DNS Services - Can We Get A List Going And Feedback?

Discussion in 'privacy technology' started by DasFox, Feb 6, 2012.

Thread Status:
Not open for further replies.
  1. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    I did not notice any DNS lists on Wilders so I thought this would be a good idea to start a list here and discuss the matter of DNS for your computer.

    So, why use a DNS service instead of the DNS from your ISP? The simple reply is that most of the DNS services out there provide better protection on the internet in various forms...

    So if you haven't jumped on the DNS wagon, maybe it's time you start! ;)


    Comodo Secure DNS
    http://www.comodo.com/secure-dns/

    DNS Advantage
    http://www.dnsadvantage.com/

    Google DNS
    http://code.google.com/speed/public-dns/

    OpenDNS
    http://www.opendns.com/

    Here's something really nice for all you moms and dads out there about OpenDNS;

    http://www.pcworld.com/article/165411/keep_kids_safe_online_the_opendns_alternative.html

    You can also test your DNS at these sites;

    GRC
    https://www.grc.com/dns/dns.htm

    DNS-OARC
    https://www.dns-oarc.net/oarc/services/dnsentropy
     
  2. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,148
    I've recently switched from Google to OpenDNS. I've found no difference in terms of speed (nor do I expect to with any service) but I'm otherwise entirely happy.
     
  3. CasperFace

    CasperFace Registered Member

    Joined:
    Jul 31, 2010
    Posts:
    200
    These are among the best in terms of speed and reliability, IMO.
    I put a thumbs-up next to the uncensored/unfiltered ones that don't engage in domain hijacking/redirection:

    DNS Advantage
    Preferred: 156.154.70.1
    Alternate: 156.154.71.1
    Preferred: 156.154.70.10 (opt-out) :thumb:
    Alternate: 156.154.71.10 (opt-out) :thumb:

    Comodo Secure DNS
    Preferred: 156.154.70.22 (English)
    Alternate: 156.154.71.22 (English)
    Preferred: 156.154.70.25 (non-English)
    Alternate: 156.154.71.25 (non-English)
    Preferred: 8.26.56.26 (content filtering beta)
    Alternate: 8.20.247.20 (content filtering beta)

    OpenDNS
    Preferred: 208.67.222.222
    Alternate: 208.67.220.220
    Alternate: 208.67.222.220 (3rd & 4th additional servers)
    Alternate: 208.67.220.222 (3rd & 4th additional servers)
    Preferred: 208.67.222.123 (FamilyShield filter)
    Alternate: 208.67.220.123 (FamilyShield filter)

    Google Public DNS
    Preferred: 8.8.8.8 :thumb:
    Alternate: 8.8.4.4 :thumb:

    Level 3 Communications (no official site for DNS services)
    Preferred: 4.2.2.1 (GTEI) :thumb:
    Alternate: 4.2.2.2 (GTEI) :thumb:
    Alternate: 4.2.2.3 (GTEI) :thumb:
    Preferred: 4.2.2.4 (Genuity) :thumb:
    Alternate: 4.2.2.5 (Genuity) :thumb:
    Alternate: 4.2.2.6 (Genuity) :thumb:

    Norton DNS
    Preferred: 198.153.192.1 (legacy)
    Alternate: 198.153.194.1 (legacy)
    Preferred: 198.153.192.40 (security filter)
    Alternate: 198.153.194.40 (security filter)
    Preferred: 198.153.192.50 (security + pornography filter)
    Alternate: 198.153.194.50 (security + pornography filter)
    Preferred: 198.153.192.60 (security + pornography + non-family friendly filter)
    Alternate: 198.153.194.60 (security + pornography + non-family friendly filter)

    NTT America (no official site for DNS services)
    Preferred: 129.250.35.250 :thumb:
    Alternate: 129.250.35.251 :thumb:

    Edit: Added links + further clarifications, where applicable.
     
    Last edited: Feb 7, 2012
  4. Heimdall

    Heimdall Registered Member

    Joined:
    Jul 29, 2009
    Posts:
    176
    DynDNS

    resolver1.dyndnsinternetguide.com – 216.146.35.35
    resolver2.dyndnsinternetguide.com – 216.146.36.36

    Sendori uses the same network

    namebench is good for testing.
     
    Last edited: Feb 7, 2012
  5. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    CasperFace please make links for people to be able to see the sites and read...


    THANKS
     
  6. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
  7. marktor

    marktor Registered Member

    Joined:
    Dec 4, 2011
    Posts:
    143
  8. Searching_ _ _

    Searching_ _ _ Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    1,988
    Location:
    iAnywhere
    Test results from GRC on 4 popular DNS addresses after setting my computers static entries.
    1. I cleared the browser cache before each test.
    2. Disconnect internet access, change static DNS entries then reconnect.
    3. Navigate to www.grc.com/dns/dns.htm and perform the test.

    Setting DNS servers to 4.2.2.2 and 4.2.2.3 - Level3
    Returned 3 results:
    192.221.166.* Bad
    8.0.28.* Bad
    8.0.29.* Bad

    Setting DNS servers to 74.118.212.1 and 74.118.212.2 - Sunbelt
    Returned 3 results:
    64.128.133.131 Very Bad
    72.64.146.68 Excellent
    66.129.97.254 Excellent

    Setting DNS servers to 198.153.192.1 and 198.153.194.1 - Symantec
    Returned 3 results:
    204.13.248.182 Excellent
    216.146.38.152 Excellent
    216.146.38.157 Excellent

    Setting DNS servers to 156.154.70.1 and 156.154.71.1 - UltraDNS
    Returned 2 results:
    156.154.63.103 Excellent
    204.74.103.103 Excellent
     
  9. shuverisan

    shuverisan Registered Member

    Joined:
    Dec 23, 2011
    Posts:
    185
    Haven't seen these mentioned yet.

    Censurfridns (Denmark)
    89.233.43.71 | 89.104.194.142
    2002:d596:2a92:1:71:53 | 2002:5968:c28e::53
    http://blog.censurfridns.dk/


    Easy DNS (Toronto, Canada)
    64.68.200.200 | 205.210.42.205
    http://dnsresolvers.com/


    :thumb: :thumb: to OpenNIC and German/Swiss Privacy Foundation DNS.
     
  10. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Ahh this is really nice from everyone, some really great input, THANKS guys!

    Comodo's latest Secure DNS;

    8.26.56.26
    8.20.247.20

    Is only getting a Moderate at GRC, so that's not good...

    Also OpenDNS keeps giving me 'Invalid Certificate' popup windows all the time, so I'm not enjoying that...

    awkwardpenguin where is this German/Swiss Privacy Foundation DNS you mention?

    For OpenNIC, the UK as example, I only see 1 IP, so what do we use for the secondary?
     
    Last edited: Feb 8, 2012
  11. chrismani

    chrismani Registered Member

    Joined:
    Oct 29, 2010
    Posts:
    37
    Is there any use if I add 6 DNS servers on my pc?

    I added first OpenDNS
    then Google DNS
    then DNS advantage
     
  12. PaulyDefran

    PaulyDefran Registered Member

    Joined:
    Dec 1, 2011
    Posts:
    1,163
    Great thread, especially the non-US servers.

    PD
     
  13. shuverisan

    shuverisan Registered Member

    Joined:
    Dec 23, 2011
    Posts:
    185
    Here you go. They host tor nodes too. I thought that was pretty cool.
    http://server.privacyfoundation.de/index.html

    For NIC, why not use a secondary in France, Germany or the Danish Censurfridns? When I'm in the US, I usually go through a router that calls DNS IPs far enough away that you could easily fit a western European country in the space. Performance is fine.
     
  14. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Ok we're getting a great list here, but now we need some information on these companies if anyone has anything to share about them, their history, who they are, why should they be trusted, etc...

    A lot of the DNS services being listed here are just being run by individuals and small companies, so it's good to know who we are dealing with, after all what is the negative side to using a malicious server...
     
  15. addi6584

    addi6584 Registered Member

    Joined:
    Jan 3, 2012
    Posts:
    58
    Location:
    United States
  16. Nebulus

    Nebulus Registered Member

    Joined:
    Jan 20, 2007
    Posts:
    1,582
    Location:
    European Union
  17. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,029
    After reading unbound's manpage, I'm still not exactly clear how it goes about DNS resolution. Where can I find a good explanation? I didn't find a Wikipedia page, but maybe I didn't look hard enough.

    Basically, does unbound build a local DNS server, drawing on the closest sources? Does it draw on primary nameservers, walking the chain from top-level domain to desired host? Is it more (or less) resistant to DNS poisoning (whether by freelance or government criminals)?
     
  18. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,853
    FYI DasFox, lists are generally maintained and updated in the first post. It's not much of a list if you need to browse every post and collect them yourself. :) It's also a lot easier to reference a post rather than an entire thread.
     
  19. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,029
    That would be cool. But don't posts become uneditable after five days? Or can that be waived for threads like this one?
     
  20. Nebulus

    Nebulus Registered Member

    Joined:
    Jan 20, 2007
    Posts:
    1,582
    Location:
    European Union
    It can do whatever you want it to do. But basically it is a local DNS server. You can tell it to resolve the domain name by asking root servers and then authoritative servers. Also, if you want you can tell it to use your ISP DNS or whatever DNS service you want.
    For instance I use it to act as a real DNS server (first variant), because I don't feel the need to use an external service (like OpenDNS), and the provider's DNS server is very unreliable.
     
  21. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Actually this is going beyond the bounds of this post, yes, no?

    My bad when I said in the post DNS services, I just meant using the free DNS that you can find online to place in the network adapters was all, like OpenDNS, etc...

    So why do we want to use a validating, recursive, and caching DNS resolver? I don't really get the point of it in the context of this post, I'd personally be more inclined to using DNSCrypt, as it relates to the point of the post...



    Sorry I don't know what list you are referring to and this first post?


    THANKS
     
    Last edited: Feb 14, 2012
  22. Nebulus

    Nebulus Registered Member

    Joined:
    Jan 20, 2007
    Posts:
    1,582
    Location:
    European Union
    Umm, what is the connection between one and the other? And what site cert are you talking about? Their site is simple HTTP (not secure).
     
  23. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825

    My bad something I was using was forcing HTTPS and I wasn't paying attention, post changed...


    THANKS
     
  24. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    I wish we could get some information back on all these providers as well as DNSCrypt, Unbound, DNSSEC, etc., etc....

    So we can get some dns education going on...

    We have a nice list, but...

    THANKS
     
  25. addi6584

    addi6584 Registered Member

    Joined:
    Jan 3, 2012
    Posts:
    58
    Location:
    United States
    depends on what you want to do
    https://calomel.org/unbound_dns.html
     
Loading...
Thread Status:
Not open for further replies.