A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows 7 » Windows 7 Forum
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Does a Duckduckgo privacy equivalent exist for DNS servers?



 
 
Thread Tools Rating: Thread Rating: 2 votes, 5.00 average. Display Modes
  #16  
Old June 14th 15, 04:59 AM posted to alt.os.linux,alt.windows7.general
David W. Hodgins
external usenet poster
 
Posts: 60
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

On Sat, 13 Jun 2015 23:52:59 -0400, David W. Hodgins wrote:

The dns server has a file with the hard coded ip addresses of the root
servers. For bind, that's /var/named/named.ca which contains entries like
M.ROOT-SERVERS.NET. 3600000 IN A 202.12.27.33
M.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:dc3::35


I forgot to add. An up-to-date list of the name servers, and their
addresses can be obtained using the command ...
dig +bufsize=1200 +norec NS . @a.root-servers.net

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
Ads
  #17  
Old June 14th 15, 05:01 AM posted to alt.os.linux,alt.windows7.general
David W. Hodgins
external usenet poster
 
Posts: 60
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

On Sat, 13 Jun 2015 23:57:12 -0400, Werner Obermeier wrote:

"David W. Hodgins" wrote in
:

Skim through the output of "dig +trace abc.com ANY". Y


$ dig +trace abc.com ANY

; DiG 9.9.5-3ubuntu0.2-Ubuntu +trace abc.com ANY
;; global options: +cmd
;; Received 17 bytes from 192.168.1.1#53(192.168.1.1) in 1 ms


Strange I get ...
$ dig +trace abc.com ANY

; DiG 9.9.6-P2 +trace abc.com ANY
;; global options: +cmd
.. 378190 IN NS m.root-servers.net.
.. 378190 IN NS b.root-servers.net.
.. 378190 IN NS j.root-servers.net.
.. 378190 IN NS g.root-servers.net.
.. 378190 IN NS c.root-servers.net.
.. 378190 IN NS e.root-servers.net.
.. 378190 IN NS k.root-servers.net.
.. 378190 IN NS l.root-servers.net.
.. 378190 IN NS f.root-servers.net.
.. 378190 IN NS d.root-servers.net.
.. 378190 IN NS i.root-servers.net.
.. 378190 IN NS a.root-servers.net.
.. 378190 IN NS h.root-servers.net.
;; Received 755 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms

com. 172800 IN NS g.gtld-servers.net.
com. 172800 IN NS f.gtld-servers.net.
com. 172800 IN NS c.gtld-servers.net.
com. 172800 IN NS a.gtld-servers.net.
com. 172800 IN NS j.gtld-servers.net.
com. 172800 IN NS i.gtld-servers.net.
com. 172800 IN NS m.gtld-servers.net.
com. 172800 IN NS e.gtld-servers.net.
com. 172800 IN NS b.gtld-servers.net.
com. 172800 IN NS h.gtld-servers.net.
com. 172800 IN NS l.gtld-servers.net.
com. 172800 IN NS k.gtld-servers.net.
com. 172800 IN NS d.gtld-servers.net.
com. 86400 IN DS 30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A 9184CF C41A5766
com. 86400 IN RRSIG DS 8 1 86400 20150623170000 20150613160000 48613 . aGh9jU5tVvL+nxICfdPAWNtnfTZLhq4zxpTvCK5IIFONpEC9pa AF498G RNOstk21yV+xPzIHevnrYscvfXxhsVa13hZe7akUZiU25EZQFh 1cjgBH BBVvhdNZcv37NG490c+lnYneywdqRuBjKu3ip4cSl/bI/0coCx7Bd93C Fpk=
;; Received 731 bytes from 192.36.148.17#53(i.root-servers.net) in 214 ms

abc.com. 172800 IN NS sens01.dig.com.
abc.com. 172800 IN NS sens02.dig.com.
abc.com. 172800 IN NS orns01.dig.com.
abc.com. 172800 IN NS orns02.dig.com.
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 1 1 0 - CK0QFMDQRCSRU0651QLVA1JQB21IF7UR NS SOA RRSIG DNSKEY NSEC3PARAM
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG NSEC3 8 2 86400 20150617050222 20150610035222 33878 com. BmRR63rU6MqGAP9OAIhSPYjyM6iA1luC5NmUC3+GVlu2al8QbB 2e5qAj cVZnVsV3+GmRY0XPm1p2dEwW1tlMai2zU0Z+bo8EnMK7l95riZ/CRrQz /btectiRyve7gL1jYgUrprivGuA5lHHCaHDufqcphbqOBQc2vGg f5b0Q msM=
KD6RVCED1ISEMEFVU1JS8FFNSMAVV8QM.com. 86400 IN NSEC3 1 1 0 - KD6V1RN93GSA02459NIB8JU7SA48G9O6 NS DS RRSIG
KD6RVCED1ISEMEFVU1JS8FFNSMAVV8QM.com. 86400 IN RRSIG NSEC3 8 2 86400 20150620042402 20150613031402 33878 com. gLyguO9FZ9rFnjwPm/ZjwpFR33wUZNVjZG+qwoopJCuHO8sW0CdCWguF e3SDLBJ7s5fYPfD6j1rhhzCOr+gLAXMcD9rkJJ6AyQpdZVviiT BHXWEO QrxvZ0VglNsVX5JHCQWVgtd17dxriZmbKq3top9cC1O/jRvkYql0FUZn M+g=
;; Received 673 bytes from 192.26.92.30#53(c.gtld-servers.net) in 35 ms

abc.com. 0 IN SOA sens01.dig.com. dns-ops.dig.com. 2015011400 1200 180 1209600 300
abc.com. 300 IN NS orns01.dig.com.
abc.com. 300 IN NS orns02.dig.com.
abc.com. 300 IN NS sens01.dig.com.
abc.com. 300 IN NS sens02.dig.com.
abc.com. 300 IN A 199.181.132.250
abc.com. 300 IN MX 5 cluster6.us.messagelabs.com.
abc.com. 300 IN MX 20 cluster6a.us.messagelabs.com.
abc.com. 300 IN TXT "/1/rOIB3t1pigzf8khjFRjNy05UiC/kANB/vyk40qlZid/H4osE+qil2vo6K7atBZ9L48IujPJ97CAkU3LpItA=="
abc.com. 300 IN TXT "v=spf1 mx ip4:204.128.192.17 ip4:204.128.192.36 ip4:204.128.192.43 ip4:192.195.66.26 ip4:192.195.66.28 ip4:192.195.66.36 -all"
abc.com. 300 IN TXT "MS=ms24761496"
;; Received 579 bytes from 139.104.186.14#53(sens02.dig.com) in 51 ms

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
  #18  
Old June 14th 15, 05:35 AM posted to alt.os.linux,alt.windows7.general
Werner Obermeier
external usenet poster
 
Posts: 104
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

"David W. Hodgins" wrote in
:

Strange I get ...
$ dig +trace abc.com ANY


I thought it was strange also as your note implied there was a lot
to dig through, but I had almost nothing.

Thanks for comparing. Much apprecated. It helps me to try to figure
out what's going on.
  #19  
Old June 14th 15, 05:38 AM posted to alt.os.linux,alt.windows7.general
Werner Obermeier
external usenet poster
 
Posts: 104
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

Werner Obermeier wrote in :

I just found 168 public DNS servers here.
http://www.linuxinternetworks.com/li...dns-addresses/


Here's a much shorter list of only 28 common public dns servers.
DNS Servers http://pcsupport.about.com/od/tipstr...ns-servers.htm

107.150.40.234 = OpenNIC8 public dns server
109.69.8.51 = puntCAT12 public dns server
156.154.70.1 = DNS Advantage public dns server
156.154.71.1 = DNS Advantage public dns server
195.46.39.39 = SafeDNS7 public dns server
195.46.39.40 = SafeDNS7 public dns server
199.85.126.10 = Norton ConnectSafe5 public dns server
199.85.127.10 = Norton ConnectSafe5 public dns server
208.67.220.220 = OpenDNS Home4 public dns server
208.67.222.222 = OpenDNS Home4 public dns server
208.76.50.50 = SmartViper public dns server
208.76.51.51 = SmartViper public dns server
209.244.0.3 = Level31 public dns server
209.244.0.4 = Level31 public dns server
209.88.198.133 = GreenTeamDNS6 public dns server
216.146.35.35 = Dyn public dns server
216.146.36.36 = Dyn public dns server
37.235.1.174 = FreeDNS9 public dns server
37.235.1.177 = FreeDNS9 public dns server
50.116.23.211 = OpenNIC8 public dns server
74.82.42.42 = Hurricane Electric11 public dns server
81.218.119.11 = GreenTeamDNS6 public dns server
8.20.247.20 = Comodo Secure DNS public dns server
8.26.56.26 = Comodo Secure DNS public dns server
84.200.69.80 = DNS.WATCH3 public dns server
84.200.70.40 = DNS.WATCH3 public dns server
8.8.4.4 = Google public dns server
8.8.8.8 = Google public dns server
  #20  
Old June 14th 15, 05:41 AM posted to alt.os.linux,alt.windows7.general
Werner Obermeier
external usenet poster
 
Posts: 104
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

"David W. Hodgins" wrote in
:

I forgot to add. An up-to-date list of the name servers, and their
addresses can be obtained using the command ...
dig +bufsize=1200 +norec NS . @a.root-servers.net


This one outputs 13 servers, which, from what you wrote, is
just about what I would have expected!
Thanks for that hint!

$ dig +bufsize=1200 +norec NS . @a.root-servers.net

; DiG 9.9.5-3ubuntu0.2-Ubuntu +bufsize=1200 +norec NS . @a.root-servers.net
;; global options: +cmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 7180
;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 25

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;. IN NS

;; ANSWER SECTION:
.. 518400 IN NS f.root-servers.net.
.. 518400 IN NS k.root-servers.net.
.. 518400 IN NS a.root-servers.net.
.. 518400 IN NS h.root-servers.net.
.. 518400 IN NS e.root-servers.net.
.. 518400 IN NS i.root-servers.net.
.. 518400 IN NS l.root-servers.net.
.. 518400 IN NS j.root-servers.net.
.. 518400 IN NS c.root-servers.net.
.. 518400 IN NS g.root-servers.net.
.. 518400 IN NS m.root-servers.net.
.. 518400 IN NS b.root-servers.net.
.. 518400 IN NS d.root-servers.net.

;; ADDITIONAL SECTION:
f.root-servers.net. 3600000 IN A 192.5.5.241
f.root-servers.net. 3600000 IN AAAA 2001:500:2f::f
k.root-servers.net. 3600000 IN A 193.0.14.129
k.root-servers.net. 3600000 IN AAAA 2001:7fd::1
a.root-servers.net. 3600000 IN A 198.41.0.4
a.root-servers.net. 3600000 IN AAAA 2001:503:ba3e::2:30
h.root-servers.net. 3600000 IN A 128.63.2.53
h.root-servers.net. 3600000 IN AAAA 2001:500:1::803f:235
e.root-servers.net. 3600000 IN A 192.203.230.10
i.root-servers.net. 3600000 IN A 192.36.148.17
i.root-servers.net. 3600000 IN AAAA 2001:7fe::53
l.root-servers.net. 3600000 IN A 199.7.83.42
l.root-servers.net. 3600000 IN AAAA 2001:500:3::42
j.root-servers.net. 3600000 IN A 192.58.128.30
j.root-servers.net. 3600000 IN AAAA 2001:503:c27::2:30
c.root-servers.net. 3600000 IN A 192.33.4.12
c.root-servers.net. 3600000 IN AAAA 2001:500:2::c
g.root-servers.net. 3600000 IN A 192.112.36.4
m.root-servers.net. 3600000 IN A 202.12.27.33
m.root-servers.net. 3600000 IN AAAA 2001:dc3::35
b.root-servers.net. 3600000 IN A 192.228.79.201
b.root-servers.net. 3600000 IN AAAA 2001:500:84::b
d.root-servers.net. 3600000 IN A 199.7.91.13
d.root-servers.net. 3600000 IN AAAA 2001:500:2d::d

;; Query time: 331 msec
;; SERVER: 198.41.0.4#53(198.41.0.4)
;; WHEN: Sat Jun 13 21:39:36 PDT 2015
;; MSG SIZE rcvd: 755
  #21  
Old June 14th 15, 08:19 AM posted to alt.os.linux,alt.windows7.general
David W. Hodgins
external usenet poster
 
Posts: 60
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

On Sun, 14 Jun 2015 00:41:26 -0400, Werner Obermeier wrote:

dig +bufsize=1200 +norec NS . @a.root-servers.net


Note that any of the root servers can be used, just in case it's the 'a'
server that changes ip address. So
dig +bufsize=1200 +norec NS . @m.root-servers.net
will work too. The m can be any letter from a to m.

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
  #22  
Old June 14th 15, 10:22 AM posted to alt.os.linux,alt.windows7.general
mireero
external usenet poster
 
Posts: 1
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

On 06/14/2015 01:18 AM, Werner Obermeier wrote:
I was debugging a certificate problem when I realized that my DNS
servers were set to Google servers 8.8.8.8 & 4.4.4.2 which, from
a privacy standpoint, may be a bad thing (they remember everything).

Is there a set of DNS servers with a philosophy of NOT remembering
everything ... (sort of like how Duckduckgo promises for browsing)?


Sorry in advance, i haven't read the full thread.

Why not just using your isp dns, anyway they know what you do (and in
case of vpn stuff it doesn't matter).

Just thought, interesting question if using a hotspot, I may read finally

--
mireero
  #24  
Old June 14th 15, 01:32 PM posted to alt.os.linux,alt.windows7.general
Werner Obermeier
external usenet poster
 
Posts: 104
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

mireero wrote in :

Why not just using your isp dns, anyway they know what you do (and in
case of vpn stuff it doesn't matter).


That's a valid point that the ISP *already* knows everything, and, in the
case of VPN or Tor, you're using the DNS server of the VPN or Tor account.

I really have no good counter to that argument.
I'm not sure why *anyone* uses any other server, except for speed reasons.
  #26  
Old June 14th 15, 01:44 PM posted to alt.os.linux,alt.windows7.general
John Hasler
external usenet poster
 
Posts: 62
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

Werner Obermeier writes:
I'm not sure why *anyone* uses any other server, except for speed
reasons.


Because some ISPs are remarkably inept. Others do things like
redirecting failed lookups to a crappy search engine full of ads.
--
John Hasler

Dancing Horse Hill
Elmwood, WI USA
  #27  
Old June 14th 15, 01:49 PM posted to alt.os.linux,alt.windows7.general
Stan Brown
external usenet poster
 
Posts: 2,904
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

On Sun, 14 Jun 2015 11:22:33 +0200, mireero wrote:
Why not just using your isp dns, anyway they know what you do (and in
case of vpn stuff it doesn't matter).


Because, at least in the case of Time Warner, when you type an
invalid domain instead of saying it's invalid they take you to some
site of their choosing. Sometimes it's Time Warner's own site; other
times it's some site that they decided I should see.

--
Stan Brown, Oak Road Systems, Tompkins County, New York, USA
http://OakRoadSystems.com
Shikata ga nai...
  #28  
Old June 14th 15, 02:00 PM posted to alt.os.linux,alt.windows7.general
David W. Hodgins
external usenet poster
 
Posts: 60
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

On Sun, 14 Jun 2015 08:44:24 -0400, John Hasler wrote:

Werner Obermeier writes:
I'm not sure why *anyone* uses any other server, except for speed
reasons.


Because some ISPs are remarkably inept. Others do things like
redirecting failed lookups to a crappy search engine full of ads.


Heh. I'd forgotten about that. If I remember correctly, that was why
I installed, and learned how to use bind ten years ago. The faster
response was just a side benefit.

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
  #29  
Old June 14th 15, 02:16 PM posted to alt.os.linux,alt.windows7.general
Andy Burns[_3_]
external usenet poster
 
Posts: 399
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

Werner Obermeier wrote:

So, if I understood you, any one of these 13 servers is the backbone
of the Internet in that THEY are the master DNS servers?

For example, if all 13 were to fail at once (just theoretical), would
the Internet stop working?


Yes, but just because there are 13 names of root DNS servers, most names
have many actual servers (e.g. there are 150 L servers) in widely spaced
locations using anycast routing.

e.g. there are three L's, two D's and one each of A, E, F, K and I in
the UK.


  #30  
Old June 14th 15, 02:27 PM posted to alt.os.linux,alt.windows7.general
David W. Hodgins
external usenet poster
 
Posts: 60
Default Does a Duckduckgo privacy equivalent exist for DNS servers?

On Sun, 14 Jun 2015 09:16:37 -0400, Andy Burns wrote:

Yes, but just because there are 13 names of root DNS servers, most names
have many actual servers (e.g. there are 150 L servers) in widely spaced
locations using anycast routing.


Ah, yes. I'd forgotten about that. Thanks for the reminder.

Regards, Dave Hodgins

--
Change nomail.afraid.org to ody.ca to reply by email.
(nomail.afraid.org has been set up specifically for
use in usenet. Feel free to use it yourself.)
 




Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off






All times are GMT +1. The time now is 08:41 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.