Jump to content

DNS how to hide public ip

Net3
By Net3
in Networking
 Share
Posted

Is it possible with adguard home to hide public ip and if so how? I've been running things through with chatgpt and this guy leads me absolutely nowhere and it is a bit tricker to find exact explanaitions online. 

 

Or is not and i need to have proxy server set up to hide it?

 

And what exactly can i really do with DNS, is dns only to filter the traffic like ads and block sites?

 

What kind of ads can it block? the ones that pop up from one site u click on?

 

What will i not be able to achieve with DNS? 

 

Can someone who has an actual knowledge brief me on the topic? 

 

My main goal is to explore things with home lab at home, i find it more rewarding than doing absolutely nothing.

Link to comment
https://linustechtips.com/topic/1592193-dns-how-to-hide-public-ip/
Share on other sites
Link to post
Share on other sites
Posted

What exactly are you trying to accomplish? Are you trying to obfuscate your IP address for web browsing, or are you trying to host public-facing services on your home Internet connection? (The latter of which is a bad idea if you don't know what you're doing.)

I sold my soul for ProSupport.

Link to post
Share on other sites
Posted

The Domain Name System (DNS) resolves domain names (like "linustechtips.com") to an IP addresses, that's it.

 

The only thing that services like AdGuard do is to have some requests result in "Unknown".

 

So for example if you want to visit bad-site-example.com, they will tell you it doesn't exist.

 

It's a bit like removing "bad" telephone numbers from a phone book. It prevents you from calling say a sex hotline if you don't know their number already.

 

It does not make the hotline itself disappear or inaccessible. You can still call them, if you know their number from another source.

 

In the same way DNS blocklists only help, if there are no alternate means to resolving a name to an IP (like switching to another DNS server)

 

So it blocks ads by simply not resolving e.g. ads.google.com to an IP. It doesn't do anything else.

Remember to either quote or @mention others, so they are notified of your reply

Link to post
Share on other sites
Posted
2 hours ago, Net3 said:

What will i not be able to achieve with DNS? 

With custom DNS (private DNS) like AdGuard or NextDNS you can have custom records.

For example, if you want to have a local IP resolve into a FQDN (Fully Qualified Domain Name) like homelab.local or something like that you can do it. You just need to point that record to the right IP on your homelab. You can setup reverse proxy in front of that IP to that multiple record leading to a same IP can be distributed correctly to the correct services. 

If you really dont know what you are doing, try to take it slow and maybe start simply with addressing your services with IP + port, and work you way trough the technicality of your homelab.  

 

For the topic of hiding your IP, and mentioning that you trying to make a homelab, you maybe want to access services remotely. For that matter, either you configure a VPN or use your public IP to access services available trough it. The second one can lead to very dangerous situation and has mentioned by @Needfuldoer is not recommended if you dont know what you are doing. 
In case you decide to go the VPN way, I can recommend you strongly Tailscale, it's maybe the best software I have ever used for connecting network and devices accros the web. 

Link to post
Share on other sites
Posted
1 hour ago, mistralv2 said:

recommend you strongly Tailscale

Not disagreeing, heard tons of great things about TS, but I'll also plug Wireguard which has been perfect for my uses. 

5950X/4090FE primary rig  |  1920X/1070Ti Unraid for dockers  |  200TB TrueNAS w/ 1:1 backup

Link to post
Share on other sites
Posted
41 minutes ago, OddOod said:

Not disagreeing, heard tons of great things about TS, but I'll also plug Wireguard which has been perfect for my uses. 

TS is basically Wireguard with a nice interface ! It's leveraging all the technology of Wireguard with a nice wrapper and an hassle free experience. Very nice to just install TS client everywhere (even on your phone) and you're all good. And the node exit functionality is so cool !

Link to post
Share on other sites
Posted

@Net3DNS can be useful to block malware / unwanted websites, and reduce network load.

 

Wanna see just how chatty your desktop is?

 

Open https://wireshark.org, install that.

 

Once open, double click the item with the activity line next to it.

 

Then in the top text bar enter

 

dns

 

and press enter.

 

And when it stops scrolling is when your desktop has finished contacting servers and is idle.

 

DNS such as pi-hole in virtualbox (using the bridged network adapter) can block all of that, and send specific websites, such as windows updates, can be added to a group and toggled on and off.  My system blocks basically everything except three websites for windows updates.  That makes it take longer for Windows to accept it is "connect" vs the annoying "no internet" but I know I won't be slowing down the wi-fi for more important tasks such as work, which I think would be disrespectful.

 

I like to know what is loading, and if I don't know, I think that's by design to send who knows what about the system to who knows where.  So I run dns filters on all of my devices because it helps control the websites that I want to connect, and nothing else.

 

You may like the browser extension privacy badger, or a bit more confusing, NoScript, but you can set it to initially not trust any website, until you tell it to, which I'm not aware of other addons that allow this.  It also helps prevent mis-clicking a website that tries to load unwanted software.

: JRE #1914 Siddarth Kara

How bad is e-waste?  Listen to that Joe Rogan episode.

 

"Now you get what you want, but do you want more?
- Bob Marley, Rastaman Vibration album 1976

 

Windows 11 will just force business to "recycle" "obscolete" hardware.  Microsoft definitely isn't bothered by this at all, and seems to want hardware produced just a few years ago to be considered obsolete.  They have also not shown any interest nor has any other company in a similar financial position, to help increase tech recycling whatsoever.  Windows 12 might be cloud-based and be a monthly or yearly fee.

 

Software suggestions


Just get f.lux [Link removed due to forum rules] so your screen isn't bright white at night, a golden orange in place of stark 6500K bluish white.

released in 2008 and still being improved.

 

Dark Reader addon for webpages.  Pick any color you want for both background and text (background and foreground page elements).  Enable the preview mode on desktop for Firefox and Chrome addon, by clicking the dark reader addon settings, Choose dev tools amd click preview mode.

 

NoScript or EFF's privacy badger addons can block many scripts and websites that would load and track you, possibly halving page load time!

 

F-droid is a place to install open-source software for android, Antennapod, RethinkDNS, Fennec which is Firefox with about:config, lots of performance and other changes available, mozilla KB has a huge database of what most of the settings do.  Most software in the repository only requires Android 5 and 6!

 

I recommend firewall apps (blocks apps) and dns filters (redirect all dns requests on android, to your choice of dns, even if overridden).  RethinkDNS is my pick and I set it to use pi-hole, installed inside Ubuntu/Debian, which is inside Virtualbox, until I go to a website, nothing at all connects to any other server.  I also use NextDNS.io to do the same when away from home wi-fi or even cellular!  I can even tether from cellular to any device sharing via wi-fi, and block anything with dns set to NextDNS, regardless if the device allows changing dns.  This style of network filtration is being overridden by software updates on some devices, forcing a backup dns provuder, such as google dns, when built in dns requests are not connecting.  Without a complete firewall setup, dns redirection itself is no longer always effective.

Link to post
Share on other sites
Posted
  • Author

I have come to a solution. I found in the file - "YAML" i can change IP to whatever IP i want to change it to, so I can access it now even if i change ip on my local network I just need to change IP to corresponding IP too!

 

I heard a lot about DNS and pi hole which can just vaccum the ads into oblivion, that's what it got me started, but I see more broader use cases for the DNS now. 

Link to post
Share on other sites
Posted
15 hours ago, Net3 said:

I heard a lot about DNS and pi hole

I love this blog post and I wish it were promoted more by the project

 

https://pi-hole.net/blog/2017/02/22/what-really-happens-on-your-network-find-out-with-pi-hole/

 

It's from 2017 and still very educational and relavant.

: JRE #1914 Siddarth Kara

How bad is e-waste?  Listen to that Joe Rogan episode.

 

"Now you get what you want, but do you want more?
- Bob Marley, Rastaman Vibration album 1976

 

Windows 11 will just force business to "recycle" "obscolete" hardware.  Microsoft definitely isn't bothered by this at all, and seems to want hardware produced just a few years ago to be considered obsolete.  They have also not shown any interest nor has any other company in a similar financial position, to help increase tech recycling whatsoever.  Windows 12 might be cloud-based and be a monthly or yearly fee.

 

Software suggestions


Just get f.lux [Link removed due to forum rules] so your screen isn't bright white at night, a golden orange in place of stark 6500K bluish white.

released in 2008 and still being improved.

 

Dark Reader addon for webpages.  Pick any color you want for both background and text (background and foreground page elements).  Enable the preview mode on desktop for Firefox and Chrome addon, by clicking the dark reader addon settings, Choose dev tools amd click preview mode.

 

NoScript or EFF's privacy badger addons can block many scripts and websites that would load and track you, possibly halving page load time!

 

F-droid is a place to install open-source software for android, Antennapod, RethinkDNS, Fennec which is Firefox with about:config, lots of performance and other changes available, mozilla KB has a huge database of what most of the settings do.  Most software in the repository only requires Android 5 and 6!

 

I recommend firewall apps (blocks apps) and dns filters (redirect all dns requests on android, to your choice of dns, even if overridden).  RethinkDNS is my pick and I set it to use pi-hole, installed inside Ubuntu/Debian, which is inside Virtualbox, until I go to a website, nothing at all connects to any other server.  I also use NextDNS.io to do the same when away from home wi-fi or even cellular!  I can even tether from cellular to any device sharing via wi-fi, and block anything with dns set to NextDNS, regardless if the device allows changing dns.  This style of network filtration is being overridden by software updates on some devices, forcing a backup dns provuder, such as google dns, when built in dns requests are not connecting.  Without a complete firewall setup, dns redirection itself is no longer always effective.

Link to post
Share on other sites
Posted
On 12/12/2024 at 1:50 PM, Eigenvektor said:

The Domain Name System (DNS) resolves domain names (like "linustechtips.com") to an IP addresses, that's it.

yeah. but you can do stuff with that.

 

example: *not so random online storefront* if you changed the DNS (to a certain one) everything suddenly becomes *free*... this actually happened for years... on a *very well known platform*

 (kinda wouldn't surprise me if it still worked lol)

 

that said, i have no idea what op is trying to do... ¯\_(ツ)_/¯ 

 

 

tldr: as i see this DNS is a huge loophole for all kinds of stuff. (spoofing etc etc) 

 

edit: for hiding ip I'd think you use vpn... voila its "hidden" (upfront but can still be figured out obviously with the right tools/access) 

The direction tells you... the direction. 

-Scott Manley, 2021

 

Softwares used:

Corsair Link (Anime Edition) 

MSI Afterburner 

OpenRGB

Lively Wallpaper 

OBS Studio

Shutter Encoder

Avidemux

FSResizer

Audacity 

VLC

WMP

GIMP

HWiNFO64

Paint

3D Paint

GitHub Desktop 

Superposition 

Prime95

Aida64

GPUZ

CPUZ

Generic Logviewer

 

 

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing Networking

×