DNS Services - Can We Get A List Going And Feedback?

[DasFox]

I did not notice any DNS lists on Wilders so I thought this would be a good idea to start a list here and discuss the matter of DNS for your computer.

So, why use a DNS service instead of the DNS from your ISP? The simple reply is that most of the DNS services out there provide better protection on the internet in various forms...

So if you haven't jumped on the DNS wagon, maybe it's time you start!


Comodo Secure DNS
http://www.comodo.com/secure-dns/

DNS Advantage
http://www.dnsadvantage.com/

Google DNS
http://code.google.com/speed/public-dns/

OpenDNS
http://www.opendns.com/

Here's something really nice for all you moms and dads out there about OpenDNS;

http://www.pcworld.com/article/16541...ternative.html

You can also test your DNS at these sites;

GRC
https://www.grc.com/dns/dns.htm

DNS-OARC
https://www.dns-oarc.net/oarc/services/dnsentropy

[Hungry Man]

I've recently switched from Google to OpenDNS. I've found no difference in terms of speed (nor do I expect to with any service) but I'm otherwise entirely happy.

[CasperFace]

These are among the best in terms of speed and reliability, IMO.
I put a thumbs-up next to the uncensored/unfiltered ones that don't engage in domain hijacking/redirection:

DNS Advantage
Preferred: 156.154.70.1
Alternate: 156.154.71.1
Preferred: 156.154.70.10 (opt-out)
Alternate: 156.154.71.10 (opt-out)

Comodo Secure DNS
Preferred: 156.154.70.22 (English)
Alternate: 156.154.71.22 (English)
Preferred: 156.154.70.25 (non-English)
Alternate: 156.154.71.25 (non-English)
Preferred: 8.26.56.26 (content filtering beta)
Alternate: 8.20.247.20 (content filtering beta)

OpenDNS
Preferred: 208.67.222.222
Alternate: 208.67.220.220
Alternate: 208.67.222.220 (3rd & 4th additional servers)
Alternate: 208.67.220.222 (3rd & 4th additional servers)
Preferred: 208.67.222.123 (FamilyShield filter)
Alternate: 208.67.220.123 (FamilyShield filter)

Google Public DNS
Preferred: 8.8.8.8
Alternate: 8.8.4.4

Level 3 Communications (no official site for DNS services)
Preferred: 4.2.2.1 (GTEI)
Alternate: 4.2.2.2 (GTEI)
Alternate: 4.2.2.3 (GTEI)
Preferred: 4.2.2.4 (Genuity)
Alternate: 4.2.2.5 (Genuity)
Alternate: 4.2.2.6 (Genuity)

Norton DNS
Preferred: 198.153.192.1 (legacy)
Alternate: 198.153.194.1 (legacy)
Preferred: 198.153.192.40 (security filter)
Alternate: 198.153.194.40 (security filter)
Preferred: 198.153.192.50 (security + pornography filter)
Alternate: 198.153.194.50 (security + pornography filter)
Preferred: 198.153.192.60 (security + pornography + non-family friendly filter)
Alternate: 198.153.194.60 (security + pornography + non-family friendly filter)

NTT America (no official site for DNS services)
Preferred: 129.250.35.250
Alternate: 129.250.35.251

Edit: Added links + further clarifications, where applicable.

[Heimdall]

DynDNS

resolver1.dyndnsinternetguide.com – 216.146.35.35
resolver2.dyndnsinternetguide.com – 216.146.36.36

Sendori uses the same network

namebench is good for testing.

[DasFox]

CasperFace please make links for people to be able to see the sites and read...


THANKS

[J_L]

Originally Posted by DasFox

DNS-OARC
https://www.dns-oarc.net/oarc/services/dnsentropy

Never heard of that, thanks. There's also this: http://www.klake.org/~jt/dnshell/

Plus, there's this as always: http://www.techsupportalert.com/cont....htm?page=0,12

[marktor]

One of my favorites is Open NIC many of the servers have logging disabled:
http://www.opennicproject.org/publictier2servers

Also here is another great list of DNS providers:
https://anonymous-proxy-servers.net/...ee_DNS_servers

[Searching_ _ _]

Test results from GRC on 4 popular DNS addresses after setting my computers static entries.
1. I cleared the browser cache before each test.
2. Disconnect internet access, change static DNS entries then reconnect.
3. Navigate to www.grc.com/dns/dns.htm and perform the test.

Setting DNS servers to 4.2.2.2 and 4.2.2.3 - Level3
Returned 3 results:
192.221.166.* Bad
8.0.28.* Bad
8.0.29.* Bad

Setting DNS servers to 74.118.212.1 and 74.118.212.2 - Sunbelt
Returned 3 results:
64.128.133.131 Very Bad
72.64.146.68 Excellent
66.129.97.254 Excellent

Setting DNS servers to 198.153.192.1 and 198.153.194.1 - Symantec
Returned 3 results:
204.13.248.182 Excellent
216.146.38.152 Excellent
216.146.38.157 Excellent

Setting DNS servers to 156.154.70.1 and 156.154.71.1 - UltraDNS
Returned 2 results:
156.154.63.103 Excellent
204.74.103.103 Excellent

[awkwardpenguin]

Haven't seen these mentioned yet.

Censurfridns (Denmark)
89.233.43.71 | 89.104.194.142
2002:d596:2a92:1:71:53 | 2002:5968:c28e::53
http://blog.censurfridns.dk/


Easy DNS (Toronto, Canada)
64.68.200.200 | 205.210.42.205
http://dnsresolvers.com/


to OpenNIC and German/Swiss Privacy Foundation DNS.

[DasFox]

Ahh this is really nice from everyone, some really great input, THANKS guys!

Comodo's latest Secure DNS;

8.26.56.26
8.20.247.20

Is only getting a Moderate at GRC, so that's not good...

Also OpenDNS keeps giving me 'Invalid Certificate' popup windows all the time, so I'm not enjoying that...

awkwardpenguin where is this German/Swiss Privacy Foundation DNS you mention?

For OpenNIC, the UK as example, I only see 1 IP, so what do we use for the secondary?

[chrismani]

Is there any use if I add 6 DNS servers on my pc?

I added first OpenDNS
then Google DNS
then DNS advantage

[PaulyDefran]

Great thread, especially the non-US servers.

PD

[awkwardpenguin]

Originally Posted by DasFox

awkwardpenguin where is this German/Swiss Privacy Foundation DNS you mention?

For OpenNIC, the UK as example, I only see 1 IP, so what do we use for the secondary?

Here you go. They host tor nodes too. I thought that was pretty cool.
http://server.privacyfoundation.de/index.html

For NIC, why not use a secondary in France, Germany or the Danish Censurfridns? When I'm in the US, I usually go through a router that calls DNS IPs far enough away that you could easily fit a western European country in the space. Performance is fine.

[DasFox]

Ok we're getting a great list here, but now we need some information on these companies if anyone has anything to share about them, their history, who they are, why should they be trusted, etc...

A lot of the DNS services being listed here are just being run by individuals and small companies, so it's good to know who we are dealing with, after all what is the negative side to using a malicious server...

[addi6584]

http://unbound.net/

all you need

[Nebulus]

Originally Posted by addi6584

http://unbound.net/

all you need

I second that

[mirimir]

Originally Posted by Nebulus

I second that

After reading unbound's manpage, I'm still not exactly clear how it goes about DNS resolution. Where can I find a good explanation? I didn't find a Wikipedia page, but maybe I didn't look hard enough.

Basically, does unbound build a local DNS server, drawing on the closest sources? Does it draw on primary nameservers, walking the chain from top-level domain to desired host? Is it more (or less) resistant to DNS poisoning (whether by freelance or government criminals)?

[funkydude]

FYI DasFox, lists are generally maintained and updated in the first post. It's not much of a list if you need to browse every post and collect them yourself. It's also a lot easier to reference a post rather than an entire thread.

[mirimir]

That would be cool. But don't posts become uneditable after five days? Or can that be waived for threads like this one?

[Nebulus]

Originally Posted by mirimir

After reading unbound's manpage, I'm still not exactly clear how it goes about DNS resolution. Where can I find a good explanation? I didn't find a Wikipedia page, but maybe I didn't look hard enough.

Basically, does unbound build a local DNS server, drawing on the closest sources? Does it draw on primary nameservers, walking the chain from top-level domain to desired host? Is it more (or less) resistant to DNS poisoning (whether by freelance or government criminals)?

It can do whatever you want it to do. But basically it is a local DNS server. You can tell it to resolve the domain name by asking root servers and then authoritative servers. Also, if you want you can tell it to use your ISP DNS or whatever DNS service you want.
For instance I use it to act as a real DNS server (first variant), because I don't feel the need to use an external service (like OpenDNS), and the provider's DNS server is very unreliable.

[DasFox]

Originally Posted by addi6584

http://unbound.net/

all you need

Actually this is going beyond the bounds of this post, yes, no?

My bad when I said in the post DNS services, I just meant using the free DNS that you can find online to place in the network adapters was all, like OpenDNS, etc...

So why do we want to use a validating, recursive, and caching DNS resolver? I don't really get the point of it in the context of this post, I'd personally be more inclined to using DNSCrypt, as it relates to the point of the post...

Originally Posted by funkydude

FYI DasFox, lists are generally maintained and updated in the first post. It's not much of a list if you need to browse every post and collect them yourself. It's also a lot easier to reference a post rather than an entire thread.

Sorry I don't know what list you are referring to and this first post?


THANKS

[Nebulus]

Originally Posted by DasFox

They have an invalid site cert and we should be trusting their DNS? LOL...

Umm, what is the connection between one and the other? And what site cert are you talking about? Their site is simple HTTP (not secure).

[DasFox]

Originally Posted by Nebulus

Umm, what is the connection between one and the other? And what site cert are you talking about? Their site is simple HTTP (not secure).

My bad something I was using was forcing HTTPS and I wasn't paying attention, post changed...


THANKS

[DasFox]

I wish we could get some information back on all these providers as well as DNSCrypt, Unbound, DNSSEC, etc., etc....

So we can get some dns education going on...

We have a nice list, but...

THANKS

[addi6584]

Originally Posted by mirimir

Basically, does unbound build a local DNS server, drawing on the closest sources? Does it draw on primary nameservers, walking the chain from top-level domain to desired host? Is it more (or less) resistant to DNS poisoning (whether by freelance or government criminals)?

depends on what you want to do
https://calomel.org/unbound_dns.html