Why is DNS still hard to learn? - jvns

# Setup

• You can run a DNS server (2025)
  • The ISP’s blackhole the IP for some blocked domains. So changing your DNS to 8.8.8.8 will resolve the domain, but the IP won’t work. A VPN avoids this, since the traffic goes via the VPN IP. - HN
• Your ISP Is Watching Everything - Fix It With DNS Filtering!
  • use a thirdparty DNS - nextDNS
  • piHole - dns forwarder
  • run your own dns resolver - unbound + piHoles
• Useful Tools to Troubleshoot DNS Name Resolution Problems

Advice from ChatGPT

if nslookup works (give an ip). Check that your gateway (your router is reachable) curl -v https://github.com

If this not the case “network is unreachable” error suggests there may be an issue with your network configuration or connectivity. I sometimes failed to put the right adress .255 vs .254.

# DNS leak test

• from [HN]

# Alternative DNS

• CloudFlare - 1.1.1.1

# DNSMask

• Five Nines with Dnsmasq

• What domain name to use for your home network

# See also

• Malaysia started mandating ISPs to redirect DNS queries to local servers