Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Which DNS servers are you pointing to?

which.nameserve.rs

Post reply on HN
Print view View original

31–40 of 97 posts

Re: Show HN: Which DNS servers are you pointing to?

#31

Post by Fileformat »

sleavey wrote: post #5
Fileformat wrote: post #2

I kept running into DNS issues, and needed to triple-check that I was pointing to the right DNS servers, so I made this utility website that does exactly that: which-dns [1] This isn't a new idea ([2]), but mine supports https (hat tip to Matt Holt's certmagic [3]), is ad-free, and the source is available [4]. Let me know what you think! [1] https://which.nameserve.rs [2] http://www.whatsmydnsserver.com/ [3] https://…

I just read the GitHub readme: > How does it work? You make a request to a hostname with a unique prefix. All hostnames resolve to the same IP, but the DNS server records which IP address the query came from. The webserver looks for this record and returns it. That's a smart way of detecting a user's DNS server - well done! Is there a way to "fail" the first request and try to force the user's secondary DNS to kick i…

It would be really nice to detect the user's secondary DNS.

I'm not sure failing will do that, but it might reveal interesting things anyway. I'll add it to the to-do list.

Re: Show HN: Which DNS servers are you pointing to?

#32

Post by compsciphd »

gilrain wrote: post #20
compsciphd wrote: post #14

I'm using 8.8.8.8 and its coming up as cloudflarenet not whatever google should presumably be?

Are you using Firefox? https://support.mozilla.org/en-US/kb/dns-over-https-doh-faqs...

that explains it. chrome comes up as google. However, I'm not located in the US.... (a good 10k kilometers away)

Re: Show HN: Which DNS servers are you pointing to?

#33

Post by Fileformat »

Fnoord wrote: post #28

Doesn't show IPv6 for me. I always use IPleak.net [1]. Works for public IPv4, IPv6, DNS server, Tor/AirVPN exit node, BitTorrent, geolocation, and all kind of browser metadata. Browsing through comments shows this can do some things IPleak.net can't do such using wget/curl with API. [1] https://ipleak.net

It looks like ipleak.net does have an API [1]. Website is a bit "information overload" though.

[1] https://airvpn.org/forums/topic/14737-api/

Re: Show HN: Which DNS servers are you pointing to?

#34

Post by jwilk »

arminiusreturns wrote: post #21

This is really cool, especially because I can just 'wget -qO- $RANDOM.which.nameserve.rs/api.json?callback=myfunction' which means I can use this in scripts. (For example an added field to scripts that grab from ifconfig.co)

Note that $RANDOM is just 15 bits of entropy. You should use something more random.

Re: Show HN: Which DNS servers are you pointing to?

#35

Post by dgl »

sleavey wrote: post #5
Fileformat wrote: post #2

I kept running into DNS issues, and needed to triple-check that I was pointing to the right DNS servers, so I made this utility website that does exactly that: which-dns [1] This isn't a new idea ([2]), but mine supports https (hat tip to Matt Holt's certmagic [3]), is ad-free, and the source is available [4]. Let me know what you think! [1] https://which.nameserve.rs [2] http://www.whatsmydnsserver.com/ [3] https://…

I just read the GitHub readme: > How does it work? You make a request to a hostname with a unique prefix. All hostnames resolve to the same IP, but the DNS server records which IP address the query came from. The webserver looks for this record and returns it. That's a smart way of detecting a user's DNS server - well done! Is there a way to "fail" the first request and try to force the user's secondary DNS to kick i…

The extended test on https://www.dnsleaktest.com/ does that. There’s also various tests that reveal EDNS subnet leakage.

It’s pretty easy to implement; somehow don’t respond to a request, but do respond to a second. (If you’re clever you can probably do it without server side state, e.g. encode a deadline in the custom hostname.)

Re: Show HN: Which DNS servers are you pointing to?

#36

Post by znpy »

I run my own DNS servers at home. I have a small virtualization cluster and run a small DNS vm on each physical host.

My resolvers perform queries against the root servers directly and cache results.

It's refreshing to skip all the DNS fuckery that's going on nowadays.

Re: Show HN: Which DNS servers are you pointing to?

#39

Post by leokennis »

Cantbekhan wrote: post #18

Nextdns.io and cloudflare externally. Pi-hole pointing to those internally. Preferably encrypted. Preferably with Firefox due to esni support.

Very satisfied NextDNS user here. Easy to set up, and it’s a surprise for me how much nicer ad and tracker blocking is over my entire network (all laptops, phones, smart TV etc.) than just using a blocker in my web browser.

Re: Show HN: Which DNS servers are you pointing to?

#40

Post by teddyh »

dheera wrote: post #19
compsciphd wrote: post #14

I'm using 8.8.8.8 and its coming up as cloudflarenet not whatever google should presumably be?

Gosh, I feel old, how do I set DNS servers in Linux these days? I used to just edit /etc/resolv.conf and add 8.8.8.8 to it but now recent distros have "Do not edit." in resolv.conf and don't tell you what to actually edit. Why do they have to do this to us ... things used to be simple.

It depends on whether you are using NetworkManager or systemd-resolved, or something else.
Post reply on HN