Tip: Change the DNS server
It happens unnoticed as soon as we use computers, cell phones & Co: almost every activity on the net is first preceded by a request for the IP address to the DNS servers (the "phone books of the Internet"). By default, the DNS servers of the Internet provider answer this. However, each device can be configured to use one or more other DNS servers.
... By Markus Fleschutz 📅 April 6, 2020
Why change at all?
There are some good reasons to change the DNS server:
- it is not running reliably or responds too slowly.
- it is censored, "forbidden" domains are not resolved.
- it is not trustworthy. The requested domains are stored, user behavior is extracted from them and resold.
- it does not support features such as malware blocklist, adult content blocklist, encrypted transmission or protection against DNS attacks.
Selected public DNS servers
- Cloudflare: IPv4: 220.127.116.11 and 18.104.22.168, and IPv6: 2606:4700:4700::1111 and 2606:4700:4700::1001.
- Cloudflare with malware blocklist: IPv4: 22.214.171.124 and 126.96.36.199 and IPv6: 2606:4700:4700::1112 and 2606:4700:4700::1002
- Cloudflare with Malware Blocklist and Adult Content Blocklist: IPv4: 188.8.131.52 and 184.108.40.206 as well as IPv6: 2606:4700:4700::1113 and 2606:4700:4700::1003
- Level 3 Communication (Verizon): IPv4: 220.127.116.11 to 18.104.22.168
- Google: IPv4: 22.214.171.124 and 126.96.36.199 and IPv6: 2001:4860:4860::8888 and 2001:4860:4860::8844
- Quad9 with malware blocklist and DNSSEC validation: IPv4: 188.8.131.52 and IPv6: 2620:fe::fe
- Quad9 without malware blocklist, without DNSSEC, send EDNS client subnet:** IPv4: 184.108.40.206 as well as IPv6: 2620:fe::10)
- Quad9 with malware blocklist, send EDNS client subnet and DNSSEC validation:** IPv4: 220.127.116.11
- Quad9 with malware blocklist, NXDOMAIN only and DNSSEC validation:** IPv4 18.104.22.168