Mikaela
/
shell-things
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

systemd-resolved: don't DNSSEC with adblocking

This commit is contained in:
Aminda Suomalainen 2021-11-21 11:37:03 +02:00
parent 12fe7a59a8
commit 4f50f4a367
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/systemd/resolved.conf.d/adguard-dot.conf
View File

@ -6,7 +6,7 @@ DNS=2a10:50c0::ad1:ff#dns.adguard.com 94.140.14.14#dns.adguard.com 2a10:50c0::ad
Domains=~.
# non-tech friendliness in case system down for ages. Also DNSSEC ensures
# the DNS server isn't lying which is a task of adblocking DNS server...
DNSSEC=allow-downgrade
DNSSEC=false
# There is no point of disabling this with adblocking DNS
DNSOverTLS=true
Cache=true

4
etc/systemd/resolved.conf.d/dot-mullvad-adblock-strict.conf
View File

@ -1,6 +1,8 @@
[Resolve]
DNS=2a07:e340::3#adblock.doh.mullvad.net 194.242.2.3#adblock.doh.mullvad.net 193.19.108.3#adblock.doh.mullvad.net
Domains=~.
DNSSEC=true
# non-tech friendliness in case system down for ages. Also DNSSEC ensures
# the DNS server isn't lying which is a task of adblocking DNS server...
DNSSEC=false
DNSOverTLS=true
Cache=true