bhanupratapys / dnswarden

Adblocking dns, Uncensored dns server and Adult-filter dns. Supports Dns-over-QUIC , Dns-over-HTTPS and Dns-over-TLS with DNSSEC enabled and no logging.

Notice

DNSWarden now supports DNS-over-QUIC including the custom filter DNS

Custom filter DNS is live, try it out here.

Just a normal privacy oriented DNS service with the ability to block ads, trackers, malware, and phishing. We provide an uncensored DNS as well

Features

• Provides multiple types of DNS

  • Pure uncensored DNS (Blocks nothings , more power for the user!)

  • Adblocking DNS (Blocks ads , trackers and all the random crap on the internet.)

  • Adult Filter DNS (Blocks adult content, enforces force safe search for search engines and YouTube. Also blocks ads, trackers and other malicious stuff)

  • Custom filter DNS (Users can choose multiple blocklists from the predefined set depending on their usage. Supports DNS-over-QUIC, DNS-over-TLS and DNS-over-HTTPS)

    • Supports DNS over QUIC, DNS over HTTPS, DNS over TLS and DNSCrypt.
    • DNSSEC and QNAME minimization are enabled by default.
    • Supports other non-icann TLD's.
    • No query logging .
    • If your favourite website gets blocked/broken, report here or here or here. No support will be given to custom filter DNS for broken/blocked sites. Users will have to choose the blocklist appropriately.

Server information

• Adblocking DNS (DoT, DoH, DoQ)

  • DNS-over-TLS / DNS-over-QUIC

    • adblock.dns.dnswarden.com

  • DNS-over-HTTPS:

    • https://dns.dnswarden.com/adblock
    • Stamps.

• Uncensored DNS (DoT, DoH, DOQ, DnsCryptV2)

  • DNS-over-TLS / DNS-over-QUIC

    • uncensored.dns.dnswarden.com

  • DNS-over-HTTPS:

    • https://dns.dnswarden.com/uncensored
    • Stamps.

  • DnsCrypt

    • Stamps for server at Switzerland.

    • Stamps for relay at Switzerland.

• Adult Filter DNS (DoT, DoH, DoQ)

  • DNS-over-TLS / DNS-over-QUIC

    • adultfilter.dns.dnswarden.com

  • DNS-over-HTTPS:

    • https://dns.dnswarden.com/adultfilter
    • Stamps.

• Privacy policy and T&C

  • Use at your own risk. I will not be held responsible for any downtime of the servers, only on a "best effort" basis.
  • No query logging. Completely disabled query logs related to the DNS traffic.
  • DNS traffic will be forwarded to the datacenter's DNS servers if the resolver fails.

• Client software

  • Android

    • Dnscrypt-proxy, Supports DnsCrypt and DoH. Also supports other OS's.
    • InviZible Pro, Supports DnsCrypt, DoH and many more goodies under the hood.
    • Nebulo, Supports both DoT and DoH.
    • PersonalDnsFilter, Supports DoT, DoH and normal DNS.
    • Intra, Supports only DoH.
    • Rethink-app, Supports DnsCrypt, DoH and many more goodies under the hood.
    • By using Android Pie , Go to Setting -> Wi-Fi -> Private DNS and enter the hostname. Supports only DoT.

  • For other OS's

    • Knot-resolver.
    • Unbound.
    • Stubby.
    • m13253's DoH.
    • Adguard's dnsproxy. Supports DoQ, DoT, DoH and DNSCrypt.

dnswarden's Issues

oauth.reddit.com

This domain (Reddit) got blocked in AdBlock Version and is needed for Reddit.
Please unblock

Block adult content

Would it be possible to add another DNS to block adult content?

It would be great to block adult content and in turn block advertising.

Good job, regards

Another blocklist | oisd.nl

Request for extension or provision of a separate DoH/DoT as an adblock list using the following block list
oisd.nl

Thanks in advance

Implement automatic host file updates

Write up a simple script for automatic server host file update whenever the update is available. This would be helpful in the initial days due to false negative errors in the host list.

OpenNIC TLD's not work

No openick tls work
For example http: //blog.o/
Regards

Asia server is unstable

Hi ,
Im testing your dns - uncensored (Https - asia server) but i get myTelkomsel is cant connect to it's server.
https://play.google.com/store/apps/details?id=com.telkomsel.telkomselcm
Its servers (tdw.telkomsel.com) sometimes get dns answer A,servfail or AAAA,servfail

No issue on cloudflare dns or another dns.

Im using Adguard Android on LineageOS 18.1 (android 11)

Adblock-DNS blocks OnePlus

The Adblock-DNS-list also blocks OnePlus OTA-update connection.

Incompatible with Anonymized DNSCrypt

I use dnswarden-uncensor-sg1-dc in dnscrypt-proxy with anonymized dnscrypt, in dnscrypt-proxy.toml I set skip_incompatible = true, but dnswarden-uncensor-sg1-dc not in used (incompatilbe with the settings). Any plan to make it compatible?

dnswarden is down in past few hours

in Android 9 "private DNS mode" ...dot.dnswarden.com always worked before. But today it suddenly says "Couldn't connect". Also the customized DNS server in my router's settings made all the devices offline, today.

QUIC not working

Hello, so i know DoQ is experimental right now and that you implemented it from scratch or what not but I’m having troubles setting it on iOS and Windows through the adguard client. I’m currently using the adguard implementation of adguard iOS with allows for DoQ but I’m having no luck getting a response from the upstream. I’m hoping you are having better luck then me setting up dnswarden through DoQ😂

How to define filter (1/2/3) without using encrypted DNS requests?

I visited all of dnswarden's test domains, and it says:

It works. You have properly configured your dns to DnsWarden's adblocking dns servers.

In my home router I did set the IP numbers 116.203.70.156 and 116.203.35.255 , which both are the same in all of the three non-encrypted filters normal, ad-block, adult-filter. But how to tell my router to use adult-filter instead of ad-block ?

The only thing which is different are the port numbers 5353* , 2053* , 53*
But I don't know how to fix them for my home router. Actually I would prefer encryption, but FritzBox doesn't support this, yet.

Adblocking seems to be inconsistent

For sometime, it was blocking ads on Hotstar perfectly but later it isn’t.

I am using a custom configuration, and goodbye ads is the only blocklist that supports Hotstar in my configuration.

https://dns.dnswarden.com/80000080000001c000230000000000000000000000000000000000000000

This is my configuration. I am using this on an iPad Air 5.

I’ve also notices that the DNS resolver name did get changed when it wasn’t blocking ads to ‘CACHENETWORKS’. When it was working perfectly, the name started with an H, but I don’t remember the exact name.

Not working PTR requests

Hello. I'm using DNSCrypt-proxy with your server (dnswarden-dc1 and dnswarden-dc2) and PTR requests work not correctly.
tcpdump screenshot: https://i.imgur.com/xphO3Ey.jpg

Redirect to http to https version?

I don't know if this will be possible, but is it possible to add filters to redirect to the https site?
I say this to avoid installing "https everywhere" or similar add-ons.
Thank you

Namecoin / Emercoin support

Would it be possible to add support for Namecoin / Emercoin?
Thanks greetings

Anonymised DNSCrypt

Are there any plans to implement this for the DNSCrypt DNS or has this already been implemented?

Sources:
DNSCrypt/dnscrypt-proxy#960
https://github.com/DNSCrypt/dnscrypt-protocol/blob/master/ANONYMIZED-DNSCRYPT.txt

https://ipleak.net/ isn't resolve anymore

https://ipleak.net/ is recommended by privacytools.io to check the ip leak and webrtc leak

https://mvconf.cloud.360safe.com and https://mclean.cloud.360safe.com are used by smart manager application in samsung galaxy devices to update the cache cleaning function of third party apps

Support ECS

Hello, is it possible to support ecs for atleast one of the dns protocols?

QUIC Support

Thank you for providing this service for free. Are there any plans to implement DoQ support?

https://app.onetrust.com/ not resolve

i have try to access at this domain but isn't resovle

image.jimcdn.com

image.jimcdn.com got blocked which is needed for that blog: https://merilfaen.jimdofree.com

WD MyCloud Home App

Hey, I recently got a WD Cloud NAS, but when trying to connect to it through the Android app (https://play.google.com/store/apps/details?id=com.wdc.mycloud&hl=en_US) it cannot connect, I've linked a screenshot. When disconnecting from the DNS it works fine.

Broken page elements when using dnswarden doh on firefox

Tried with uncensored, adblock, adult-filter and custom filters using Hagezi Multi Normal, Hagezi TIF and OISD NSFW.
theverge.com doesn't load images until refreshed again. Brave search page is completely broken. These are the only two webpages visited and probably the issue affects other webpages too.

New Malicious Domain Blocklist

Hi there,

Really appreciate your website's tool for searching all the major blocklists. I recently created a new list that is tailored to new and unknown malicious domains no other major blocklist has blacklisted. I'll link it here so you can examine it, if you think it's worthy of being included amongst the existing lists on your search tool that'd be pretty neat!

https://github.com/manic-code/Emerging-Malicious-Domain-Blocklist

Work on website!

It's been a long time, need a working web page asap.

dnswarden appearing to not being able to block certain domains

So I’ve noticed this for awhile with dnswarden where some domains just won’t get blocked no matter how many blocklists I choose. I noticed this with d3ward which will never block

https://ads-dev.pinterest.com/
https://widgets.pinterest.com/
https://adtago.s3.amazonaws.com/
https://analyticsengine.s3.amazonaws.com/
https://advice-ads.s3.amazonaws.com/
https://affiliationjs.s3.amazonaws.com/
https://advertising.twitter.com/

Ive tested these with and without the whitelist and it’s still the same. I’m not sure if there’s a whitelist that is not visible on the website that is enabled by default but I would like to see these domains blocked as they are blocked by every big Adblock blocklist like Oisd. Thanks🙏.

Add client to readme

You can add Invizible Pro to the list of Android clients:
https://github.com/bhanupratapys/dnswarden/blob/master/README.md

More info at: https://f-droid.org/en/packages/pan.alexander.tordnscrypt.stable/

Avoid setting YouTube into "Restricted Mode" for the Adult Filter?

CleanBrowsing DNS does this too, and I assume it is due to comments being restricted along with a plethora of unnecessary videos being blocked off.

All DoH endpoint return NXDOMAIN for pretty much any domain, DoT & DoQ works normally

dnslookup google.com https://dns.dnswarden.com/g
dnslookup 1.10.1-11687
Server: https://dns.dnswarden.com/g

dnslookup result (elapsed 272.164527ms):
;; opcode: QUERY, status: NXDOMAIN, id: 57709
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version 0; flags:; udp: 1232
                                                                                                                        ;; QUESTION SECTION:
;google.com.    IN       A

Only QUIC with custom filter and DNSCrypt works, everything else fail

Testing with https://github.com/ameshkov/dnslookup, the Adblock, Uncensored, and Adult-Filter variants of DoT, DoH, and DoQ all fail, custom filter only works with DoQ, while DoT and DoH fail, DNSCrypt works.