Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2024-10-31 23:49:25 +01:00
Code Issues Projects Releases Wiki Activity

Compare commits

base: Mikaela:4b7eff36b228e5a62d2d0e7d9e7fd9cf38260e63
Branches Tags
Mikaela:cxefa
...
compare: Mikaela:83d53b8c170f574826faf1f67d358dd429255700
Branches Tags
Mikaela:cxefa

5 Commits
4b7eff36b2 ... 83d53b8c17

Author SHA1 Message Date
Aminda Suomalainen
83d53b8c17
systemd-resolved/10-dot-cloudflare.conf: add malicious domain filtering and alternative SNI 2024-05-15 20:38:49 +03:00
Aminda Suomalainen
ef7584566f
systemd/resolved/10-dot-{443,adguard,dns0}.conf: fix server order 2024-05-15 20:33:23 +03:00
Aminda Suomalainen
7f918cc797
systemd/resolved.conf.d/README: note my scripts existing 2024-05-15 20:29:59 +03:00
Aminda Suomalainen
cb3c944d47
systemd-resolved: note server priority 2024-05-15 20:23:27 +03:00
Aminda Suomalainen
1f5815b54e
hosts/dns: comment the IPv4-as-IPv6 hack, uncomment proper IPv6 2024-05-15 17:44:50 +03:00
6 changed files with 45 additions and 31 deletions
Show Stats Expand all files Collapse all files

48
etc/hosts/dns
View File

@ -34,10 +34,10 @@
# other side of the country at best and different country at worst. Thus # other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system # attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break). # resolver which does IPv6 if IPv4 breaks, even if ECH will break).
#2a0f:fc80:: dns0.eu 2a0f:fc80:: dns0.eu
#2a0f:fc81:: dns0.eu 2a0f:fc81:: dns0.eu
::ffff:193.110.81.0 dns0.eu #::ffff:193.110.81.0 dns0.eu
::ffff:185.253.5.0 dns0.eu #::ffff:185.253.5.0 dns0.eu
# DNS0 Zero # DNS0 Zero
193.110.81.9 zero.dns0.eu 193.110.81.9 zero.dns0.eu
@ -46,10 +46,10 @@
# other side of the country at best and different country at worst. Thus # other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system # attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break). # resolver which does IPv6 if IPv4 breaks, even if ECH will break).
#2a0f:fc80::9 zero.dns0.eu 2a0f:fc80::9 zero.dns0.eu
#2a0f:fc81::9 zero.dns0.eu 2a0f:fc81::9 zero.dns0.eu
::ffff:193.110.81.9 zero.dns0.eu #::ffff:193.110.81.9 zero.dns0.eu
::ffff:185.253.5.9 zero.dns0.eu #::ffff:185.253.5.9 zero.dns0.eu
# DNS0 Kids # DNS0 Kids
193.110.81.1 kids.dns0.eu 193.110.81.1 kids.dns0.eu
@ -70,10 +70,10 @@
# other side of the country at best and different country at worst. Thus # other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system # attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break). # resolver which does IPv6 if IPv4 breaks, even if ECH will break).
#2a0f:fc80::ffff open.dns0.eu 2a0f:fc80::ffff open.dns0.eu
#2a0f:fc81::ffff open.dns0.eu 2a0f:fc81::ffff open.dns0.eu
::ffff:193.110.81.254 open.dns0.eu #::ffff:193.110.81.254 open.dns0.eu
::ffff:185.253.5.254 open.dns0.eu #::ffff:185.253.5.254 open.dns0.eu
# Cloudflare # Cloudflare
1.1.1.1 cloudflare-dns.com one.one.one.one 1.1.1.1 cloudflare-dns.com one.one.one.one
@ -97,10 +97,10 @@
# other side of the country at best and different country at worst. Thus # other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system # attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break). # resolver which does IPv6 if IPv4 breaks, even if ECH will break).
#2a10:50c0::ad1:ff dns.adguard-dns.com 2a10:50c0::ad1:ff dns.adguard-dns.com
#2a10:50c0::ad2:ff dns.adguard-dns.com 2a10:50c0::ad2:ff dns.adguard-dns.com
::ffff:94.140.14.14 dns.adguard-dns.com #::ffff:94.140.14.14 dns.adguard-dns.com
::ffff:94.140.15.15 dns.adguard-dns.com #::ffff:94.140.15.15 dns.adguard-dns.com
# AdGuard Unfiltered # AdGuard Unfiltered
94.140.14.140 unfiltered.adguard-dns.com 94.140.14.140 unfiltered.adguard-dns.com
@ -109,10 +109,10 @@
# other side of the country at best and different country at worst. Thus # other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system # attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break). # resolver which does IPv6 if IPv4 breaks, even if ECH will break).
#2a10:50c0::1:ff unfiltered.adguard-dns.com 2a10:50c0::1:ff unfiltered.adguard-dns.com
#2a10:50c0::2:ff unfiltered.adguard-dns.com 2a10:50c0::2:ff unfiltered.adguard-dns.com
::ffff:94.140.14.140 unfiltered.adguard-dns.com #::ffff:94.140.14.140 unfiltered.adguard-dns.com
::ffff:94.140.14.141 unfiltered.adguard-dns.com #::ffff:94.140.14.141 unfiltered.adguard-dns.com
# AdGuard Family # AdGuard Family
94.140.14.15 family.adguard-dns.com 94.140.14.15 family.adguard-dns.com
@ -121,10 +121,10 @@
# other side of the country at best and different country at worst. Thus # other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system # attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break). # resolver which does IPv6 if IPv4 breaks, even if ECH will break).
#2a10:50c0::bad1:ff family.adguard-dns.com 2a10:50c0::bad1:ff family.adguard-dns.com
#2a10:50c0::bad2:ff family.adguard-dns.com 2a10:50c0::bad2:ff family.adguard-dns.com
::ffff:94.140.14.15 family.adguard-dns.com #::ffff:94.140.14.15 family.adguard-dns.com
::ffff:94.140.15.16 family.adguard-dns.com #::ffff:94.140.15.16 family.adguard-dns.com
# Google DNS # Google DNS
8.8.8.8 dns.google dns.google.com 8.8.8.8 dns.google dns.google.com

2
etc/systemd/resolved.conf.d/10-dot-443.conf
View File

@ -1,7 +1,7 @@
[Resolve] [Resolve]
DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
# OK, this is not 443, but it bothers me to not have both ports used. # OK, this is not 443, but it bothers me to not have both ports used.
DNS=[2a02:1b8:10:234::2]:853#dot1.applied-privacy.net 146.255.56.98:853#dot1.applied-privacy.net DNS=[2a02:1b8:10:234::2]:853#dot1.applied-privacy.net 146.255.56.98:853#dot1.applied-privacy.net
DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
#DNSOverTLS=true #DNSOverTLS=true
# vim: filetype=systemd # vim: filetype=systemd

2
etc/systemd/resolved.conf.d/10-dot-adguard.conf
View File

@ -1,5 +1,5 @@
[Resolve] [Resolve]
DNS=2a10:50c0::ad1:ff#dns.adguard.com 94.140.14.14#dns.adguard.com 2a10:50c0::ad2:ff#dns.adguard.com 94.140.15.15#dns.adguard.com DNS=94.140.14.14#dns.adguard.com 94.140.15.15#dns.adguard.com 2a10:50c0::ad1:ff#dns.adguard.com 2a10:50c0::ad2:ff#dns.adguard.com
#DNSOverTLS=true #DNSOverTLS=true
# vim: filetype=systemd # vim: filetype=systemd

5
etc/systemd/resolved.conf.d/10-dot-cloudflare.conf
View File

@ -1,5 +1,8 @@
[Resolve] [Resolve]
DNS=2606:4700:4700::1111#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 1.1.1.1#cloudflare-dns.com # Unfiltered
#DNS=2606:4700:4700::1111#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 1.1.1.1#cloudflare-dns.com 2606:4700:4700::1111#one.one.one.one 1.1.1.1#one.one.one.one 1.0.0.1#one.one.one.one 2606:4700:4700::1001#one.one.one.one
# Malicious domain filtering
DNS=2606:4700:4700::1112#security.cloudflare-dns.com 2606:4700:4700::1002#security.cloudflare-dns.com 1.1.1.2#security.cloudflare-dns.com 1.0.0.2#security.cloudflare-dns.com
#DNSOverTLS=true #DNSOverTLS=true
# vim: filetype=systemd # vim: filetype=systemd

8
etc/systemd/resolved.conf.d/10-dot-dns0.conf
View File

@ -1,8 +1,8 @@
[Resolve] [Resolve]
DNS=2a0f:fc80::#dns0.eu 2a0f:fc81::#dns0.eu 193.110.81.0#dns0.eu 185.253.5.0#dns0.eu DNS=193.110.81.0#dns0.eu 185.253.5.0#dns0.eu 2a0f:fc80::#dns0.eu 2a0f:fc81::#dns0.eu
#DNS=2a0f:fc80::1#kids.dns0.eu 2a0f:fc81::1#kids.dns0.eu 193.110.81.1#kids.dns0.eu 185.253.5.1#kids.dns0.eu #DNS=193.110.81.1#kids.dns0.eu 185.253.5.1#kids.dns0.eu 2a0f:fc80::1#kids.dns0.eu 2a0f:fc81::1#kids.dns0.eu
#DNS=2a0f:fc80::ffff#open.dns0.eu 2a0f:fc81::ffff#open.dns0.eu 193.110.81.254#open.dns0.eu 185.253.5.254#open.dns0.eu #DNS=193.110.81.254#open.dns0.eu 185.253.5.254#open.dns0.eu 2a0f:fc80::ffff#open.dns0.eu 2a0f:fc81::ffff#open.dns0.eu
#DNS=2a0f:fc80::9#zero.dns0.eu 2a0f:fc81::9#zero.dns0.eu 193.110.81.9#zero.dns0.eu 185.253.5.9#zero.dns0.eu #DNS=193.110.81.9#zero.dns0.eu 185.253.5.9#zero.dns0.eu 2a0f:fc80::9#zero.dns0.eu 2a0f:fc81::9#zero.dns0.eu
#DNSOverTLS=true #DNSOverTLS=true
# vim: filetype=systemd # vim: filetype=systemd

11
etc/systemd/resolved.conf.d/README.md
View File

@ -17,6 +17,9 @@
## Quickstart ## Quickstart
This is also done by `../../systemd-resolv.conf-restore.bash` which takes
into account more circumstances...
```bash ```bash
sudo systemctl enable --now systemd-resolved.service sudo systemctl enable --now systemd-resolved.service
sudo ln -rsf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf sudo ln -rsf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
@ -24,6 +27,10 @@ sudo ln -rsf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
sudo systemctl restart systemd-resolved sudo systemctl restart systemd-resolved
``` ```
...but `../../systemd-resolv.conf-generate.bash` **is better.** Although
`../../resolv.conf-generate.bash` **is the best** this repository has to
offer.
## Files explained ## Files explained
- `00-defaults.conf` - configuration that should be used everywhere. - `00-defaults.conf` - configuration that should be used everywhere.
@ -70,6 +77,10 @@ sudo systemctl restart systemd-resolved
- I am actually running Unbound simultaneously with `resolv.conf` pointing - I am actually running Unbound simultaneously with `resolv.conf` pointing
to both with `options rotate edns0 trust-ad` which might workaround that to both with `options rotate edns0 trust-ad` which might workaround that
potential issue. potential issue.
- DNS server priority is the one they are specified in. The first working one
will be used when it won't work anymore and then the next is used as long
as it works and then it's back to the beginning.
- https://github.com/systemd/systemd/issues/16322#issuecomment-724143641
Other links I have found important and my files are based on: Other links I have found important and my files are based on: