Compare commits

..

No commits in common. "83d53b8c170f574826faf1f67d358dd429255700" and "4b7eff36b228e5a62d2d0e7d9e7fd9cf38260e63" have entirely different histories.

6 changed files with 31 additions and 45 deletions

View File

@ -34,10 +34,10 @@
# other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break).
2a0f:fc80:: dns0.eu
2a0f:fc81:: dns0.eu
#::ffff:193.110.81.0 dns0.eu
#::ffff:185.253.5.0 dns0.eu
#2a0f:fc80:: dns0.eu
#2a0f:fc81:: dns0.eu
::ffff:193.110.81.0 dns0.eu
::ffff:185.253.5.0 dns0.eu
# DNS0 Zero
193.110.81.9 zero.dns0.eu
@ -46,10 +46,10 @@
# other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break).
2a0f:fc80::9 zero.dns0.eu
2a0f:fc81::9 zero.dns0.eu
#::ffff:193.110.81.9 zero.dns0.eu
#::ffff:185.253.5.9 zero.dns0.eu
#2a0f:fc80::9 zero.dns0.eu
#2a0f:fc81::9 zero.dns0.eu
::ffff:193.110.81.9 zero.dns0.eu
::ffff:185.253.5.9 zero.dns0.eu
# DNS0 Kids
193.110.81.1 kids.dns0.eu
@ -70,10 +70,10 @@
# other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break).
2a0f:fc80::ffff open.dns0.eu
2a0f:fc81::ffff open.dns0.eu
#::ffff:193.110.81.254 open.dns0.eu
#::ffff:185.253.5.254 open.dns0.eu
#2a0f:fc80::ffff open.dns0.eu
#2a0f:fc81::ffff open.dns0.eu
::ffff:193.110.81.254 open.dns0.eu
::ffff:185.253.5.254 open.dns0.eu
# Cloudflare
1.1.1.1 cloudflare-dns.com one.one.one.one
@ -97,10 +97,10 @@
# other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break).
2a10:50c0::ad1:ff dns.adguard-dns.com
2a10:50c0::ad2:ff dns.adguard-dns.com
#::ffff:94.140.14.14 dns.adguard-dns.com
#::ffff:94.140.15.15 dns.adguard-dns.com
#2a10:50c0::ad1:ff dns.adguard-dns.com
#2a10:50c0::ad2:ff dns.adguard-dns.com
::ffff:94.140.14.14 dns.adguard-dns.com
::ffff:94.140.15.15 dns.adguard-dns.com
# AdGuard Unfiltered
94.140.14.140 unfiltered.adguard-dns.com
@ -109,10 +109,10 @@
# other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break).
2a10:50c0::1:ff unfiltered.adguard-dns.com
2a10:50c0::2:ff unfiltered.adguard-dns.com
#::ffff:94.140.14.140 unfiltered.adguard-dns.com
#::ffff:94.140.14.141 unfiltered.adguard-dns.com
#2a10:50c0::1:ff unfiltered.adguard-dns.com
#2a10:50c0::2:ff unfiltered.adguard-dns.com
::ffff:94.140.14.140 unfiltered.adguard-dns.com
::ffff:94.140.14.141 unfiltered.adguard-dns.com
# AdGuard Family
94.140.14.15 family.adguard-dns.com
@ -121,10 +121,10 @@
# other side of the country at best and different country at worst. Thus
# attempt to make everything only use it for IPv4 (browser fallback is system
# resolver which does IPv6 if IPv4 breaks, even if ECH will break).
2a10:50c0::bad1:ff family.adguard-dns.com
2a10:50c0::bad2:ff family.adguard-dns.com
#::ffff:94.140.14.15 family.adguard-dns.com
#::ffff:94.140.15.16 family.adguard-dns.com
#2a10:50c0::bad1:ff family.adguard-dns.com
#2a10:50c0::bad2:ff family.adguard-dns.com
::ffff:94.140.14.15 family.adguard-dns.com
::ffff:94.140.15.16 family.adguard-dns.com
# Google DNS
8.8.8.8 dns.google dns.google.com

View File

@ -1,7 +1,7 @@
[Resolve]
DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
# OK, this is not 443, but it bothers me to not have both ports used.
DNS=[2a02:1b8:10:234::2]:853#dot1.applied-privacy.net 146.255.56.98:853#dot1.applied-privacy.net
DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
#DNSOverTLS=true
# vim: filetype=systemd

View File

@ -1,5 +1,5 @@
[Resolve]
DNS=94.140.14.14#dns.adguard.com 94.140.15.15#dns.adguard.com 2a10:50c0::ad1:ff#dns.adguard.com 2a10:50c0::ad2:ff#dns.adguard.com
DNS=2a10:50c0::ad1:ff#dns.adguard.com 94.140.14.14#dns.adguard.com 2a10:50c0::ad2:ff#dns.adguard.com 94.140.15.15#dns.adguard.com
#DNSOverTLS=true
# vim: filetype=systemd

View File

@ -1,8 +1,5 @@
[Resolve]
# Unfiltered
#DNS=2606:4700:4700::1111#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 1.1.1.1#cloudflare-dns.com 2606:4700:4700::1111#one.one.one.one 1.1.1.1#one.one.one.one 1.0.0.1#one.one.one.one 2606:4700:4700::1001#one.one.one.one
# Malicious domain filtering
DNS=2606:4700:4700::1112#security.cloudflare-dns.com 2606:4700:4700::1002#security.cloudflare-dns.com 1.1.1.2#security.cloudflare-dns.com 1.0.0.2#security.cloudflare-dns.com
DNS=2606:4700:4700::1111#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 1.1.1.1#cloudflare-dns.com
#DNSOverTLS=true
# vim: filetype=systemd

View File

@ -1,8 +1,8 @@
[Resolve]
DNS=193.110.81.0#dns0.eu 185.253.5.0#dns0.eu 2a0f:fc80::#dns0.eu 2a0f:fc81::#dns0.eu
#DNS=193.110.81.1#kids.dns0.eu 185.253.5.1#kids.dns0.eu 2a0f:fc80::1#kids.dns0.eu 2a0f:fc81::1#kids.dns0.eu
#DNS=193.110.81.254#open.dns0.eu 185.253.5.254#open.dns0.eu 2a0f:fc80::ffff#open.dns0.eu 2a0f:fc81::ffff#open.dns0.eu
#DNS=193.110.81.9#zero.dns0.eu 185.253.5.9#zero.dns0.eu 2a0f:fc80::9#zero.dns0.eu 2a0f:fc81::9#zero.dns0.eu
DNS=2a0f:fc80::#dns0.eu 2a0f:fc81::#dns0.eu 193.110.81.0#dns0.eu 185.253.5.0#dns0.eu
#DNS=2a0f:fc80::1#kids.dns0.eu 2a0f:fc81::1#kids.dns0.eu 193.110.81.1#kids.dns0.eu 185.253.5.1#kids.dns0.eu
#DNS=2a0f:fc80::ffff#open.dns0.eu 2a0f:fc81::ffff#open.dns0.eu 193.110.81.254#open.dns0.eu 185.253.5.254#open.dns0.eu
#DNS=2a0f:fc80::9#zero.dns0.eu 2a0f:fc81::9#zero.dns0.eu 193.110.81.9#zero.dns0.eu 185.253.5.9#zero.dns0.eu
#DNSOverTLS=true
# vim: filetype=systemd

View File

@ -17,9 +17,6 @@
## Quickstart
This is also done by `../../systemd-resolv.conf-restore.bash` which takes
into account more circumstances...
```bash
sudo systemctl enable --now systemd-resolved.service
sudo ln -rsf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
@ -27,10 +24,6 @@ sudo ln -rsf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
sudo systemctl restart systemd-resolved
```
...but `../../systemd-resolv.conf-generate.bash` **is better.** Although
`../../resolv.conf-generate.bash` **is the best** this repository has to
offer.
## Files explained
- `00-defaults.conf` - configuration that should be used everywhere.
@ -77,10 +70,6 @@ offer.
- I am actually running Unbound simultaneously with `resolv.conf` pointing
to both with `options rotate edns0 trust-ad` which might workaround that
potential issue.
- DNS server priority is the one they are specified in. The first working one
will be used when it won't work anymore and then the next is used as long
as it works and then it's back to the beginning.
- https://github.com/systemd/systemd/issues/16322#issuecomment-724143641
Other links I have found important and my files are based on: