AdGuard DNS discuss

[maximumdns]

I cannot recommend using this DNS yet because of many problems.

Slow response time from my country (ping always 400ms+ on any network i try).

Frequent "no response" listed in status log (Adguard Pro for iOS). Happens on any network I try.

Users outside of Russia need closer servers to improve DNS performance. USA/UK/Australia.

Cannot block p2p/proxy/VPN/anonymizer websites with family protection. We need this to prevent children finding ways of bypassing filters and participating in file sharing copyright infringement. Please include this in the Family Protection DNS filter, or create a whole new "Strict Protection" filter.

Cannot block internal IP addresses - DNS responses containing IP addresses listed in RFC1918 should be filtered out to mitigate DNS Rebinding attacks. For example, if badstuff.attacker.com points to 192.168.1.1 then that response should be filtered out. (OpenDNS allows this option and adguard should too)

Cannot block many distasteful websites. Please in future allow us to custom filter by category such as: Proxy/anonymiser, p2p, Academic Fraud, Adult themes, Alcohol, Chat, Classifieds, Dating, File storage known for copyright infringement (eg. Mega), Message boards (eg. Reddit, 4chan), Gambling, Hate/Discrimination/Violence/Extremist, Religious/Spiritual/Political, Tasteless, Drugs/Tobacco, Visual Search Engines.

I want adguard to be better than OpenDNS!

Please everyone share your experiences with adguard DNS!

 

[avatar]

Frequent "no response" listed in status log (Adguard Pro for iOS). Happens on any network I try.

As I remember, this is normal behavior, it does not mean there is real "no response". We'd better ask @stillness to give us a detailed comment on this.

Users outside of Russia need closer servers to improve DNS performance. USA/UK/Australia.

Yup, I agree, we just decided to stick with one hosting provider and due to this, our timing depends on them. Still waiting for them to provide us with anycast setup tool.

One moment, though, US servers are available from the start.

Cannot block p2p/proxy/VPN/anonymizer websites with family protection. We need this to prevent children finding ways of bypassing filters and participating in file sharing copyright infringement. Please include this in the Family Protection DNS filter, or create a whole new "Strict Protection" filter.

Filed a feature request:
https://github.com/AdguardTeam/AdguardDNS/issues/101

Cannot block internal IP addresses - DNS responses containing IP addresses listed in RFC1918 should be filtered out to mitigate DNS Rebinding attacks. For example, if badstuff.attacker.com points to 192.168.1.1 then that response should be filtered out. (OpenDNS allows this option and adguard should too)

Hm, this could be an option, but I don't think we should do it by default.

Filed a feature request anyway:
https://github.com/AdguardTeam/AdguardDNS/issues/102

Cannot block many distasteful websites. Please in future allow us to custom filter by category such as: Proxy/anonymiser, p2p, Academic Fraud, Adult themes, Alcohol, Chat, Classifieds, Dating, File storage known for copyright infringement (eg. Mega), Message boards (eg. Reddit, 4chan), Gambling, Hate/Discrimination/Violence/Extremist, Religious/Spiritual/Political, Tasteless, Drugs/Tobacco, Visual Search Engines.

We don't do this sort of categorization, yet I agree that it makes sense.

 

[maximumdns]

Thanks @avatar!

One moment, though, US servers are available from the start.

DNS servers located in US are available??? What IP addresses?

 

[vasily_bagirov]

@maximumdns IP addresses for US server is the same as for Russian server. What server to use is decided by a specific algorithm based on your provider, the actual geographical location and latency are not directly affecting the choice. Sometimes it happens so that traffic is routed nonoptimally, and I suspect this is your case. Despite the geographically closest to you server is in California, your provider chooses the Russian one.

I still would like @avatar to confirm this or correct me.

 

[avatar]

Despite the geographically closest to you server is in California, your provider chooses the Russian one.

Unless we see traceroute command output, we can't be sure what exact server is chosen.

I still would like @avatar to confirm this or correct me.

Everything else is right. This IP sharing is called "Anycast IP".

 

[Starchild1976]

maybe a stupid question ,but I am going to ask this anyway is adguard dns really needed when adguard is installed? I currently run comodo dns and dns crypt. but tempted to try adguard dns anyone can enlighten me?

 

[avatar]

maybe a stupid question ,but I am going to ask this anyway is adguard dns really needed when adguard is installed? I currently run comodo dns and dns crypt. but tempted to try adguard dns anyone can enlighten me?

My personal opinion is that it's not really needed when you use the program already.