Quad9 dns

System, you use your own 9.9.9.9 setting. :-) @DaddyGoOk that fixed that part. Makes sense too after reading on it more. Also if I do an Ipconfig /all on my devices should it be using my pfsense box or the above DNS settings? @cburbs said in Quad9 and DNS Resolver:Also if I do an Ipconfig /all on my devices should it be using my pfsense box or the above DNS settings?In your place, situation with this setting, I would only give pfSense to the DNS server, so that your DNS could not leak. ( with DHCP, but still only the pfSense box should be the server.Be careful with DHCP server + pfblockerng, create static entries for DHCPit’s an old story, so you can avoid the unbond of restarting multiple times @cburbs said in Quad9 and DNS Resolver:Static DHCP: uncheckedWhat I forgot: :-)if you decide to... and use DHCP on your network, check this as well: Static DHCP: to checked (this is in view of my previous remark) @DaddyGoSo DNS should be pointing to my pfsense box?When I go to dnsleaktest I Get the following -207.162.219.52 None Lightpoint Colocation & Hosting LLC Beaverton, United States66.96.115.176 res100.pdx.rrdns.pch.net. WoodyNet United States66.96.115.177 res200.pdx.rrdns.pch.net. WoodyNet United States66.96.115.178 res300.pdx.rrdns.pch.net. WoodyNet United StatesThe last 3 I believe show quad9 is working correctly just not sure why I am getting the top IP which is a Colocation/Hosting place in my area? Why would this one show up? @cburbs said in Quad9 and DNS Resolver:@DaddyGoSo DNS should be pointing

That users in various regions can experience better performance than traditional DNS services.We have tested with quad9 on benchmarking tools, and here are the results:Analysis conducted using DNS Benchmark software by Steve GibsonThe result shows that Quad9 is the winner in terms of quick response time and lowest latency. Cloudflare’s 1.1.1.1 and Open DNS provide good performance, too, but Quad9 remains unbeatable here. Google’s DNS came last in this test, surprisingly.According to dnsspeedtest.online:DNS Performance of Quad9 (miliseconds)MinMedianAverage13.5013.8514.70Quad9 DNS delivered a response time of 14.70 milliseconds, which is good.We hit the following websites with Quad9 to get the raw performance:As you can see from the above results, Quad9 provides decent performance.CloudflareCloudflare’s 1.1.1.1 is a robust DNS server known for its speed, security, and reliability.According to our test, it delivers a 13.93-millisecond ping on average, which is good for online gaming and streaming. Additionally, it comes with built-in DDoS protection and supports DNSSEC to prevent attacks such as DNS spoofing and cache poisoning.Have a look at the below table:DNS Performance of Cloudflare (milliseconds)MinMedianAverage15.9017.8513.93We hit the following websites with Cloudflare to get the raw performance:According to the test, Cloudflare’s 1.1.1.1 provides decent performance.Google DNSGoogle Public DNS is the most common DNS server widely used by businesses and individuals. It’s also known for its faster response times, leveraging a vast network of global data centers to provide quick responses from anywhere in the world.Although Google DNS is a good and easy DNS solution, it is not the best. Refer to the below table for its ping response in milliseconds.DNS Performance of Google DNS (milliseconds)MinMedianAverage44.0047.9547.54We hit the following websites with Google Public DNS to get the raw performance:Based on the test, Google DNS provides quite good performance overall.NextDNSNextDNS is a versatile and privacy-focused DNS service that enhances online security and browsing experience through customization options. It’s a cloud-based DNS resolver that manages DNS queries securely and efficiently. NextDNS uses a global network of servers to reduce response times and ensure DNS queries are answered quickly. This helps gamers connect to game servers faster, giving them a competitive advantage when playing FPS games.On average, it delivers 49.64 milliseconds of ping time, which is quite good for gaming.DNS Performance of FlashStart DNS (milliseconds)MinMedianAverage45.0049.8049.64We hit the following websites with NextDNS to get the raw performance:It delivered stable results throughout the test, and we could customize the DNS according to our requirements. It’s quite easy to set up and has a user-friendly web panel for better accessibility and control over DNS usage. OpenDNSOpenDNS, developed by Cisco, is a well-known DNS service provider known primarily for its security, reliability, and speed. It delivers a stable internet connection and faster load times for an optimal gaming experience without lag spikes.Additionally, it’s well known for its security measures and privacy protection against cyber threats. It is ideal for gamers who want to protect their online streams from DDoS attacks and other potential attacks while gaming. Refer to the below table:DNS Performance of OpenDNS (milliseconds)MinMedianAverage60.3062.7062.54We hit the following websites with OpenDNS to get

To my pfsense box?When I go to dnsleaktest I Get the following -207.162.219.52 None Lightpoint Colocation & Hosting LLC Beaverton, United States66.96.115.176 res100.pdx.rrdns.pch.net. WoodyNet United States66.96.115.177 res200.pdx.rrdns.pch.net. WoodyNet United States66.96.115.178 res300.pdx.rrdns.pch.net. WoodyNet United StatesThe last 3 I believe show quad9 is working correctly just not sure why I am getting the top IP which is a Colocation/Hosting place in my area? Why would this one show up?You will never see pure 9.9.9.9 DNS resolution, quad9 doesn't have its own network, therefore using CDN, as you can see WoodyNet, so I don't use it for 9.9.9.9 never, hmmmmm ( So it does seem to be working on that part then.Do you also use this in your setup? @cburbs said in Quad9 and DNS Resolver:So it does seem to be working on that part then.Do you also use this in your setup?There can be many approaches to this theme:Use what I have already described above for 853 DNSoverTLS + DNSSEC ( and then you can also block port 53 on the firewall as a rule.Don't forget the firewall is blocking all unsolicited traffic by default, this is the rule on pfSense.Another solution is to use Suricata and/or Snort with ET DNS rules, for example Addition: the pfSense is blocked from the WAN side, so if you think about the LAN side you can disable the external DNS query for the clients or as I mentioned ET DNS rules set will be the solution (IPS on LAN) @cburbs said in Quad9 and DNS