From a14446ed71bf95e771ab914e3885b53e084d85d6 Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Mon, 29 Apr 2024 08:29:07 +0300 Subject: [PATCH] unbound/dns-over-tls.conf: add Cloudflare, Mullvad & Control D This is now practically https://www.privacyguides.org/en/dns/ plus Appliedprivacy --- etc/unbound/unbound.conf.d/dns-over-tls.conf | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/etc/unbound/unbound.conf.d/dns-over-tls.conf b/etc/unbound/unbound.conf.d/dns-over-tls.conf index cc1f0a6e..7bb82bdc 100644 --- a/etc/unbound/unbound.conf.d/dns-over-tls.conf +++ b/etc/unbound/unbound.conf.d/dns-over-tls.conf @@ -12,6 +12,8 @@ server: # This list is for my travel laptop to have at least one DoT443 server # which seems to be applied-privacy.net. They advice having multiple DoT servers # for redundancy and as they don't filter, it's best I use other non-filtering ones. +# Since then this expanded to include . +# just look at git blame... forward-zone: name: "." @@ -23,6 +25,22 @@ forward-zone: forward-addr: 2a02:1b8:10:234::2@853#dot1.applied-privacy.net forward-addr: 146.255.56.98@853#dot1.applied-privacy.net + # Cloudflare unfiltered, anycast, no ECS + forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com + forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com + forward-addr: 1.1.1.1@853#cloudflare-dns.com + forward-addr: 1.0.0.1@853#cloudflare-dns.com + + # Mullvad unfiltered, Anycast Sweden, no ECS + forward-addr: 194.242.2.2@853#dns.mullvad.net + forward-addr: 2a07:e340::2@853#dns.mullvad.net + + # Control D Free DNS unfilterd, anycast, no ECS + forward-addr: 76.76.2.0@853#p0.freedns.controld.com + forward-addr: 2606:1a40::@853#s0.freedns.controld.com + forward-addr: 76.76.10.0@853#p0.freedns.controld.com + forward-addr: 2606:1a40:1::@853#s0.freedns.controld.com + # Quad9 unfiltered, anycast, no ECS, no DNSSEC (Unbound does that) forward-addr: 2620:fe::fe:10@853#dns10.quad9.net forward-addr: 2620:fe::fe:10@8853#dns10.quad9.net