How many of you have switched to Quad9 (9.9.9.9) for DNS?

[Elixer]

This is free, just change your router's DNS to use 9.9.9.9, and skip your provider's DNS, or make it a tertiary DNS server.

The new Quad9 Domain Name System (DNS) service helps protect users from accessing millions of malicious internet sites known to steal personal information, infect users with ransomware and malware, or conduct fraudulent activity.
Businesses and consumers can safeguard their online privacy as the Quad9 (9.9.9.9) DNS service is engineered to not store, correlate or otherwise leverage any personally identifiable information (PII) from its users. In contrast, other DNS services often capture Information about the websites consumers visit, devices they use and where they live for marketing or other purposes.

http://www-03.ibm.com/press/us/en/pressrelease/53388.wss

For those that don't know what DNS is... it is basically, the internet's phone book.

 

[Smoblikat]

8.8.8.8 and 8.8.4.4 over here.

 

[Burpo]

Nice.. Thanks!
https://www.theregister.co.uk/2017/11/20/quad9_secure_private_dns_resolver/

 

[GagHalfrunt]

8.8.8.8 and 8.8.4.4 over here.

I was using the Google DNS server and they didn't play nicely with my VPN. So I couldn't use the VPN and the web at the same time, when the VPN went on web access was lost. Although P2P and email were fine, go figure. Gonna try the Quad9 service later tonight, hope it works because my ISPs DNS servers are the pits.

 

[Red Squirrel]

Sounds interesting. I am using root servers directly but this could be worth checking too.

 

[John Connor]

No thanks. Been using OpendDNS for years.

 

[Ferzerp]

or make it a tertiary DNS server.

What do you think that would do? Because I'll tell you exactly what it would do. It would, in the event that your first DNS server was unavailable, and your second DNS server was unavailable, use that DNS server (along with some implementation specific fail-back mechanism taking you back off it when one of the other two were available again. In other words, it would do absolutely nothing. Your chances of ever performing a lookup against it as tertiary server is about as likely as getting struck by lightning (unless you have some extremely unreliable DNS infrastructure).

 

[Fir]

Or if you don't want to see another ad again, ever, use these.

Default
Use these servers to block ads, tracking and phishing
176.103.130.130
176.103.130.131
Or use IPv6 addresses
2a00:5a60::ad1:0ff
2a00:5a60::ad2:0ff
Family protection
Default + blocking adult websites + safe search
176.103.130.132
176.103.130.134
Or use IPv6 addresses
2a00:5a60::bad1:0ff
2a00:5a60::bad2:0ff

 

[Elixer]

What do you think that would do? Because I'll tell you exactly what it would do. It would, in the event that your first DNS server was unavailable, and your second DNS server was unavailable, use that DNS server (along with some implementation specific fail-back mechanism taking you back off it when one of the other two were available again. In other words, it would do absolutely nothing. Your chances of ever performing a lookup against it as tertiary server is about as likely as getting struck by lightning (unless you have some extremely unreliable DNS infrastructure).

Hey, could happen that the other two DNS servers are down... you never know, but yeah, usually, you will never hit it.

 

[GagHalfrunt]

Well that was an abject failure. Switched over the to Quad9 DNS and got no web access. Not even Google would show up. Now I'm on OpenDNS and that's no better than Google's, works fine on its own, but it blocks out everything in my primary VPN. Works okay with my backup VPN though.

 

[MrSquished]

This is all greek to me. Tertiary servers? Can we talk about watches and audiophile equipment instead?

 

[John Connor]

Here's the WHOIS for 9.9.9.9




NetRange: 9.9.9.0 - 9.9.9.255
CIDR: 9.9.9.0/24
NetName: Skynet
NetHandle: NET-9-9-9-0-1
Parent: NET9 (NET-9-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: Quad9 (CLEAN-97)
RegDate: 2017-09-13
Updated: 2017-09-13
Ref: https://whois.arin.net/rest/net/NET-9-9-9-0-1


OrgName: Skynet
OrgId: CLEAN-97
Address: 675 North Randolph Street
City: Arlington
StateProv: VA
PostalCode: 22203-2114
Country: US
RegDate: 2017-09-07
Updated: 2017-09-21
Comment: https://9.9.9.9
Comment: https://www.cyberdyne.jp/english/products/HAL/index.html
Ref: https://whois.arin.net/rest/org/CLEAN-97


OrgNOCHandle: QNO5-ARIN
OrgNOCName: Quad9 Network Operations
OrgNOCPhone: (703) 526-6630
OrgNOCEmail: noc@quad9.net
OrgNOCRef: https://whois.arin.net/rest/poc/QNO5-ARIN

OrgTechHandle: QNO5-ARIN
OrgTechName: Quad9 Network Operations
OrgTechPhone: (703) 526-6630
OrgTechEmail: noc@quad9.net
OrgTechRef: https://whois.arin.net/rest/poc/QNO5-ARIN

OrgAbuseHandle: QUADA1-ARIN
OrgAbuseName: Quad9 Abuse
OrgAbusePhone: (703) 526-6630
OrgAbuseEmail: abuse@skynet.net
OrgAbuseRef: https://whois.arin.net/rest/poc/QUADA1-ARIN

 

[blackangst1]

Skynet LOL

I use Level3's, have for years. 4.2.2.2 and 4.2.2.1

 

[BarkingGhostar]

I'm always suspicious of free things.

 

[John Connor]

I'm always suspicious of free things.

Exactly! Free is NEVER free. I use OpenDNS and have done so for many years. But I know they are selling my DNS data I bet. I just like their anti-phish mechanisms and their ability to pull a website even if the DNS is out. Like was the case when DynDNS got DDoSed.

 

[MtnMan]

Haven't used my ISPs DNS in years. I use the OpenDNS servers.

 

[Genx87]

Root hints for me.

 

[arch113]

Or if you don't want to see another ad again, ever, use these.

Default
Use these servers to block ads, tracking and phishing
176.103.130.130
176.103.130.131
Or use IPv6 addresses
2a00:5a60::ad1:0ff
2a00:5a60::ad2:0ff
Family protection
Default + blocking adult websites + safe search
176.103.130.132
176.103.130.134
Or use IPv6 addresses
2a00:5a60::bad1:0ff
2a00:5a60::bad2:0ff

Ip Address:
176.103.130.134
Check Range:
176.103.130.1 - 176.103.130.255
Country:
Russian Federation
Country code:
RU
Region name:
Moskovskaya oblast'


City:
Ramenskoye
Zip Code:
140109
Latitude:
55.566940307617
Longitude:
38.230281829834

 

[KillerBee]

After running GRC DNS Benchmark for top 50 fastest DNS servers:
9.9.9.9 ranks #1 for speed too

 

[darkswordsman17]

I use OpenDNS, which I believe already does much of the same thing (filters malware sites, blocks some but others I think it takes you to a page that tells you if a site is sketchy and then gives you the option to continue). Plus its established. As far as I know, them being bought by Cisco hasn't affected them.

Ip Address:
176.103.130.134
Check Range:
176.103.130.1 - 176.103.130.255
Country:
Russian Federation
Country code:
RU
Region name:
Moskovskaya oblast'


City:
Ramenskoye
Zip Code:
140109
Latitude:
55.566940307617
Longitude:
38.230281829834

Hey, there are good Russians. Granted, yeah, not sure I'd trust that, but I feel like average Russians get a bad name due to their government (not unlike the US, and, well really pretty much everywhere).

 

[Elixer]

Skynet LOL

I use Level3's, have for years. 4.2.2.2 and 4.2.2.1

Those are the ones I used as well... however, with Centurylink buying them out, they will ruin Level 3 just like they screwed over their other customers with crap service.

 

[Rifter]

I use a pi-hole, so my dns server is local and on my network and already blocks adds as well as malicious sites.

 

[arch113]

I use a pi-hole, so my dns server is local and on my network and already blocks adds as well as malicious sites.

Same here, I have it pointed to use OpenDNS Server

 

[rh71]

So I'm on Torguard and there are DNS options - one of them is to block outside DNS, checked by default. Under there is use "VPN DNS" when connected and I can't determine what that is though ipconfig shows it's OpenDNS. OpenDNS is set for while connecting rather than when connected as above.

I don't get it - is it using some special DNS that if I change to Quad9, using Torguard will have its purpose defeated? Or is it just using OpenDNS anyway and I can use Quad9 and DNS has nothing to do with VPN/privacy?

 

[ultimatebob]

Hmm... who should I trust more for the public DNS? Google or IBM? I figured that both of them are using AI to track my browsing habits.