Tip: Change the DNS server
It happens unnoticed as soon as we use computers, cell phones & Co: almost every activity on the net is first preceded by a request for the IP address to the DNS servers (the "phone books of the Internet"). By default, the DNS servers of the Internet provider answer this. However, each device can be configured to use one or more other DNS servers.
... By Markus Fleschutz 📅 April 6, 2020
Why change at all?
There are some good reasons to change the DNS server:
- it is not running reliably or responds too slowly.
- it is censored, "forbidden" domains are not resolved.
- it is not trustworthy. The requested domains are stored, user behavior is extracted from them and resold.
- it does not support features such as malware blocklist, adult content blocklist, encrypted transmission or protection against DNS attacks.
Selected public DNS servers
- Cloudflare: IPv4: 184.108.40.206 and 220.127.116.11, and IPv6: 2606:4700:4700::1111 and 2606:4700:4700::1001.
- Cloudflare with malware blocklist: IPv4: 18.104.22.168 and 22.214.171.124 and IPv6: 2606:4700:4700::1112 and 2606:4700:4700::1002
- Cloudflare with Malware Blocklist and Adult Content Blocklist: IPv4: 126.96.36.199 and 188.8.131.52 as well as IPv6: 2606:4700:4700::1113 and 2606:4700:4700::1003
- Level 3 Communication (Verizon): IPv4: 184.108.40.206 to 220.127.116.11
- Google: IPv4: 18.104.22.168 and 22.214.171.124 and IPv6: 2001:4860:4860::8888 and 2001:4860:4860::8844
- Quad9 with malware blocklist and DNSSEC validation: IPv4: 126.96.36.199 and IPv6: 2620:fe::fe
- Quad9 without malware blocklist, without DNSSEC, send EDNS client subnet:** IPv4: 188.8.131.52 as well as IPv6: 2620:fe::10)
- Quad9 with malware blocklist, send EDNS client subnet and DNSSEC validation:** IPv4: 184.108.40.206
- Quad9 with malware blocklist, NXDOMAIN only and DNSSEC validation:** IPv4 220.127.116.11