just wondering what you guys can recommend for a good company with decent service and a good uptime history.

Thanks for your suggestions guys!

πŸ‘︎ 10
πŸ“°︎ r/sysadmin
πŸ’¬︎
πŸ‘€︎ u/__rj45__
πŸ“…︎ Dec 11 2020
🚨︎ report
DNS over HTTPS (DoH) - critical issue - do not use in production environment

So beginning rOS 6.47 MikroTik introduced DNS resolution over HTTPS. This is important if you are privacy conscious.

There are some instructions on the web how to do it, like here: MikroTik Tutorial: How to enable DNS over HTTPS (DoH) - jcutrer.com

BUT:

  1. after some time MT stops resolving names - looking at logs you can see that you reached Max Concurrent Queries or Max Concurrent TCP sessions. Increasing numbers will alleviate problems for few moments (depending on your network size) and may still clog it out.
  2. assuming that you increased numbers as per no. 1 next problem is cache. Cache keeps growing and sooner than later you may want to increase size but it will growing out of control

and this is where issue becomes critical

even if you will go into cache and flush it, or change Max TTL to low number to manage size it will not work. FLUSH DOES NOT WORK. Cache will grow and grow and grow. The only way to reduce it is to REBOOT router itself.

MikroTik knows about it, it is supposedly fixed in rOS 6.48 testing channel

Be aware and stay safe

πŸ‘︎ 21
πŸ“°︎ r/mikrotik
πŸ’¬︎
πŸ‘€︎ u/Pawlisko80
πŸ“…︎ Dec 14 2020
🚨︎ report
”Regeringens styrning har inte fungerat i coronakrisen” - DN.SE dn.se/debatt/regeringens-…
πŸ‘︎ 68
πŸ“°︎ r/svenskpolitik
πŸ’¬︎
πŸ‘€︎ u/Kvmjohan
πŸ“…︎ Dec 01 2020
🚨︎ report
If you have problems with video loading speed try cloudflare dns the videos load instantly since I installed it
πŸ‘︎ 59
πŸ“°︎ r/BoostForReddit
πŸ’¬︎
πŸ‘€︎ u/TRIS74N
πŸ“…︎ Dec 06 2020
🚨︎ report
Cross-site Scripting via WHOIS and DNS Records medium.com/tenable-techbl…
πŸ‘︎ 258
πŸ“°︎ r/netsec
πŸ’¬︎
πŸ‘€︎ u/dinobyt3s
πŸ“…︎ Nov 24 2020
🚨︎ report
AdGuard For iOS now supports DNS over QUIC

Adguard Pro and Adguard Premium for ios now supports DOQ - DNS over QUIC.

At the moment only adGuard DNS supports this.

Though it is still experimental, it’s been pretty stable. Been doing the beta testing and finally they released it!

https://adguard.com/en/blog/adguard-4-0-4-for-ios.html

πŸ‘︎ 14
πŸ“°︎ r/Adguard
πŸ’¬︎
πŸ‘€︎ u/zznosar
πŸ“…︎ Dec 15 2020
🚨︎ report
FT: pictured below. LF: any Darkrai (Go, dns exploit, self caught, event, etc.) reddit.com/gallery/kebwa0
πŸ‘︎ 2
πŸ“°︎ r/PokemonHome
πŸ’¬︎
πŸ‘€︎ u/Background_Data
πŸ“…︎ Dec 16 2020
🚨︎ report
German Authorities Want to Implement DNS Blocks Against Major Porn Sites vice.com/en/article/bvx8v…
πŸ‘︎ 255
πŸ’¬︎
πŸ‘€︎ u/soktrnji
πŸ“…︎ Oct 27 2020
🚨︎ report
Thank you for the community feedback - my pihole cloud deployment now supports 4 cloud options (aws, azure, google, oracle), includes Wireguard and DNS over HTTPS + step by step video

A week or so ago I posted about cloudblock - a project to automate deployment of Wireguard + Pihole + DNS over HTTPS in the cloud.

I received plenty of feedback ( especially from r/pihole - special shout out to u/mark118 )

The project now includes step-by-step videos and text guides for customizing and deploying in 4 different cloud providers - not to mention - google and oracle have an always-free tier that this can run within!

Feedback/questions are appreciated.

Project on github: https://github.com/chadgeary/cloudblock

Videos:

  • Getting started (watch this first) https://youtu.be/9VFexErMlvo
  • AWS https://youtu.be/zNElF0iS2bM
  • Azure https://youtu.be/eZKptCWW-RI
  • Google cloud (gcp) https://youtu.be/EZyn6dEdqe0
  • Oracle cloud (oci) https://youtu.be/bVoO6XRNhJs
πŸ‘︎ 430
πŸ“°︎ r/pihole
πŸ’¬︎
πŸ‘€︎ u/mindlessgrenade
πŸ“…︎ Nov 02 2020
🚨︎ report
Fortinet DNS down??

Is anyone having issues using fortigate's DNS servers right now?? could be just me. I can't get to https://www.fortiguard.com/

anyone else?!?!?! one of our networks relies on this DNS, and it's not working!

πŸ‘︎ 12
πŸ“°︎ r/fortinet
πŸ’¬︎
πŸ‘€︎ u/jordanl171
πŸ“…︎ Dec 11 2020
🚨︎ report

Please note that this site uses cookies to personalise content and adverts, to provide social media features, and to analyse web traffic. Click here for more information.