DNS & network news

Monthly Archive: September 2019

How to use BlahDNS with DNSCrypt?

I want QubesOS to install DNS in the environment to increase security and privacy. https://www.privacytools.io/providers/dns/Judging from this site, I would like to use a tool called DNSCrypt, use Network wide DNS servers called Pi-hole, and use a Provider called BlahDNS. Here is the question, I want to select BlahDNS by doing “curl -sSL install.pi-hole.net | bash” with a command, but it is not in the Provider list. Even if you press Custom, you will be asked to enter four numbers, but I do not know what to enter. (Example: 1.1.1.1) What should I enter here? I would like to set DNS for Firefox after that, how can I set it?Which is better, Pi-hole or NoTracking?

submitted by /u/cbwigyqbv
[link] [comments]

Powered by WPeMatico

How I can bypass this type of blockage? DNS Block

In my country there are several complaints regarding the sites, for the most part they block sites that allow you to watch streaming movies or others that offer streaming sports events, obviously these are illegal sites. no problem because the blocks are easily circumvented by changing DNS, for example I use those of CloudFare (1.1.1.1 or 1.0.0.1). The other day they have blocked a server (example 46.xx.xxx.19) I believe it comes from an IPTV, and according to ip-tracker.org the server operates from Swiss, it doesn’t have a name for the site, so it doesn’t need DNS resolution. The server is unreachable even though it is changing DNS, trying the site with a VPN, or using the home network (ADSL) the site function, the problem is with mobile data and other ISPs.

My questions are:

What kind of block has been done?

Possible solutions without using a VPN?

submitted by /u/NetDotFree
[link] [comments]

Powered by WPeMatico

Decentralized DNS – Why Should We Use It?

Censorship is a daily reality for many Internet users. Workplaces, schools, and governments use technical and social means to prevent access to information by the network users under their control.

The DNS system is fraught with vulnerabilities. The biggest weakness in tightly controlled networks is the fact that state actors can control access to DNS servers.

With 100% control over DNS servers, censored websites can have their URLs, and associated IP addresses deleted, modified or rendered to nonsensical sites.

The Internet was designed to be fault tolerant from a network perspective, but the current naming scheme we use is massively centralized and subject to government interference.

China controls every DNS server located in mainland China. They control with 100% certainty how websites are resolved for 1.4 billion people.

In the current system, you do not own your domain name you are leasing it and must continuously pay to maintain your rights to use the name. Because you do not own it, the domain name can be taken back at any time or shut down by a government.

For example, the FBI seizes websites and shuts them down on a regular basis. Your domain name is administered by a registrar, which are subject to contracts with ICANN and the laws and regulations of the countries they operate in.

The current DNS is also susceptible to DNS cache poisoning attacks through one of Amazon’s popular DNS servers, as an example.

Finally one has limited options when getting a website domain name. You can only choose from top-level domain extensions that ICANN has released and made available to registrars. Selling off sub-domains while possible is rarely done and difficult to monetize.

Only 7 non-geographical TLDs predate the creation of ICANN in 1998. Even with the additional TLDs that are now available, it is still a small number of choices, and the actual domain names are restricted to a subset of ASCII text.

So how exactly a decentralized DNS may help?

Thanks to the decentralized, blockchain based solutions, the domains ownership and creation is managed by blockchain based tokens. Domain data is stored via technology capable of running in a decentralized manner. The blockchain technology puts an end of the censorship and all other restrictions ICANN imposes.

submitted by /u/ButterflyProtocol
[link] [comments]

Powered by WPeMatico