Compare commits

...

4 Commits

Author SHA1 Message Date
b1c4d99a9c
Windows/DoH/README.md: extend the configuration instructions
Resolves: #147
2023-02-20 11:56:48 +02:00
4a20f75d3c
etc/systemd/resolved.conf.d: add DNS0 DoT configs
Their website already had the correct syntax for the entries

Ref: #153
2023-02-20 11:49:31 +02:00
8e3244f785
etc/resolv.tsv: add mobileconfig links
This is just the official ones I found, I could link to encrypted-dns.party, but that is a task for later, I can find it without this file

Resolves: #152
2023-02-20 11:43:32 +02:00
fefb6df060
Revert "sway/config.d/autostart-p2p-communication.conf: workaround Briar notifications"
This reverts commit d3a4421128.
2023-02-20 08:00:48 +02:00
6 changed files with 62 additions and 32 deletions

View File

@ -12,4 +12,14 @@ Requires Windows 11.
* Cloudflare antimalware * Cloudflare antimalware
* Mullvad * Mullvad
* Mullvad Adblock * Mullvad Adblock
* Quad9 ECS (Windows 11 defaults include Quad9 default) * Quad9 ECS (Windows 11 defaults include Quad9 default)
## Configuration
Once Windows knows about the DoH servers (DohWellKnownServers.reg), DNS-over
HTTPS can be enabled for:
* All networks: `Windows-I (Settings) -> Network & Internet -> Advanced network settings -> WLAN -> View additional properties -> DNS Server assignment -> Edit`
* Same place for Ethernet etc.
* Specific network: `Windows-I (Settings) -> Network & Internet -> WiFi -> Connected SSID -> DNS server assignment -> Edit`
* Note: if the all networks one is configured, there is a warning about it not being used.

View File

@ -1,7 +1,3 @@
# Very Important Communication Programs, P2P, not expected to get sold # Very Important Communication Programs, P2P, not expected to get sold
exec --no-startup-id flatpak run net.jami.Jami exec --no-startup-id flatpak run net.jami.Jami
exec --no-startup-id flatpak run org.briarproject.Briar//stable
# Workaround https://github.com/flathub/org.briarproject.Briar/issues/11
# runtime version will require bumbing up
#exec --no-startup-id flatpak run org.briarproject.Briar//stable
exec --no-startup-id flatpak run --runtime=org.gnome.Platform//43 org.briarproject.Briar//stable

View File

@ -1,26 +1,26 @@
Provider DoH DoT IPv6 IPv6 IPv4 IPv4 Provider DoH DoT IPv6 IPv6 IPv4 IPv4 Apple MobileConfig
AdGuard https://dns.adguard.com/dns-query dns.adguard.com 2a10:50c0::ad1:ff 2a10:50c0::ad2:ff 94.140.14.14 94.140.15.15 AdGuard https://dns.adguard.com/dns-query dns.adguard.com 2a10:50c0::ad1:ff 2a10:50c0::ad2:ff 94.140.14.14 94.140.15.15 https://adguard.com/en/blog/encrypted-dns-ios-14.html
AdGuard Family https://dns-family.adguard.com/dns-query dns-family.adguard.com 2a10:50c0::bad1:ff 2a10:50c0::bad2:ff 94.140.14.15 94.140.15.16 AdGuard Family https://dns-family.adguard.com/dns-query dns-family.adguard.com 2a10:50c0::bad1:ff 2a10:50c0::bad2:ff 94.140.14.15 94.140.15.16 https://adguard.com/en/blog/encrypted-dns-ios-14.html
BlahDNS DoH-CDN Adblock https://doh1.blahdns.com/dns-query BlahDNS DoH-CDN Adblock https://doh1.blahdns.com/dns-query
BlahDNS DoH-CDN Unfiltered https://doh1.blahdns.com/uncensor BlahDNS DoH-CDN Unfiltered https://doh1.blahdns.com/uncensor
BlahDNS Finland (encrypted-only, needs SNI) https://doh-fi.blahdns.com/dns-query dot-fi.blahdns.com 2a01:4f9:c010:43ce::1 95.216.212.177 BlahDNS Finland (encrypted-only, needs SNI) https://doh-fi.blahdns.com/dns-query dot-fi.blahdns.com 2a01:4f9:c010:43ce::1 95.216.212.177
BlahDNS Germany (encrypted-only, needs SNI) https://doh-de.blahdns.com/dns-query dot-de.blahdns.com 2a01:4f8:c17:ec67::1 78.46.244.143 BlahDNS Germany (encrypted-only, needs SNI) https://doh-de.blahdns.com/dns-query dot-de.blahdns.com 2a01:4f8:c17:ec67::1 78.46.244.143
Cleanbrowsing adult https://doh.cleanbrowsing.org/doh/adult-filter/ adult-filter-dns.cleanbrowsing.org 2a0d:2a00:1::1 2a0d:2a00:2::1 185.228.168.10 185.228.169.11 Cleanbrowsing adult https://doh.cleanbrowsing.org/doh/adult-filter/ adult-filter-dns.cleanbrowsing.org 2a0d:2a00:1::1 2a0d:2a00:2::1 185.228.168.10 185.228.169.11 https://my.cleanbrowsing.org/download-mobile-config.php?filter=adult
Cleanbrowsing family (anti-proxy/VPN/Reddit) https://doh.cleanbrowsing.org/doh/family-filter/ family-filter-dns.cleanbrowsing.org 2a0d:2a00:1:: 2a0d:2a00:2:: 185.228.168.168 185.228.169.168 Cleanbrowsing family (anti-proxy/VPN/Reddit) https://doh.cleanbrowsing.org/doh/family-filter/ family-filter-dns.cleanbrowsing.org 2a0d:2a00:1:: 2a0d:2a00:2:: 185.228.168.168 185.228.169.168 https://my.cleanbrowsing.org/download-mobile-config.php?filter=family
Cleanbrowsing security https://doh.cleanbrowsing.org/doh/security-filter/ security-filter-dns.cleanbrowsing.org 2a0d:2a00:1::2 2a0d:2a00:2::2 185.228.168.9 85.228.169.9 Cleanbrowsing security https://doh.cleanbrowsing.org/doh/security-filter/ security-filter-dns.cleanbrowsing.org 2a0d:2a00:1::2 2a0d:2a00:2::2 185.228.168.9 85.228.169.9 https://my.cleanbrowsing.org/download-mobile-config.php?filter=security
Cloudflare https://cloudflare-dns.com/dns-query cloudflare-dns.com 2606:4700:4700::1001 2606:4700:4700::1111 1.1.1.1 1.0.0.1 Cloudflare https://cloudflare-dns.com/dns-query cloudflare-dns.com 2606:4700:4700::1001 2606:4700:4700::1111 1.1.1.1 1.0.0.1
Cloudflare antimalware https://security.cloudflare-dns.com/dns-query 2606:4700:4700::1112 2606:4700:4700::1002 1.1.1.2 1.0.0.2 Cloudflare antimalware https://security.cloudflare-dns.com/dns-query 2606:4700:4700::1112 2606:4700:4700::1002 1.1.1.2 1.0.0.2
Cloudflare family https://family.cloudflare-dns.com/dns-query 2606:4700:4700::1113 2606:4700:4700::1003 1.1.1.3 1.0.0.3 Cloudflare family https://family.cloudflare-dns.com/dns-query 2606:4700:4700::1113 2606:4700:4700::1003 1.1.1.3 1.0.0.3
Cloudflare MozillaFirefox https://mozilla.cloudflare-dns.com/dns-query Cloudflare MozillaFirefox https://mozilla.cloudflare-dns.com/dns-query
CZ.NIC ODVR https://odvr.nic.cz/dns-query odvr.nic.cz 2001:148f:ffff::1 2001:148f:fffe::1 193.17.47.1 185.43.135.1 CZ.NIC ODVR https://odvr.nic.cz/dns-query odvr.nic.cz 2001:148f:ffff::1 2001:148f:fffe::1 193.17.47.1 185.43.135.1
DNS0 https://dns0.eu dns0.eu 2a0f:fc80:: 2a0f:fc81:: 193.110.81.0 185.253.5.0 DNS0 https://dns0.eu dns0.eu 2a0f:fc80:: 2a0f:fc81:: 193.110.81.0 185.253.5.0 https://www.dns0.eu/dns0.eu.mobileconfig
DNS0 Kids https://kids.dns0.eu kids.dns0.eu 2a0f:fc80::1 2a0f:fc81::1 193.110.81.1 185.253.5.1 DNS0 Kids https://kids.dns0.eu kids.dns0.eu 2a0f:fc80::1 2a0f:fc81::1 193.110.81.1 185.253.5.1 https://www.dns0.eu/kids.dns0.eu.mobileconfig
DNS0 Zero https://zero.dns0.eu zero.dns0.eu 2a0f:fc80::9 2a0f:fc81::9 193.110.81.9 185.253.5.9 DNS0 Zero https://zero.dns0.eu zero.dns0.eu 2a0f:fc80::9 2a0f:fc81::9 193.110.81.9 185.253.5.9 https://www.dns0.eu/zero.dns0.eu.mobileconfig
Mullvad https://doh.mullvad.net/dns-query doh.mullvad.net 2a07:e340::2 194.242.2.2 193.19.108.2 Mullvad https://doh.mullvad.net/dns-query doh.mullvad.net 2a07:e340::2 194.242.2.2 193.19.108.2
Mullvad Adblock https://adblock.doh.mullvad.net/dns-query adblock.doh.mullvad.net 2a07:e340::3 194.242.2.3 193.19.108.3 Mullvad Adblock https://adblock.doh.mullvad.net/dns-query adblock.doh.mullvad.net 2a07:e340::3 194.242.2.3 193.19.108.3
NextDNS https://dns.nextdns.io dns.nextdns.io 2a07:a8c1:: 2a07:a8c0:: 45.90.30.0 45.90.28.0 NextDNS https://dns.nextdns.io dns.nextdns.io 2a07:a8c1:: 2a07:a8c0:: 45.90.30.0 45.90.28.0 https://apple.nextdns.io/
NextDNS Firefox https://firefox.dns.nextdns.io NextDNS Firefox https://firefox.dns.nextdns.io
OpenDNS https://doh.opendns.com/dns-query dns.opendns.com ? (#127) 2620:119:35::35 2620:119:53::53 208.67.222.222 208.67.220.220 OpenDNS https://doh.opendns.com/dns-query dns.opendns.com ? (#127) 2620:119:35::35 2620:119:53::53 208.67.222.222 208.67.220.220
OpenDNS Family https://doh.familyshield.opendns.com/dns-query 208.67.222.123 208.67.220.123 OpenDNS Family https://doh.familyshield.opendns.com/dns-query 208.67.222.123 208.67.220.123
Quad9 https://dns.quad9.net/dns-query dns.quad9.net 2620:fe::fe 2620:fe::9 9.9.9.9 149.112.112.112 Quad9 https://dns.quad9.net/dns-query dns.quad9.net 2620:fe::fe 2620:fe::9 9.9.9.9 149.112.112.112
Quad9 ECS https://dns11.quad9.net/dns-query dns11.quad9.net 2620:fe::11 2620:fe::fe:11 9.9.9.11 149.112.112.11 Quad9 ECS https://dns11.quad9.net/dns-query dns11.quad9.net 2620:fe::11 2620:fe::fe:11 9.9.9.11 149.112.112.11

1 Provider DoH DoT IPv6 IPv6 IPv4 IPv4 Apple MobileConfig
2 AdGuard https://dns.adguard.com/dns-query dns.adguard.com 2a10:50c0::ad1:ff 2a10:50c0::ad2:ff 94.140.14.14 94.140.15.15 https://adguard.com/en/blog/encrypted-dns-ios-14.html
3 AdGuard Family https://dns-family.adguard.com/dns-query dns-family.adguard.com 2a10:50c0::bad1:ff 2a10:50c0::bad2:ff 94.140.14.15 94.140.15.16 https://adguard.com/en/blog/encrypted-dns-ios-14.html
4 BlahDNS DoH-CDN Adblock https://doh1.blahdns.com/dns-query
5 BlahDNS DoH-CDN Unfiltered https://doh1.blahdns.com/uncensor
6 BlahDNS Finland (encrypted-only, needs SNI) https://doh-fi.blahdns.com/dns-query dot-fi.blahdns.com 2a01:4f9:c010:43ce::1 95.216.212.177
7 BlahDNS Germany (encrypted-only, needs SNI) https://doh-de.blahdns.com/dns-query dot-de.blahdns.com 2a01:4f8:c17:ec67::1 78.46.244.143
8 Cleanbrowsing adult https://doh.cleanbrowsing.org/doh/adult-filter/ adult-filter-dns.cleanbrowsing.org 2a0d:2a00:1::1 2a0d:2a00:2::1 185.228.168.10 185.228.169.11 https://my.cleanbrowsing.org/download-mobile-config.php?filter=adult
9 Cleanbrowsing family (anti-proxy/VPN/Reddit) https://doh.cleanbrowsing.org/doh/family-filter/ family-filter-dns.cleanbrowsing.org 2a0d:2a00:1:: 2a0d:2a00:2:: 185.228.168.168 185.228.169.168 https://my.cleanbrowsing.org/download-mobile-config.php?filter=family
10 Cleanbrowsing security https://doh.cleanbrowsing.org/doh/security-filter/ security-filter-dns.cleanbrowsing.org 2a0d:2a00:1::2 2a0d:2a00:2::2 185.228.168.9 85.228.169.9 https://my.cleanbrowsing.org/download-mobile-config.php?filter=security
11 Cloudflare https://cloudflare-dns.com/dns-query cloudflare-dns.com 2606:4700:4700::1001 2606:4700:4700::1111 1.1.1.1 1.0.0.1
12 Cloudflare antimalware https://security.cloudflare-dns.com/dns-query 2606:4700:4700::1112 2606:4700:4700::1002 1.1.1.2 1.0.0.2
13 Cloudflare family https://family.cloudflare-dns.com/dns-query 2606:4700:4700::1113 2606:4700:4700::1003 1.1.1.3 1.0.0.3
14 Cloudflare MozillaFirefox https://mozilla.cloudflare-dns.com/dns-query
15 CZ.NIC ODVR https://odvr.nic.cz/dns-query odvr.nic.cz 2001:148f:ffff::1 2001:148f:fffe::1 193.17.47.1 185.43.135.1
16 DNS0 https://dns0.eu dns0.eu 2a0f:fc80:: 2a0f:fc81:: 193.110.81.0 185.253.5.0 https://www.dns0.eu/dns0.eu.mobileconfig
17 DNS0 Kids https://kids.dns0.eu kids.dns0.eu 2a0f:fc80::1 2a0f:fc81::1 193.110.81.1 185.253.5.1 https://www.dns0.eu/kids.dns0.eu.mobileconfig
18 DNS0 Zero https://zero.dns0.eu zero.dns0.eu 2a0f:fc80::9 2a0f:fc81::9 193.110.81.9 185.253.5.9 https://www.dns0.eu/zero.dns0.eu.mobileconfig
19 Mullvad https://doh.mullvad.net/dns-query doh.mullvad.net 2a07:e340::2 194.242.2.2 193.19.108.2
20 Mullvad Adblock https://adblock.doh.mullvad.net/dns-query adblock.doh.mullvad.net 2a07:e340::3 194.242.2.3 193.19.108.3
21 NextDNS https://dns.nextdns.io dns.nextdns.io 2a07:a8c1:: 2a07:a8c0:: 45.90.30.0 45.90.28.0 https://apple.nextdns.io/
22 NextDNS Firefox https://firefox.dns.nextdns.io
23 OpenDNS https://doh.opendns.com/dns-query dns.opendns.com ? (#127) 2620:119:35::35 2620:119:53::53 208.67.222.222 208.67.220.220
24 OpenDNS Family https://doh.familyshield.opendns.com/dns-query 208.67.222.123 208.67.220.123
25 Quad9 https://dns.quad9.net/dns-query dns.quad9.net 2620:fe::fe 2620:fe::9 9.9.9.9 149.112.112.112
26 Quad9 ECS https://dns11.quad9.net/dns-query dns11.quad9.net 2620:fe::11 2620:fe::fe:11 9.9.9.11 149.112.112.11

View File

@ -0,0 +1,8 @@
[Resolve]
DNS=193.110.81.1#kids.dns0.eu
DNS=2a0f:fc80::1#kids.dns0.eu
DNS=185.253.5.1#kids.dns0.eu
DNS=2a0f:fc81::1#kids.dns0.eu
Domains=~.
DNSOverTLS=yes
Cache=yes

View File

@ -0,0 +1,8 @@
[Resolve]
DNS=193.110.81.9#zero.dns0.eu
DNS=2a0f:fc80::9#zero.dns0.eu
DNS=185.253.5.9#zero.dns0.eu
DNS=2a0f:fc81::9#zero.dns0.eu
Domains=~.
DNSOverTLS=yes
Cache=yes

View File

@ -0,0 +1,8 @@
[Resolve]
DNS=193.110.81.0#dns0.eu
DNS=2a0f:fc80::#dns0.eu
DNS=185.253.5.0#dns0.eu
DNS=2a0f:fc81::#dns0.eu
Domains=~.
DNSOverTLS=yes
Cache=yes