Bad actors seem to hardcode IP addresses.
Technitium DNS Server: Self host a DNS server for privacy and security
41–50 of 87 posts
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#42[flagged]
This is my only gripe as compared to AdGuard Home.
However, Technitium is miles ahead in terms of raw customization. One such example is synchronizing DNS servers. Unlike AdGuard Home you have to resort to an additional app [1], with technitium you do proper NS transfer [2].
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#43Hosting own DNS Server at home that blocks some domains freaks me out. I have never run it, so don't know. But comparing to just running AdGuard on my macOS, there are some times, that website would not open or behave without AdGuard being turned off. It is easy to do on my local macOS, but in case of using AdGuard as DNS Server on my home network - that will require more steps.
Also, even if you run AdGuard as DNS on local network, you still need to run it on your macOS, if you are planning to travel.
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#44Isn’t self-hosting a dns server kind off pointless if you are the only user? Like doesn’t that make you unique to tracking?
Its actually much more beneficial to use a local DNS server even for a single user. A single user will keep querying for DNS requests since OS/apps cache DNS only for a minute or so. Local DNS will keep cache for the full TTL of the record and thus reduce the number of DNS requests that go out of your network. Plus there is Serve Stale feature which improves resiliency. For privacy, depending on your scenario, you ca…
You should consider disclosing your affiliation to the project in your posts on this thread.
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#45How it compares to let's say AdGuard Home? Seems similar https://github.com/AdguardTeam/AdGuardHome
I started on PiHole and moved to AdGuardHome and eventually landed on Technitium. I have a large home network and it does auto reverses and multiple record types that the others didn't. I really like Technitium.
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#46Why this instead of the very widely-deployed PiHole or NextDNS?
I went from piHole running in a container to this. All those weird spinners on youtube and unexplained confusing issues went away. This thing is awesome. The functionality is massive. It is like going from Openwrt to mikrotik. The only thing I find disturbing is, being a .net app, htop shows it using 100s of gigs of ram. I don't know what is going on with that, as it runs well and does not add any load to the host. A…
So how low can you go? I'm running PiHole on some small SMBs with 1GB RAM.
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#47Earlier quoted context omitted.
No. I use adguardhome to act as a private DNS for my android devices. It's the best way to get both DNS for self hosted services AND DNS filtering to remove tracking and ads in all android apps.
Until the apps figure out dns over http. sigh
You can at least partially mitigate this by simply blocking the major DNS-over-https endpoints. There aren't that many. However, in my experience this really pisses off some devices e.g. Google/Nest Home speakers even if you have regular DNS working fine. You also of course won't catch the really nefarious devices phoning home over a custom non-public endpoint. It can be interesting just for logging purposes as well, that's what I do.
https://jpgpi250.github.io/piholemanual/doc/Block%20DOH%20wi... really digs into the nitty gritty of how to do it to a crazy extent.
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#48Hosting own DNS Server at home that blocks some domains freaks me out. I have never run it, so don't know. But comparing to just running AdGuard on my macOS, there are some times, that website would not open or behave without AdGuard being turned off. It is easy to do on my local macOS, but in case of using AdGuard as DNS Server on my home network - that will require more steps. Also, even if you run AdGuard as DNS o…
I think it's just a tradeoff. I run Pihole and it does occasionally block things that I need, but it's rare. When it happens I log into the dashboard, look at what was recently blocked, and permanently unblock it if needed. On the plus side, fewer to no ads on all devices including mobiles.
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#49No support for DNSCrypt nor Anonymized DNS :(
Thank you for all your hard work on dnscrypt. Have been a loyal user of it since 2015.
Re: Technitium DNS Server: Self host a DNS server for privacy and security
#50Earlier quoted context omitted.
Until the apps figure out dns over http. sigh
You can at least partially mitigate this by simply blocking the major DNS-over-https endpoints. There aren't that many. However, in my experience this really pisses off some devices e.g. Google/Nest Home speakers even if you have regular DNS working fine. You also of course won't catch the really nefarious devices phoning home over a custom non-public endpoint. It can be interesting just for logging purposes as well,…
I imagine that eventually we'll see content and DoH served from the same endpoint. Or ads proxied from the same location as the content.