Changing DNS server settings

Antivirus, forensics, intrusion detection, cryptography, etc.
Post Reply
Message
Author
labbe5
Posts: 2159
Joined: Wed 13 Nov 2013, 14:26
Location: Canada

Changing DNS server settings

#1 Post by labbe5 »

https://developers.google.com/speed/pub ... docs/using

Configure your network settings to use Cloudflare

N.B. Replace Google Public DNS with Cloudflare which are 1.1.1.1 and 1.0.0.1 instead of 8.8.8.8 and 8.8.4.4 in example shown below.

Nothing prevents you from using Google Public DNS, but Cloudflare is a better alternative privacy-wise.

Secondly, if you have a VPN, such as AirVPN, no need to change any settings, AirVPN provides its own DNS servers and has a no log policy. You can check this by using ipleak.net, powered by AirVPN.

When you use Google Public DNS, you are changing your DNS "switchboard" operator from your ISP to Google Public DNS.

In most cases, the IP addresses used by your ISP's domain name servers are automatically set by your ISP via the Dynamic Host Configuration Protocol (DHCP). To use Google Public DNS, you need to explicitly change the DNS settings in your operating system or device to use the Google Public DNS IP addresses. The procedure for changing your DNS settings varies according to operating system and version (Windows, Mac or Linux) or the device (computer, phone, or router). We give general procedures here that might not apply for your OS or device; please consult your vendor documentation for authoritative information.


We bypass Changing DNS server settings on Ubuntu because no Dog or Puppy use Network Manager.

Here is what is to know to make your DNS nameserver persistent in resolv.conf when using DHCP :

Additionally, if you are using DHCP client software that overwrites the settings in /etc/resolv.conf, you will need to set up the client accordingly by editing the client's configuration file.

Back up /etc/resolv.conf:

sudo cp /etc/resolv.conf /etc/resolv.conf.auto

Edit /etc/dhcp3/dhclient.conf:

sudo vi /etc/dhcp3/dhclient.conf

If there is a line containing domain-name-servers, write down the IP addresses for future reference.

Replace that line with, or add, the following line:

For IPv4:

prepend domain-name-servers 8.8.8.8, 8.8.4.4;

For IPv6:

prepend domain-name-servers 2001:4860:4860::8888, 2001:4860:4860::8844;

For IPv6-only, you can use Google Public DNS64 instead of the above IPv6 addresses.

Save and exit.
Restart any Internet clients you are using.
Test that your setup is working correctly.

This is done for what? It is common practice by ISPs to collect data on users to sell, especially in USA, now that your data on internet is, by law-abiding ISPs, up for grabs.

It is one of many ways to keep your data to yourself.

Further reading :
https://www.wired.com/2006/05/the-etern ... f-privacy/
https://public-dns.info/
https://developers.google.com/speed/pub ... s/security
https://www.iceflatline.com/2010/02/how ... e-dnsmasq/
https://null-byte.wonderhowto.com/how-t ... t-0186193/
useful commands :
$ cat /etc/resolv.conf (list of nameservers)
Last edited by labbe5 on Mon 06 Aug 2018, 12:32, edited 2 times in total.

april

#2 Post by april »

Seems to me that this is a lot like saying
"Just climb up here into the Lion's mouth to pick his teeth and get all the free food you wish for"

SNAP !

Your ISP is probably using them anyway .
They definitely would know a great deal more about the subject than I do .

dancytron
Posts: 1519
Joined: Wed 18 Jul 2012, 19:20

#3 Post by dancytron »

None of this applies if you have a router or similar hardware between you and the internet. If you have a router, then the usual setup is that the DNS servers are set on the router and /etc/resolve.conf points to the router.

If you are worried about security at all, you probably have some sort of router or similar hardware between you and the internet.

april

#4 Post by april »

dancytron wrote:None of this applies if you have a router or similar hardware between you and the internet. If you have a router, then the usual setup is that the DNS servers are set on the router and /etc/resolve.conf points to the router..
If you read at the first link . They are suggesting you change /etc/resolve.conf to the new address !

Post Reply