What are the best DNS Servers for privacy use?

[opnsenseuser]

With 18.7.8 you'll have a devel pkg to install, then you forward unbound to dnscrypt-proxy like here:
https://www.routerperformance.net/opnsense/dnsbl-via-bind-plugin/

Then your DNS is forwarded via port 853 so it wont be intercepted ...

thats really really great! thx very very much!! :-)

[opnsenseuser]

With 18.7.8 you'll have a devel pkg to install, then you forward unbound to dnscrypt-proxy like here:
https://www.routerperformance.net/opnsense/dnsbl-via-bind-plugin/

Then your DNS is forwarded via port 853 so it wont be intercepted ...

sorry, but on 18.7.8 i can´t find the plugin!

[franco]

It's in development mode, so you need -devel installed or type:

# pkg install os-dnscrypt-proxy-devel


Cheers,
Franco

[opnsenseuser]

It's in development mode, so you need -devel installed or type:

# pkg install os-dnscrypt-proxy-devel


Cheers,
Franco

so on 19.1 dev mode it isn´t avaible?

regards,
René

[franco]

I'm seeing it in the list GUI list... os-dnscrypt-proxy-devel ...

[opnsenseuser]

I'm seeing it in the list GUI list... os-dnscrypt-proxy-devel ...

sorry,  there is no new plugin!

1. i did

Code: [Select]

opnsense-code core2. i did

Code: [Select]

opnsense-code plugin3.

Code: [Select]

cd /usr/core4.

Code: [Select]

make upgrade5. did a restart -> no difference!

see my screenshot

[opnsenseuser]

only this

Code: [Select]

pkg install os-dnscrypt-proxy-devel works for me

[mimugmail]

make upgrade in core only upgrades UI, not Kernel or Plugins or pkg ..

[opnsenseuser]

make upgrade in core only upgrades UI, not Kernel or Plugins or pkg ..

i also tried

Code: [Select]

opnsense-update -kr 18.7.8
Fetching kernel-18.7.8-amd64.txz: .. failed

[opnsenseuser]

is not that important. it works with the help of

Code: [Select]

pkg install os-dnscrypt-proxy-devel now without problems. Now it's time to configure.

Thanks again, best regards, René

[mimugmail]

make upgrade in core only upgrades UI, not Kernel or Plugins or pkg ..

i also tried

Code: [Select]

opnsense-update -kr 18.7.8
Fetching kernel-18.7.8-amd64.txz: .. failed

only opnsense-update .. nothing else. -kr would install a kernel and 18.7.8 has no new kernel

[opnsenseuser]

i have two vm´s . the first vm it doesn´t work even after using opnsense-update
the other vm works without any problems.

@mimugmail thx for your support. :-)

@mimugmail will there be a documentation on opnsense wiki?

[mimugmail]

When it's stable, yes. At first you just need the redirect part for Unbound in the link I posted before.
Then enable the service, choose the values you insist, like nolog, dnssec etc. and the program searches the correct and fastest DNS servers for you.

[GDixon]

As for DNS servers I don't recommend adguard.

I use uBLOCK Origin through firefox as a add on and it blocks much more than adguard. Not just a little bit but a whole lot like on one site 56 more blocks.

I'm also searching and trying DNS servers myself currently.

Trying to avoid IDS/IPS and anything that needs a proxy but it looks more and more like that might be the final solution.

[mimugmail]

I'm running dnscrypt here at home, added a Port Forward for every DNS request to localhost 5353 .. works great