Changing DNS on EOS

General system Newbie
1

Hi friends.

I changed the DNS in Firefox and Librewolf, but I would like to know if I can change the DNS in EOS KDE, so I don’t have to change the DNS in multiple apps.

Also, what DNS do you recommend? Any one will be better than my ISP’s.

Thanks in advance.

2

I like Cloudflare DNS personally.

Setting up DNS on Linux for KDE or Gnome

note in my install the file was resolv.conf (this is apparently the auto generated one that gets over written a lot).

Arch Wiki DNS

1 Like
3

A quick search brought this up, not saying I agree / disagree with it.

2 Likes
4

NextDNS.

2 Likes
5

I would always go towards a Service that is trustworthy and respects privacy. Gold solution here would be self-hosting, but this is understandably not the solution for everybody.
From outside of Germany I would recommend either Mullvad or AdGuard and I would actively warn you to use google or cloudflare. They are censoring, they sell your metadata, they make you into a product and their business goals harm the free and open internet.

4 Likes
6

Cloudflare’s policy seems okay? Am I missing something here. I’d like to know.

1 Like
7

Listen to @milkytwix :vulcan_salute:

I go for dnsforge.de. A dns resolver that guarantees privacy and security. I have it on my router and GrapheneOS.

4 Likes
8

I would advise against cloudfare for the reasons mentioned above

5 Likes
9

I saw them mentioned but would like to read more on this. Cloudflare’s documentation seems to indicate a commitment to privacy:

  • The 1.1.1.1 public DNS resolver was designed for privacy first, and Cloudflare commits to the following:
  1. Cloudflare will not sell or share Public Resolver users’ personal data with third parties or use personal data from the Public Resolver to target any user with advertisements.
  2. Cloudflare will only retain or use what is being asked, not information that will identify who is asking it. Except for randomly sampled network packets captured from at most 0.05% of all traffic sent to Cloudflare’s network infrastructure, Cloudflare will not retain the source IP from DNS queries to the Public Resolver in non-volatile storage. These randomly sampled packets are solely used for network troubleshooting and DoS mitigation purposes.
  3. A Public Resolver user’s IP address (referred to as the client or source IP address) will not be stored in non-volatile storage. Cloudflare will anonymize source IP addresses via IP truncation methods (last octet for IPv4 and last 80 bits for IPv6). Cloudflare will delete the truncated IP address within 25 hours.
  4. Cloudflare will retain only the limited transaction and debug log data (“Public Resolver Logs”) set forth below, for the legitimate operation of our Public Resolver and research purposes, and Cloudflare will delete the Public Resolver Logs within 25 hours.
  5. Cloudflare will not share the Public Resolver Logs with any third parties except for APNIC pursuant to a Research Cooperative Agreement. APNIC will only have limited access to query the anonymized data in the Public Resolver Logs and conduct research related to the operation of the DNS system.

Cloudflare has taken technical steps to ensure that we cannot retain our user’s information.

We have also retained one of the top four accounting firms to audit our practices and publish a public report confirming we are doing what we said we would. The report is available in the Certifications and compliance resources :arrow_upper_right: page.*

2 Likes
10

Read this.
Whether this is right or wrong remains to be seen. I am not responsible for that. But the fact that Cloudfare has to give IPs is already a no-go for me

4 Likes
11

Hmm, I will have to do some more digging but that is concerning. I’m in NA so an EU based DNS server is probably going to be slow for me.

3 Likes
12

This is a list of blocked domains from Germany. Your ISP must block these IPs. Unblocked/Uncensored DNS servers allow access.

3 Likes
13

Thanks all friends, I’m reading all your comments.

By the way, I checked the DNS of my Librewolf out of curiosity, and for some reason CLOUDFIRE disappeared, now I have another one by default.

Does anyone know what “(no filtering)” vs “(adblocking)” means?

image
image560×282 40.2 KB

2 Likes
14

Why don’t you change it on your Router? This would affect every device in your home network.

7 Likes
15

image
image849×212 12.6 KB

And anyone who has not this as outcome under

should change his DNS solution. Censorship is evil.

Regarding Cloudflare: I do not trust any company that is USA based regarding there TOS, because there are quite some nasty things in the law of the US that scream for this kind of no-trust. Like those little letters that you get and than you even cannot talk about because talking about it alone already is against federal law (and is treated as such).
I have a SEVERE problem with all kinds of censorship.

2 Likes
16

Actually, the very fact that Cloudflare is being pushed in the Firefox settings is puzzling, to say the least.

2 Likes
17

Cloudflare DNS, in my experience, is often one of the fastest options. I put that down to their extensive global network focused on reducing latency to services and distributing load.

That said, from a privacy standpoint, I would prioritise other options, although I’d still hold them above an option like Google.

I’d typically use Quad9, a Swiss based privacy focused DNS.

1 Like
18

I use Quad9 and a few others for my banking and other direct connects from my home DNS but my Wireguard VPN uses Cloudflare DNS leaving the wireguard tunnel which I use in public WiFi like Hotels.

1 Like
19

Reading this thread, I removed Cloudflare from my dns server for the network and added Quad9 in it’s place.
Always good to see some best practices and security/privacy concerns you weren’t even aware of.

1 Like
20

I’m using Quad9 now. They’ve got some nice fast servers hosted in Chicago.

1 Like