Jump to content

I've been reading about which are the best DNS regarding security, I've come to the conclusion that thes best ones are Comodo Secure DNS and OpenDNS.

Websites appear to have contradictory information, so I couldn't really pick one from those two. I read that comodo protects against malware websites while opendns is phising only. Since comodo doesn't have ipv6 dns, I ended up setting Comodo secure dns for ipv4 and Opendns for ipv6 on my router. WIll this work fine?

Which ipv4 and ipv6 DNS do you use?

Ryzen 5 2600X / ASRock Fatal1ty B450 Gaming K4 / G.Skill RIPJAWS V 16GB (2X8) 3000Mhz CL15 / Gigabyte RTX 2060 Super Gaming 8GB OC / Corsair RM650X 2018 / Crucial BX500 240GB / Seagate Barracauda 2TB 7200RPM Cooler Master MasterBox E500L /  ASUS TUF Gaming VG27WQ // Rog Orion / Corsair Harpoon RGB Pro / Cooler Master MasterKeys Lite L / Xbox One Red Sport  Special Edition Controller for Windows
Link to comment
https://linustechtips.com/topic/1090850-best-dns-for-security/
Share on other sites

Link to post
Share on other sites

i use 1.1.1.1, it just works.

Main Rig: CPU: AMD Ryzen™ 9 3950X Processor (Stock, -0.1V offset)  /// Motherboard: Asus Pro WS X570-Ace /// CPU Cooler: Deepcool GamerStorm Castle 360 RGB V2 /// GPU: Gigabyte AORUS GeForce® RTX 2080 SUPER™ 8G /// RAM: G.SKILL Ripjaws V 128GB (4x32GB) 3200Mhz CL16 /// Chassis: Fractal Design Define R6 USB-C Blackout TG /// PSU: Corsair RM850i /// Storage: 500GB Samsung 970 EVO Plus NVMe (boot) + 1TB WD Black SN750 NVMe (Working Drive) + 2x 1TB Samsung 850 EVO 2.5" SATA SSD RAID0 (Game Library) + 2TB Seagate BarraCuda (Backup) /// OS: Windows 10 Pro

 

Peripherals (Main Rig): Mouse: Logitech MX Master 3 + Logitech G903 Lightspeed /// Keyboard: Keychron Q1 ANSI - JWK Lavender Linear Switches (TX Switch Film, Krytox 205g0), Durock V2 Stabilisers, Polycarbonate Plate, Tape Mod, GMK Blue Samurai + Keychron K4 V2 Hotswap RGB Aluminum Frame - Gateron Milky Black (Deskeys Switch Film, Krytox 205g0), Foam Mod, Tape Mod, GMK Rainy Day PBT Clones /// Tablet: Wacom Intuos M BT /// Monitor: 4x LG 27UL500-W (4K IPS Freesync) /// DAC: Focusrite Scarlett 2i2 /// Speakers: Logitech Z625 /// Mic: Focusrite CM25 MkII /// Headphones: Audio-Technica ATH-M50x, ATH-LS70iS IEMs /// Racing Wheel: Logitech G920 Driving Force with Shifter /// Eye Tracker: Steelseries Sentry  /// External Drives: 500GB Samsung T5 SSD (Working Drive)

 

Home Server - NASty: CPU: AMD Ryzen™ 7 2700x Processor /// Motherboard: Asus PRIME X470-Pro  /// CPU Cooler: be quiet! Dark Rock Pro 4 /// GPU: Gigabyte GeForce® GT 1030 OC 2G /// RAM: G.SKILL TridentZ RGB 64GB (4x16GB) 3200Mhz CL16 /// Chassis: Fractal Design Define R5 Window /// PSU: Corsair RM750x /// Storage: LSI SAS 9211-8i (IT Mode) + 10x 4TB Seagate Exos Enterprise Drive /// OS: UNRaid

 

Tester Rig: CPU: AMD Athlon™ 200GE Processor /// Motherboard: Asus ROG Crosshair VI Hero WIFI  /// CPU Cooler: AMD Wraith Prism RGB /// GPU: Palit GeForce® GTX 1050 2GB StromX /// RAM: Klevv Bolt 8GB (1x8GB) 3000Mhz CL15 /// Chassis: The AMAZING $30 "Computer Case"! /// PSU: Seasonic Focus GX-750 /// Storage: 1TB Samsung 860 EVO 2.5" SATA SSD + 240GB Transcend SSD220S 2.5" SATA SSD /// OS: Windows 10 Pro

 

Laptop (Asus UX430UN): CPU: Intel® Core™ i7-8550U Processor  /// GPU: NVIDIA GeForce MX150 /// RAM: 16GB 2133Mhz /// Storage: 512GB SanDisk SD8SN8U512G1002 (boot) /// OS: Windows 10 Home

 

Other Tech: Console: Xbox One S 1TB, Apple TV 4K /// Printer: Canon imageCLASS MF635Cx /// Phone: Apple iPhone 12 Pro Max 256GB Graphite (Daily Driver)  /// Tablet: Apple iPad 9.7-inch Wi-Fi (2018) 32GB + Apple Pencil (1st Generation) /// Headphones: Apple Airpods Pro, Sony WF-1000XM3, Sony WH-1000XM3 /// Smartwatch: Apple Watch Series 6 GPS Space Grey

 

Cameras: Bodies: Canon EOS-1D X Mark II, Canon EOS 5D Mark IV,  Sony A6000 /// Lenses: Canon EF 24-70mm F/2.8L USM, Canon EF 16-35mm F/2.8L II USM, Canon EF 70-200mm F/2.8L IS II USM, Tamron SP 150-600mm F/5-6.3 Di VC USD G2 (Canon), Sony SEL-P1650 E 16-50mm F3.5-5.6 PZ OSS /// Lighting: 2x Godox SL60-W Continuous LED, 2x Canon Speedlite 580EXII /// Tripods: Leofoto LS-324C Carbon Fiber Tripod + Leofoto LH-40 Ballhead, Leofoto MC-80 Multipurpose Clamp, Triopo DG-3 Gimbal Head /// Yes, I am a Canon Fanboy, deal with it

Link to comment
https://linustechtips.com/topic/1090850-best-dns-for-security/#findComment-12782734
Share on other sites

Link to post
Share on other sites

I let my PiHole handle the DNS requests. It uses OpenDNS, Quad9 and Cloudflare. Works well.

PC Specs - AMD Ryzen 7 5800X3D MSI B550M Mortar - 32GB Corsair Vengeance RGB DDR4-3600 @ CL16 - ASRock RX7800XT 660p 1TBGB & Crucial P5 1TB Fractal Define Mini C CM V750v2 - Windows 11 Pro

 

Link to comment
https://linustechtips.com/topic/1090850-best-dns-for-security/#findComment-12782790
Share on other sites

Link to post
Share on other sites

7 hours ago, berwynhan said:

i use 1.1.1.1, it just works.

Cloudflare DNS are not a security service in that way, in fact they promise a completely uninhibited DNS service, the complete opposite of what they want here.

ASUS B650E-F GAMING WIFI + R7 7800X3D + 2x Corsair Vengeance 32GB DDR5-6000 CL30-36-36-76  + ASUS RTX 4090 TUF Gaming OC

Router:  Intel N100 (pfSense) Backup: GL.iNet GL-X3000/ Spitz AX Switches: Netgear MS510TXUP, MS510TXPP, GS110EMX
WiFi6: Zyxel NWA210AX (1.7Gbit peak at 160Mhz) WiFi5: Ubiquiti NanoHD OpenWRT (~500Mbit at 80Mhz)
ISPs: Zen Full Fibre 900 (~930Mbit down, 115Mbit up) + Three 5G (~1200Mbit down, 115Mbit up, variable)
Upgrading Laptop/Desktop CNVIo WiFi 5 cards to PCIe WiFi6e/7

Link to comment
https://linustechtips.com/topic/1090850-best-dns-for-security/#findComment-12783507
Share on other sites

Link to post
Share on other sites

4 hours ago, Alex Atkin UK said:

Cloudflare DNS are not a security service in that way, in fact they promise a completely uninhibited DNS service, the complete opposite of what they want here.

yes, I've been using 1.1.1.1 for a long time since Linus did a video about it. I did the benchmark back then and it was actually faster, even if not noticeable in real world use, but it doesn't have security features.

Ryzen 5 2600X / ASRock Fatal1ty B450 Gaming K4 / G.Skill RIPJAWS V 16GB (2X8) 3000Mhz CL15 / Gigabyte RTX 2060 Super Gaming 8GB OC / Corsair RM650X 2018 / Crucial BX500 240GB / Seagate Barracauda 2TB 7200RPM Cooler Master MasterBox E500L /  ASUS TUF Gaming VG27WQ // Rog Orion / Corsair Harpoon RGB Pro / Cooler Master MasterKeys Lite L / Xbox One Red Sport  Special Edition Controller for Windows
Link to comment
https://linustechtips.com/topic/1090850-best-dns-for-security/#findComment-12784301
Share on other sites

Link to post
Share on other sites

I use OpenDNS/Umbrella for IPv4 and IPv6 and it's been really nice, lots of good security features imo, maybe not top of the line but it's pretty dang good.

Current Network Layout:

Current Build Log/PC:

Storage Server Setup:

 

Prior Build Log/PC:

Link to comment
https://linustechtips.com/topic/1090850-best-dns-for-security/#findComment-12784405
Share on other sites

Link to post
Share on other sites

21 minutes ago, Lurick said:

I use OpenDNS/Umbrella for IPv4 and IPv6 and it's been really nice, lots of good security features imo, maybe not top of the line but it's pretty dang good.

Umbrella is for business/companies, same as Comodo Dome Shield. I'm only interested on the free DNS without account.

Ryzen 5 2600X / ASRock Fatal1ty B450 Gaming K4 / G.Skill RIPJAWS V 16GB (2X8) 3000Mhz CL15 / Gigabyte RTX 2060 Super Gaming 8GB OC / Corsair RM650X 2018 / Crucial BX500 240GB / Seagate Barracauda 2TB 7200RPM Cooler Master MasterBox E500L /  ASUS TUF Gaming VG27WQ // Rog Orion / Corsair Harpoon RGB Pro / Cooler Master MasterKeys Lite L / Xbox One Red Sport  Special Edition Controller for Windows
Link to comment
https://linustechtips.com/topic/1090850-best-dns-for-security/#findComment-12784467
Share on other sites

Link to post
Share on other sites

1 minute ago, DSD27 said:

Umbrella is for business/companies, same as Comodo Dome Shield. I'm only interested on the free DNS without account.

Ah, yah, forgot they are two separate things these days :) I believe that without the account then there isn't much in terms of security, there should be some filtering but if you want more granular control then the $20/year is what you need I believe, or the free account at a minimum, I just haven't looked at those in a while.

Current Network Layout:

Current Build Log/PC:

Storage Server Setup:

 

Prior Build Log/PC:

Link to comment
https://linustechtips.com/topic/1090850-best-dns-for-security/#findComment-12784475
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×