Which DNS server should a Rostelecom user register: alternative, preferred. What is a DNS server, how to find out your preferred provider address, replace it with Google Public DNS or alternative options

Many owners of home PCs, laptops and tablets use the Internet without completely understanding the principles of its functioning. We can get a much more stable connection than our provider usually provides us with by taking the time to study this issue. One of the ways to improve your network experience is to replace the default DNS address with an alternative one.

What is DNS and what is it for?

First, let's figure out what the meaning of the DNS letter combination is. The full name is Domain Name System, and translated into Russian it means “domain name service.” Every website on the Internet has its own domain name, we see it every day in the address bar of the browser. For example, for the famous social network Facebook it will look like this: https://www.facebook.com. In addition, each site has its own IP address in the form of a digital value, like this: 31.13.65.36.

The DNS server translates the site's domain name into an IP address

The function of DNS is to store data about addresses and domain names of websites. When a letter request for a site name is received, the DNS server returns a numeric value for the resource address.

How to find out which DNS is provided by your ISP

If you periodically have difficulties logging into the Internet, it is better to use setting a specific DNS address rather than automatic configuration. This connection works more stable. To do this, you need to find out the address of your provider. The easiest way is to call the operator of the organization that provides you with Internet service. If this is not possible, find out the DNS address using Windows tools. To do this you need to call the command line.

You must do the following:

  1. Open the “Start” menu, then “All Programs”, on the “Accessories” tab, click “command line”.

    Go to the “Start Menu” and select “Command Prompt”

  2. Alternative method: press the Win and R keys at the same time - in the tab that appears, type the command “cmd” and click “OK”

    On the Run tab, enter the command "cmd" and click "OK"

  3. In the window that appears, enter the command “nslookup” and press “Enter”.

    In the Command Prompt, type "nslookup" and press "Enter"

  4. This way you will get the provider's DNS address value.

    In the “Command Prompt” window, information about the IP address of your provider will appear

Alternative DNS servers on the Internet, review, pros and cons

Each ISP has its own DNS service, but sometimes it makes sense to connect to an alternative server. The reasons may be different:

  • the provider is unable to ensure stable DNS operation;
  • the user seeks to increase the level of protection of his computer;
  • the PC owner wants to increase network speed;
  • the desire to get rid of restrictions on access to information based on territorial location.

Let's look at the best options and try to choose the most suitable one.

Google Public DNS

The service was launched in December 2009 as an experimental service. It is currently the largest public DNS service in the world, processing an average of more than 70 billion queries per day. It uses the CDN (Content Distribution Network) information delivery method. Google Public DNS servers support the Internet Protocol IPv 6.

Video: a detailed and accessible description of installing an alternative DNS from Google

Its undeniable advantages are:

  1. High speed - ensured by the use of the latest technical developments.
  2. Reliability - achieved through the use of powerful servers and an extensive infrastructure.
  3. Security - based on the use of proprietary software.

The only negative is related to the activities of the service - collecting data about users to make money from advertising. This is not a serious security breach, but it could potentially expose your personal information.

Open DNS

Open DNS is the largest, most reliable DNS service on the Internet. Has 12 global data centers. It uses Anycast routing technology, thanks to which it responds to DNS requests faster than other providers. Websites will load faster and you won't have to worry about DNS glitches depending on your ISP. More than 50 customizable filtering categories allow parents to control the sites their children visit. Open DNS blocks sites that try to steal your sensitive information and passwords by pretending they are legitimate sites.

Video: how to set up Open DNS on your home computer

Its advantages:

  1. Quick response to requests thanks to the use of new technologies and an extensive network of servers.
  2. High degree of reliability achieved through the use of the latest equipment.
  3. The ability to stop an Internet attack before it happens - the service filters traffic, it has its own database of malicious sites.
  4. Basic features are provided free of charge.
  5. Setup takes literally minutes.

The disadvantage is the need to register on the service.

DNS WATCH

If you need complete privacy, DNS WATCH is for you. It does not require registration and provides additional protection. No one can tell you which websites you shouldn't visit. By using DNS WATCH services, you no longer have to rely on your ISP when searching the Internet. You can rest assured that no DNS queries are censored. The service does not register Internet requests; you always remain an anonymous user. There is only one drawback - low speed.

Page of the DNS WATCH service providing DNS services

Norton Connect Safe

Norton ConnectSafe will protect your computer from malicious and unwanted Internet resources. Does not require installation of additional hardware and software. It is enough to enter the IP addresses of the DNS service. Is free for non-commercial use.

Video: installing protection for incoming Internet traffic, setting up Norton ConnectSafe

Helps secure your web browsing:

  1. Being a product of Norton, which specializes in Internet security software, it will put a reliable barrier in the way of malicious, fraudulent sites.
  2. Blocks sites with sexually explicit materials.
  3. Makes it possible to limit children's viewing of sites with questionable content.

The service is not a full replacement for an antivirus program installed on the user’s computer. Norton ConnectSafe is your first layer of protection.

Level 3 DNS

The service ranks third in popularity. In addition to DNS services, it offers a large number of other products. Constantly develops new services designed to help business. A leading DNS service provider with a flexible and reliable server network that quickly responds to customer needs. Uses a combination of public and private connectivity via fiber or cloud. They are combined with Layer 3 security solutions and include essential applications, services and DNS functionality. Level 3 DNS allows you to create an ideal hybrid Layer 3 network environment.

Description of the capabilities of the Level 3 DNS service

It is necessary to take into account the fact that the service registers all requests coming from your computer.

Comodo Secure DNS

Comodo Secure DNS is a domain name resolution service that processes DNS requests through its network of redundant DNS servers. It will provide a much more reliable connection than your ISP's servers. If you choose to use Comodo Secure DNS, your PC's network settings will be changed so that all applications that access the Internet will use Comodo Secure DNS servers.

Description of the features available to Comodo Secure DNS users

Comodo Secure DNS gives you a safer, smarter and faster internet. He uses:

  • reliable server infrastructure;
  • highly structured DNS system and Comodo man pages;
  • domain name filtering functions;
  • Secure DNS refers to a list of blocking dangerous sites.

Most additional features are available for a fee.

Open NIC DNS

A non-profit project, it does not charge fees for access to DNS services. Entirely run by volunteers, and free for users. No government can prevent you from visiting your favorite sites. Once you start using OpenNIC DNS servers provided by volunteers, you can be sure that your connection will not be censored. The service has a huge network infrastructure; you can connect to the server located closest to you. You just need to select it from the list.

Description of the goals and policies of the Open NIC DNS service

DNS Settings

After reviewing the capabilities of the services that provide their servers, choose the most suitable one in your opinion. To configure an alternative DNS, use the table with IP addresses.

Table: IP addresses of alternative DNS servers

ServiceDNS 1DNS 2
Google Public DNS8.8.8.8 8.8.4.4.
Open DNS208.67.222.222 208.67.220.220
DNS WATCH82.200.69.80 84.200.70.40
Norton Connect Safe199.85.126.10 199.85.127.10
Level 3 DNS209.244.0.3
4.2.2.1
4.2.2.3
209.244.0.4
4.2.2.2
4.2.2.4
Comodo Secure DNS8.26.56.26 8.20.247.20
Open NIC DNSChoose from the list
https://servers.opennic.org
Choose from the list
https://servers.opennic.org

Having selected the appropriate service, you can begin changing the DNS settings:

  1. Hover your mouse over the “Network” icon and left-click.

    The "Network" icon shows the presence of an Internet connection

  2. In the “Current Connections” tab that appears, select “Network and Sharing Center” and click the left mouse button.

    Left-click on “Network and Sharing Center”

  3. In the new window, select “Local Area Connection”.

    On the “View basic information about network status” tab, left-click on “Local Area Connection”

  4. A new tab will appear, click “Properties”.

    On the tab that appears, click "Properties"

  5. Select “Internet Protocol Version 4 (TCP/IP 4)” and click the “Properties” button again.

    Select “Internet Protocol Version 4 (TCP/IP 4)” and click “Properties”

  6. In the new tab, in the “Use the following DNS server addresses” item, fill in: “Preferred DNS server” and “Alternative DNS server”.

    Fill in the “Preferred DNS server” and “Alternate DNS server” items, click “OK”

  7. Check "Confirm settings on exit".
  8. Click the “OK” button and restart the computer.

Common DNS errors and how to fix them

There are several common DNS errors that users periodically encounter:

  1. The DNS server is not responding, the DNS server address cannot be found.
  2. Windows can't contact the device or resource.
  3. No access to DNS server.

If an error occurs, first of all you need to check whether the Internet cable has fallen out of the computer. If everything is fine, try connecting it directly, bypassing the router. If everything works without the router, try rebooting it. There are many varieties of these devices, but in general terms, the settings for all are almost the same. Let's look at how to do this using the example of one of the models of the famous TP-Link brand:

  1. Enter 192.168.0.1 into your browser's address bar and click search.

    Enter the IP address of the router into the address bar of your browser

  2. In the window that appears, enter your login and password (by default “admin”, if the password has been changed you must remember it).

    Enter your username and password correctly

  3. Click the "Login" button.
  4. In the router control panel that appears, select “System Tools”.

    In the menu that opens, select “System Tools”

  5. The following window will open, in it click “Reboot”.

    In the “System Tools” section, click “Restart”

  6. In the next tab the message “Click this button to reboot the device” will appear; press the button, confirm the reboot, and wait.

After rebooting the router, the error should disappear. Basic device failures happen quite often, do not rush to panic, any problem can be solved on your own.

Quite often, the cause of various DNS errors is problems with the servers of your Internet service provider. If you have already taken the steps listed above, but the error message does not disappear, call your provider, perhaps the reason lies in the incorrect operation of its DNS server.

If the provider’s equipment is working, the router is working properly, the network is accessible, and the browser continues to show an error, the following actions will help:

  • Ask your friends and download the KVRT anti-virus utility onto a removable drive, scan your computer, remove malicious codes;
  • set the DNS address as described in the previous part of the article;
  • update your network card drivers.

How to determine a website's IP address by domain name

Sometimes situations arise in which it is necessary to find out the IP address of a site. There's nothing complicated about it. The simplest way is to install add-ons in the browser. Take the Mozilla Firefox browser as an example.

Your procedure:

  1. Go to your browser settings and select “add-ons”.

    In the extension installation window, click the Add to Firefox button

A globe-shaped icon will appear in the search box in the top bar of your browser. To determine the IP address of the desired site, just open its page. Hover your mouse over the icon and left-click.

You will find out the site's IP address by clicking on the IP finder icon

Another way to set the site address is to use Windows tools:


Both methods are quite simple to implement, but in the second option, be careful - do not rush, enter the command and resource names correctly.

Comfort and convenience when using the Internet largely depends on you. With a minimum of effort, you will get rid of many problems and get the opportunity to reach a new, higher level of network surfing. It is very easy to avoid the shortcomings that are common among our providers' DNS servers. Switch to alternative DNCs.

So, here you go DNS is one of the fundamental things on which the entire Internet is built. This abbreviation stands for Domain Name System, which means domain name system.

I already touched on this issue (the structure of the domain name system) when I talked about it, but only in passing. Today I want to talk about the role of DNS servers in the operation of websites and the Internet as a whole.

Why do we need DNS servers and what are they?

The domain name system operates with full names (Latin letters, numbers, dashes and underscores are allowed when forming them)..120.169.66 is not very informative) and it is easier to operate with them.

The latter relates specifically to the human factor, because it is still more convenient for machines to use IP addresses, which is what they do... But he understands that this is a domain name, which means information about what IP the site is located on, he will be able to receive from the DNS server.

It is on these DNS servers (sometimes they are also called N.S. from the Name Server, i.e. server names) and the entire Internet is supported (like a flat world on three whales standing on a turtle). which does not require direct human participation in its work (if you set it up, it works 24/7). And there are a lot of such DNS servers on the network.

How does DNS work and what does the Hosts file have to do with it?

At the dawn of the Internet, DNS didn't exist at all. But how did the network work then? .120.169.66? The so-called was responsible for this matter then (and now too), where all the hosts of the then small Internet were registered.

Such a file was (and is now) on every user’s computer (yours has it too) connected to the network (see the link above for how to find it).

In the Hosts file several thousand lines were written (according to the number of sites on the Internet at that time), in each of which the IP address was first written, and then the corresponding domain, separated by a space. This is what an entry for my blog would have looked like if it had existed on the Internet twenty-five to thirty years ago:

109.120.169.66 website

Good luck to you! See you soon on the pages of the blog site

You can watch more videos by going to
");">

You might be interested

Server - what is it?
Buying a domain (domain name) using the example of the Reghouse registrar WHOIS services - information about the domain (whose it is, what is its age and history, when it is released) or IP address
The Hosts file - what is it, where is it located in Windows, what should a webmaster do with it and how to remove virus entries from it
Checking for employment and purchasing a domain name, what is the difference between domain registrars and resellers and what is WHOIS How to register a domain (buy a domain name from a registrar)

Sometimes it is necessary to register DNS for a computer with a dynamic IP address. A simple way for this is services like dyndns, described in the recent topic Linking a domain and dynamic IP. Sometimes this approach works quite poorly.

For example, in my situation, the provider Sometimes changes my public IP address. This sometimes happens usually once every few months. In addition, my home computer rarely reboots. During this time, the dyndns service, which I had previously used, managed to send me inactivity notifications a couple of times in order to disable the “unused” account. It is also not possible to switch to a manually registered DNS zone, because sometimes the address still changes. Moreover, you usually find out about this when you need access to your home computer here and now.

To implement the described method, you will need a server on the Internet with a DNS server bind on it. As well as a domain zone, the subdomain of which we will allocate for our computer. An option is described for connecting a Linux computer to a Linux server. To use other operating systems, you will need to read the manuals and modify some steps.

So:
1. We have an installed bind9 server with the server.org domain
2. Create a zone client.server.org.zone:

$ORIGIN.
$TTL 10 ; 10 seconds
client.server.net IN SOA ns1.server.net. hostmaster.server.net. (
18 ; serial
10800 ; refresh (3 hours)
3600 ; retry (1 hour)
604800 ; expire (1 week)
10 ; minimum (10 seconds)
$TTL 3600 ; 1 hour
NS ns1.server.net.
NS ns2.server.net.
MX 10 client.server.net.

Here the servers ns1.server.net and ns2.server.net are the DNS servers for our zone, client.server.net is the address of our home computer

3. generate keys on the client:
client# cd /etc/namedb/keys
client# dnssec-keygen -b 512 -a HMAC-MD5 -v 2 -n HOST client.server.net.

4. Create a file with the key on the server:
server# cd /var/named/chroot/etc
server# vim keys.conf:

Key client.server.net. (
algorithm "HMAC-MD5";
secret "omr5O5so/tZB5XeGuBBf42rrRJRQZB8I9f+uIIxxei8qm7AVgNBprxtcU+FQMzBvU/Y+nyM2xbs/C8kF3eJQUA==";
};

In this case, a symmetric key is used, which is unsafe: if someone has access to the key file on your server, they can use your key to change your zone data. In this case, you can use an asymmetric key.

Set the access rights to the file with the keys:
server# chmod 640 keys.conf
server# chown root:named keys.conf

5. add our zone to named.conf:
include "/etc/keys.conf"
zone "client.server.net" (
type master;
file "zones/client.server.net";
allow-update(
key client.server.net;
};
};

Here is a parameter that allows you to update zone data. In general, after reading the manuals, you can find options for this parameter that allow you to update only one entry in the zone for a given key. That is, you can have a zone with the subdomains client1, client2, etc. registered in it. which will be authorized with the keys key1, key2, etc.

6. Restart the DNS server:
server# /etc/init.d/named reload

7. Create a script on the client that will update the zone data:
#!/bin/bash
IFACE="wlan0"
TTL=3600
SERVER=ns1.example.com
HOSTNAME=foo.example.com
ZONE=example.com
KEYFILE=/root/ddns-keys/Kfoo.example.com.+157+12345.private

New_ip_address=`ifconfig $IFACE | grep "inet addr:" | awk "(print $2)" | awk -F ":" "(print $2)"`
new_ip_address=$(new_ip_address/ /)

Nsupdate -v -k $KEYFILE<< EOF
server$SERVER
zone $ZONE
update delete $HOSTNAME A
update add $HOSTNAME $TTL A $new_ip_address
send
EOF

At the beginning of the script, the corresponding parameters are described: interface, server and zone names, location of the file with the key.

8. All that remains is to configure autostart/automatic address change when changing DNS.
We will do this using a script for NetworkManager:
create a file /etc/NetworkManager/dispatcher.d/20-dyndns.sh:
#!/bin/sh

Iface=$1
state=$2

If [ "x$state" == "xup" ] ; then
/etc/namedb/ddns-update
elif [ "x$state" == "xdown" ]; then
true
fi

Let's make it executable and owned by the root user.

Let's launch, check, use.

Upd: If it doesn’t work, check (set) on the server the rights of named to write to the folder in which the file client.server.org.zone is located
named will create a client.server.org.zone.jnl file there

The following materials were used.

But for now we'll just talk about why you might want to change your DNS server.

Speed ​​increase possible

Third-party DNS servers may be faster than your ISP's DNS servers. This is not guaranteed and will depend on your geographic location - how close third-party DNS servers are to you and how slow your ISP's DNS servers are.

If all you need is good speed, you may or may not see benefits from switching to a third-party DNS server. To find out for sure, you should run a DNS benchmarking tool like Namebench, which will make DNS queries to your current DNS server and other DNS servers, checking how long each of those servers takes to respond.

Popular third-party DNS services, such as Google Public DNS or OpenDNS, may be faster for you. If so, Namebench will let you know.

Please note that Namebench cannot evaluate the effectiveness of each factor. For example, Google Public DNS and OpenDNS participate in , which allows participating DNS services to learn your IP address and respond from IP addresses that are closer to you, thereby increasing communication speeds. Other DNS servers, like those offered by your ISP, are not as adept at implementing such new technologies.

Possible improvement in reliability

This is closely related to the already noted possibility of improving speed. If your ISP doesn't care too much about keeping its DNS servers fast and stable, you may experience periods where websites fail to load or load very slowly due to DNS lookups taking too long. If your ISP isn't doing its job properly, switching to a third-party DNS server may bring you greater reliability.

Parental control

If you have young children and want to set up web filtering, there are many different ways you can do this. One of the easiest ways to set up web filtering is to change your DNS servers to OpenDNS servers. Change the DNS server on your router and you can configure parental control settings on the OpenDNS website, allowing you to block certain categories of websites and view websites accessible from your home network.

This is especially convenient because once you change the settings on your router and set up parental controls on the OpenDNS website, the settings will apply to every device on your home network - PCs running any operating system, game consoles, smartphones, tablets, etc. When a DNS request for the IP address of such a website is sent, OpenDNS returns a different IP address. The user's browser connects to this address and receives a message that the website they are trying to access has been blocked.

Please note that this is not very reliable. A user on your network can simply change their device's DNS server to bypass filtering. Young children won't be able to do this, but teenagers might - just like most other parental controls.

Phishing protection

OpenDNS also performs filtering to block phishing sites. Modern browsers have built-in protection against phishing, but if you're on a network that includes computers running Windows XP and Internet Explorer 6, then using OpenDNS will give all those computers some protection against identity theft that they wouldn't otherwise have. .

Other DNS services do not offer this feature. For example, Google Public DNS does not include content filtering functionality because it aims to function simply as a fast DNS service without any frills.

Means of protection

Third-party DNS servers, such as OpenDNS and Google Public DNS, also offer security features that many providers' DNS servers have not yet implemented. For example, Google Public DNS supports DNSSEC to ensure that DNS requests are properly signed and are trustworthy. Your provider's DNS servers may not yet have such security features implemented.

If SOPA had been passed, no US DNS servers would have supported DNSSEC because SOPA would have outlawed DNSSEC. If Americans wanted the benefits of DNSSEC, they would be forced to use foreign DNS servers.

Accessing geo-blocked content

Special third-party DNS servers may also allow you to access certain geo-restricted content. For example, by switching to Unblock-Us you can access media like Netflix, Hulu and BBC iPlayer no matter where in the world you are. When your computer makes a DNS query, the DNS service does some tunneling to make the service assume that you are somewhere else in the world. This is a convenient feature because it allows you to reach these services from any device just by changing the DNS server on your router.

You shouldn't use a free service as your primary DNS service - switching to it is bound to slow down your web browsing. If you use one of these, you'll need to use a tool like DNS Jumper to quickly switch to it when you need it, and switch back when you're done.

And they work in the same way and do not have this limitation, but on the other hand, you will have to pay for them.

Bypassing web censorship

Some ISPs and governments only block websites at the DNS level. For example, an ISP can “block” example.com by redirecting its ingress DNS to another website. If a website is blocked by this method, replacing your DNS server with a third-party DNS service that does not block the website will allow you to access it. As an example, we can cite an incident that occurred at a time when The Pirate Bay was blocked in the UK. People could change their DNS servers so they could use it again.

Please note that websites are often blocked at the IP level, so this will not always work. For example, a firewall uses many techniques to block websites, including DNS blocking.

Namebench includes an option that tests DNS servers for censorship to determine whether the output of current DNS servers is censored.

If you want to change DNS servers, then you will probably want to change the DNS server on your router, which will have an impact on your entire home network. You can also change the DNS server on a single computer, which will only affect that specific computer.

What DNS services do you use? For what purpose? Share your experience and settings in the comments.

Found a typo? Highlight and press Ctrl + Enter

In this article you will learn everything about the best DNS servers. We have compiled a list where you can find out all the information you need.

Your ISP automatically assigns DNS servers when your router or computer connects to the Internet via DHCP. But you shouldn't use them.

Below are free DNS servers that you can use instead of the assigned ones, the best and most reliable ones, such as those from Google and OpenDNS, can be found below:

Advice. Primary DNS servers are sometimes called preferred DNS servers, and secondary DNS servers are sometimes called alternate DNS servers. The primary and secondary DNS servers can be "mixed and matched" to provide another level of redundancy.

In general, DNS servers are called by all sorts of names such as DNS servers, Internet DNS servers, Internet servers, DNS DNS addresses, etc.

Why use different DNS servers?

One of the reasons why you may would need change the DNS servers assigned by your ISP - this is a suspicion that there is a problem with the ones you are using now. A simple way to test for a DNS server problem is to enter the website's IP address in your browser. If you can navigate to a website with an IP address but not that name, then the DNS server is likely having problems.

Another reason to change DNS servers is if you are looking for more effective service. Many people complain that their ISP-maintained DNS servers are sluggish and contribute to slower overall browsing.

Another increasingly common reason for using third party DNS servers is to prevent your web activity from being logged and to bypass blocking of certain websites.

Be aware, however, that not all DNS servers avoid logging traffic. If this is what you need, make sure you read all the details about the server so you know if it's the one you want to use.

Main functions

Finally, in case of any confusion, free DNS servers do not give you free internet access! You still need an ISP to connect to it for access - DNS servers simply translate IP addresses and domain names.

Verizon DNS servers and other ISP-defined DNS servers. The best DNS servers are presented in the form of a list, which you can find below.

If, on the other hand, you want to use DNS servers that are defined by your specific ISP, such as Verizon, AT&T, Comcast/XFINITY, etc., then do not manually set DNS server addresses manually. They are automatically assigned.


Verizon DNS servers are often listed elsewhere as 4.2.2.1, 4.2.2.2, 4.2.2.3, 4.2.2.4 and/or 4.2.2.5, but they are actually alternatives to the Layer 3 DNS server addresses shown in the table above . Verizon, like most ISPs, prefers to balance DNS server traffic through local automatic assignments. For example, Verizon's primary DNS server in Atlanta, Georgia is 68.238.120.12, and in Chicago it is 68.238.0.12.

Many of the DNS providers listed above have different levels of service (OpenDNS, Norton ConnectSafe, etc.), IPv6 DNS servers (Google, DNS.WATCH, etc.) and location-based servers (OpenNIC).

conclusions

While you don't need to know anything other than what I've included in the table above, this bonus information may be useful for some of you depending on your needs:

  1. The free DNS servers listed above as Level3 will automatically route to the nearest DNS server operated by Level3 Communications, the company that provides most US ISPs with access to the Internet backbone. Alternatives are 4.2.2.1, 4.2.2.2, 4.2.2.3, 4.2.2.4, 4.2.2.5 and 4.2.2.6. These servers are often listed as Verizon's DNS servers, but that's technically not the case. See discussion above.
  2. Verisign says this regarding its free DNS servers: "We will not sell your public DNS data to third parties or redirect your queries to serve you any advertisements." Verisign also offers public IPv6 DNS servers: 2620:74:1b::1:1 and 2620:74:1c::2:2.
  3. Google also offers public IPv6 DNS servers: 2001:4860:4860::8888 and 2001:4860:4860::8844.
  4. DNS.WATCH also has IPv6 DNS servers at 2001:1608:10:25::1c04:b12f and 2001:1608:10:25::9249:d69b. In an unusual but highly appreciated move, DNS.WATCH publishes real-time statistics for both of its free DNS servers. Both servers are located in Germany, which may impact performance if used in the US or other remote locations.
  5. OpenDNS also offers DNS servers that block adult content, called OpenDNS FamilyShield. These DNS servers are 208.67.222.123 and 208.67.220.123. There is also a premium DNS offering called OpenDNS Home VIP.
  6. The free Norton ConnectSafe DNS servers listed above block sites that host malware, phishing and fraud schemes, called Policy 1. Use Policy 2 (199.85.126.20 and 199.85.127.20) to block these sites, as well as pornographic sites. content. Use policy 3 (199.85.126.30 and 199.85.127.30) to block all previously mentioned site categories, as well as those that Norton deems "non-family." Be sure to check out the list of things blocked in Policy 3 - there are some controversial topics here that you may find perfectly acceptable.
  7. GreenTeamDNS "blocks tens of thousands of dangerous sites, which include malware, botnets, adult content, aggressive/violent sites, and advertisements and drug-related sites" according to their FAQ page. Premium accounts have more control.
  8. Register SafeDNS here to filter content in multiple areas.
  9. The DNS servers listed here for OpenNIC are just two of many in the US and around the world. Instead of using the OpenNIC DNS servers listed above, see their full list of public DNS servers here and use the two that are near you, or better yet, have them tell you so automatically here. OpenNIC also offers some public IPv6 DNS servers.
  10. FreeDNS says they "never log DNS queries." Their free DNS servers are located in Austria.
  11. Alternative DNS says its DNS servers "block unwanted advertisements" and that they operate "no query logging." You can register for free on your registration page.
  12. The basic free Yandex DNS servers listed above are also available in IPv6 on channels 2a02:6b8::feed:0ff and 2a02:6b8:0:1::feed:0ff. There are two more free DNS levels available. The first is Safe, 77.88.8.88 and 77.88.8.2 or 2a02:6b8::feed:bad and 2a02:6b8:0:1::feed:bad, which blocks "infected sites, fraudulent sites and bots." The second category is Family, at 77.88.8.7 and 77.88.8.3 or 2a02:6b8::feed:a11 and 2a02:6b8:0:1::feed:a11, which blocks everything Safe does, plus “adult and adults advertising."
  13. UncensoredDNS (formerly censurfridns.dk) DNS servers are uncensored and privately run. The address 91.239.100.100 is anycast from multiple locations, while 89.233.43.71 is one physically located in Copenhagen, Denmark. You can read more about them here. IPv6 versions of its two DNS servers are also available at 2001:67c:28a4:: and 2a01:3a0:53:53::, respectively.
  14. Hurricane Electric also has a public IPv6 DNS server available: 2001:470:20::2.
  15. puntCAT is physically located near Barcelona, ​​Spain. The free IPv6 DNS server version is 2a00:1508:0:4::9.

Perhaps you have questions on the topic “Best DNS servers 2017”? Be sure to write them in the comments on our website.