Skynet/nixos
7
1
Fork 0
Code Issues 45 Pull requests 1 Projects Releases Packages Wiki Activity Actions

Changes to upstream DNS - using HEANet and Quad9-unfiltered. primaries and secondaries both.

Browse source 
IPv6 addresses are in place but commented out, useful to have for any future IPv6 rollout.
Worth noting that the quad9 normal offering is actually including a malware and phishing blocking - if on the list, no sane DNS returned.
This commit is contained in:
pio 2023-10-22 16:20:43 +00:00
parent 1718aebf6f
commit dd122729bb
1 changed files with 28 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

44
applications/dns.nix
View file

@ -390,26 +390,38 @@ in {
# set the upstream dns servers # set the upstream dns servers
# overrides the default dns servers # overrides the default dns servers
# (pio - recommending HEANet and (Quad9 Filtered or quad9 Unfiltered) instead of Cloudflare and Google.)
# Google could stop DNS service at any time, and Cloudflare use your data..
forwarders = [ forwarders = [
# HEANet - ns.heanet.ie / auth-ns2.heanet.ie / auth-ns3.heanet.ie ; Name: HEANet
# ; DNSSEC: not known
; Details: ISP for UL, should be a good candidate for primary upstream. If they aren't available, we've no connectivity anyway.
; Server: ns.heanet.ie HEANet primary
"193.1.193.194" "193.1.193.194"
# "193.1.247.198" ; Server: auth-ns2.heanet.ie HEANet secondary (Located Germany)
# "5.196.22.225" "193.1.247.198"
# Quad9 - malware/phish filtered, has DNSSEC validation. Pri / sec, then their IPV6 servers ; Server: auth-ns3.heanet.ie HEANet tertiary (Ireland located)
# https://dns.quad9.net/dns-query # "5.196.22.225"
# "9.9.9.9" ; Name: Quad9.net (free service - this one is malware/phish blocked). Suggesting using unfiltered as below.
# "149.112.112.112" ; DNSSEC: available
# # "2620:fe::11 ; Details: Based in Switzerland, zero cost, stated as no tracking data saved. Also has https https://dns.quad9.net/dns-query
# # "2620:fe::fe:11" ; Server: dns9.quad9.net Primary
# Quad9 unfiltered, no DNSSEC validation. Pri / sec, then their IPV6 servers # "9.9.9.9"
# https://dns10.quad9.net/dns-query ; Server: dns.quad9.net Secondary
# "149.112.112.112"
; Server: dns9.quad9.net IPV6 Primary server
# "2620:fe::9"
; Server: dns.quad9.net IPV6 Secondary server
# "2620:fe::fe"
; Name: Quad9.net (free service - this one is unfiltered).
; DNSSEC: not available
; Details: Based in Switzerland, zero cost, stated as no tracking data saved. Also has https https://dns10.quad9.net/dns-query
; Server: dns10.quad9.net Primary
"9.9.9.10" "9.9.9.10"
; Server: dns10.quad9.net Secondary
"149.112.112.10" "149.112.112.10"
# # "2620:fe::10" ; Server: dns10.quad9.net IPV6 Primary server
# # "2620:fe::fe:10" # "2620:fe::10"
; Server: dns10.quad9.net IPV6 Secondary server
# "2620:fe::fe:10"
]; ];
cacheNetworks = cacheNetworks =