Re: [Trisquel-users] libre (uncensored) DNS Providers ?
"His ISP would still be able to do surveillance, no?" How's that any different from using any other DNS provider? (Answer: It's not.) Even if the connection with the DNS servers were encrypted your ISP, fundamentally, still has to send your traffic around. So they'll still know who you're communicating with even if they don't know what you're saying. "Oh, there's an encrypted connection to this DNS server over here. I wonder what they're looking up." "Oh, right after that they accessed example.com. So it must have been that." Avoiding surveillance is a much bigger task. It can still be done by being self-hosted. But it's a different question. So the other part of the question might be to send those DNS queries (along with websites that are accessed) over TOR or something like that.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
Mabye there is a solution with DNSCrypt ? https://dnscrypt.info/ I saw an intresting french video on it yesterday and it's got MIT Licence. You are no longer in relation with your own internet company for DNS request, but a DNS C server you can choose from a list given by the software. But jxself solution sounds really intresting !
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
Am I misunderstanding something? Being your own DNS provider would only solve 1 of the 2 problems of OP? His ISP would still be able to do surveillance, no?
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
MartinH wrote: "But if I use jxself's method, I doubt very much that the root servers will ever change their ip address !" If they do, it will be trumpeted to the heavens with a major public announcement, as every single DNS provider (commercial or gratis, public or private), will have to change the IP address that their DNS servers uses to query the root servers. "I also agree with the fact that I don't want to be subject to other people deciding what is right or wrong for me to visit on the web, as Jodiendo pointed out." None of the solutions listed here will solve that problem (AFAIK), because DNS is a centralized system with a single-point-of-failure, both technically (the root servers) and, more importantly, organizationally (ICANN). Many people have proposed replacing DNS with a decentralized system for mapping human-readable domain names to IP addresses. But even in a technically decentralized naming system run by a single authority like ICANN, would-be censors can pressure that authority to block or confiscate names. There's another system called GNS (GNU Name System), which is part of the GNUNet project. I don't know much about how either of these work yet, so I don't know if it resolves the organisational single-point-of-failure. https://gnunet.org/gns It's certainly a fascinating problem.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
For Hong Kong is my nearest FREE DNS service from Japan thanks?
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
https://parabola.nu/packages/bind, the Bind server is also available in Parabola, which I can just run Parabola for my upcoming NAS. :)
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
So, I heard about the cloudflare's DNS 1.1.1.1 and 1.0.0.1 can anyone recommend this? They say they do log but anonymizes it... I am currently using custom openninc servers which says that they do not log. I have solved my problem in some website not being able to access, it was the DNSSEC.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
I'm not sure about OpenDNS, used to be independent, now belongs to Cisco, and yes, it does block sites, you will have to use one of their paid services to be uncensored. But like you say, if you have kids it might be better. H, debian.org works fine for me here.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
Thanks jodiendo ! My ip address is dynamic, I've never felt the need to have a static one. Currently still using dns.watch , but opennic sounds interesting, although I'm not sure how reliable it is (uptime).
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
is OpenDNS not trustworthy, some opennic public servers that I use vanishes sometimes but then I just switch to another
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
martinh If you need more help or questions about your DNS issues. Ill do my best to assist you.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
Gentleman I'm in the Philippines, I use the Singapore opennic server for resolution. My isp locally is about 130 milliseconds, depends on the time of the day, but using the DNS for Singapore Opennic server my ping averages about 54 millisecond it is superbly stable and encrypted, only the operators have that way for security purposes. 52.230.17.182 (ns6.sg): 99.92% uptime
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
gslima There is no available FREE openNic dNS service for your country, the closest is in Ecuador. You might want to star pinging their DNS and try them out. Ecuador 1- 185.121.177.177 2- 169.239.202.202 3- 198.251.90.143
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
jxself Yes, Opennic is all about public service and reliability not constraint and fiscal ionization.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
True ! But if I use jxself's method, I doubt very much that the root servers will ever change their ip address ! I also agree with the fact that I don't want to be subject to other people deciding what is right or wrong for me to visit on the web, as Jodiendo pointed out. Finally, why should I use a paid service if there are free ones (which I can donate to) ?
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
everything is a matter of trust.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
The only flaw of this method is that sometimes servers change ip addresses if they change provider, as there is no portability on ip. But usually that's quite noticeable, as you won't have access and have to make the process again. Bu, there's a possibility if your group change ip without your knowledge and someone bribes the provider to maintain the site, to be accessing the wrong site.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
have you heard the man? Maybe he's serious on his job and want extra security. You can query DNS directly with dig or other tool, directly the root servers of most common accessed sites and put it on alias file. So it wouldn't be necessary to install bind except for seeing the addresses initially (diging localhost) and then uninstalling it. You can even config dns to localhost or another invalid dns configured on connection, that's what I meant, if that's the case. I don't know internals of iCAN, but perhaps you're right. But I remind you that neutrality is for adults only, ok? perhaps you need to learn some netiquette, because Caps seams like shouting things... You worry about dns hijacking, but some people worry about wrong advice on opensource forums, like providing wrong DNS numbers on forums (which I haven't checked if that's the case). Some people also worry a lot on DNS poisoning, specially on a Windows system. Windows system queries the dns server and retains info for a long time, so if someone hacks the dns or tricks user to use a different dns, that can't be immediately fixed, and damage is a big one, these could lead to even large zombie networks, if it is an organized attack. But perhaps you're right about controlling freak part, perhaps they should be more flexible and avoid power abuse, if that's the case (I don't know how does it act, but once I red a good description from them).
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
"TO BE A dns provider requires a machine dedicated for that service Why you, should want to host a server for that purpose,?" Maybe if you're running something as a public service but for someone's own personal DNS resolution this is totally not needed. The method I proposed would work perfectly fine for that use case.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
jxself Partially i DISAGREE WITH YOU ON THIS ONE. wHY? TO BE A dns provider requires a machine dedicated for that service, that takes time, skill and security settings to avoid spamming and overload. Why you, should want to host a server for that purpose,? when some one is just doing it already. a user looking for A SOLUTION TO REMEDY their RESOLUTION AND CLARITY FOR THEIR internet. iCAN IS A CONTROLLING FREAK ORGANIZATION. wHEN ALL YOU WANT IS DBS NEUTRALITY,nO COST to you and STOPPING dns hijacking. Opennic dns servers for England are: 1- 104.238.186.189 2-46.101.8.96 3-52.56.195.141
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
agree. But some people only want to have a life. /etc/host.aliases would do the job if your system is impenetrable, for banking, as typing on the browser some sites have extended verification, so they can't have proper access with direct ip number.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
In my country there's also this system of records (Brazil), also these can be routed by the service provider if you have legal issues. Also physical connection can be hijacked from third party, and routed by a regular microtik router. For extra safety, I would recomend fiber optics. The only way to avoid legal issues is to have someone of trust on the dns maintenance. Also in Brazil, they try to extra charge you if you change DNS. They also can try to install rtkit packages on your trisquel system. I would recommend level 3 for DNS, or OpenDNS for protected internet, for iphone the app DNS override. There's a DNS for each circunstance. The only proper DNS that you can use blindly is smartydns, there's a free trial, but it's paid services. I off course worry on ethical of these kind of paid services, but these guys only want to have a life.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
>'ll have to read about it https://wiki.debian.org/Bind9
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
Thanks for the replies ! I wasn't aware about BIND at all. Sounds very interesting, I'll have to read about it - thanks.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
You are your own best DNS provider. It's not even hard: sudo apt install bind9. BIND can query the root name servers for you and you're independent.
Re: [Trisquel-users] libre (uncensored) DNS Providers ?
MartinH SAID: Question though is: Does anyone know of similar ones that are Libre ? (As in using libre software). vISIT THE FOLLOWING WEB SITE SO YOU COULD LEARN MORE ABOUT DNS. https://www.opennic.org/
[Trisquel-users] libre (uncensored) DNS Providers ?
Hi Everyone ! You may be aware that your ISP may block websites and also stores info on you. Here in the UK your ISP has to store all emails, visited websites and a host of other stuff by law for at least 1 year ! I'm avoiding this by using a different DNS Provider/Resolver. Currently that is: https://dns.watch/ Question though is: Does anyone know of similar ones that are Libre ? (As in using libre software). Thanks !!
