[–]▶ No.1072451>>1072670 >>1072818 >>1073385 >>1073494 [Watch Thread][Show All Posts]
Which DNS do you use?
Which router did you buy? Is there even a point to buying a router?
Best firewall on gnu/linux for a brainlet?
____________________________
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072592
I use 8.8.8.8
I bought an old router from my roommate and installed openwrt on it
I use the firewall included on openwrt
Also dobvious data mining thread is obvious but I'm curious about 8.8.8.8 instead of 2.2.2.2. I guess it makes sense to distribute my personal data among as many services as possible to prevent correlation, but DNS logs only provide the top level URLs I go to right?
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072609
>DNS
One I run at home
>Router
pfSense box
>firewall for Linux: brainlet edition
You probably want firewalld
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072670
>>1072451 (OP)
>Which DNS do you use?
unbound using 8.8.8.8@853#dns.google
>Which router did you buy? Is there even a point to buying a router?
OpenBSD on a VM
>Best firewall on gnu/linux for a brainlet?
brainlets shouldn't configure firewalls. nftables
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072815
I use Keweon DNS which claims to not log. It blocks trackers, malware, ads, and shit so I only use it for my phone since I can't afford a new phone with root access. It seems to be pretty open and trustworthy
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072818
>>1072451 (OP)
None of this is relevant to actual network security.
Rule of thumb: You are fucked
There is no DNS, Webproxy, VPN, or Secure Network that will hide your ass from the NSA.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072820
Yandex DNS best DNS. Glowfags gtfo)))))))
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072831>>1073102
>A dnscrypt server in my neighborhood
>A router that runs Linux so I can make it serve dnscrypt queries
>iptables :^)
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072972>>1073102
>DNS
Local dnscrypt forwarded to OpenNIC dns server.
>Router
The one my ISP provided.
>Firewall
ufw
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1072974>>1073102
>Which DNS do you use?
OpenNIC
>Which router did you buy? Is there even a point to buying a router?
TP-Link N750
Yes, because ISP routers are botnet and trash
>Best firewall on gnu/linux for a brainlet?
firewalld
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073102>>1073154 >>1073182
>>1072831
>>1072972
whats special about dnscrypt?
>>1072974
tp link in chinkware?
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073154
>>1073102
>whats special about dnscrypt?
>https://dnscrypt.info/
inb4 dnscrypt actually refer to the communication protocol between dns client and dns resolver. Basically it encrypt your dns request. In my case I use dnscrypt because my third world shithole ISP always spoofing my dns request for blocking websites.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073182
>>1073102
>whats special about dnscrypt?
1. it works
2. in principle it's much more FOSS than DoT which Cloudflare and other companies are shilling. There's probably nothing wrong with DoT but support for it being so centralized means it's smoke and mirrors. See the Mozilla deal in hardcoding Cloudflare's DNS service into Firefox.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073307>>1073321
Am I the only one using unbound to host a cache server, that directly query from the root servers?
www. internic. net/domain/named.cache
I always feared using dnscrypt, or any other dns project. The DNS browsing informations are very important.
I don't trust any vpn provider for exemple...
Is that a shit way of doing things? Maybe a better way?
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073321>>1073468
>>1073307
Recursive DNS queries to the actual root servers and all the way to authoritative servers are not encrypted (and probably never will be), meaning your ISP can see your shit.
Other than that, it's better to query DNS recursively, yes.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073351
>DNS
Unbound with DNSSEC. https://calomel.org/unbound_dns.html
>all those niggers using 8.8.8.8
There are plenty of other resolvers that don't make jewgle or kikeflare aware of every website you visit.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073385
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073421
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073468
>>1073321
ISP don't see shit since I'm behind a VPN. So my problem, is what is better between root servers, or openNIC servers.
Giving your dns infos to openNIC (or another project) or to root servers?
I've set up a DNS cache of 4 hours. Maybe I should turn it even more, maybe days (and if some server changes their ip, I just have to reload the unbound service). So I don't give much infos.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073470
8.8.8.8
I'm all about 8chan.
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1073494
>>1072451 (OP)
i use my own dns server. i just update it from OpenNIC.
I just use the router my ISP gave me. it works well enough.
upw is the firewall for brainlets. opensnitch also not bad but not as good
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.
▶ No.1074247
>Which DNS do you use?
I don't give a fuck. Whatever DHCP provides or what Tor provides.
>Which router did you buy? Is there even a point to buying a router?
You answered this for yourself.
>Best firewall on gnu/linux for a brainlet?
Firewalls are a meme marketed to you from some retarded hax0r movie
Disclaimer: this post and the subject matter and contents thereof - text, media, or otherwise - do not necessarily reflect the views of the 8kun administration.