| Provider | IPv4 | IPv6 | DNS Over HTTPS | DNSSEC |
|---|---|---|---|---|
| CleanBrowsing |
|
|
https://doh.cleanbrowsing.org/doh/security-filter/ | Yes |
| Cloudflare |
|
|
https://1.1.1.1/dns-query | Yes |
| Google DNS |
|
|
https://dns.google.com/resolve | Yes |
| Hurricane Electric |
|
|
||
| Omnispring |
|
Yes | ||
| [Private Internet Access](https://helpdesk.privateinternetaccess.com/hc/en-us/articles/219460397-How-to-change-DNS-settings |
| # should works on any cloud-init enabled hypervisor (openstack.. ) | |
| # start from a normal ubuntu 20.04 install as minimal was not available for ARM64 | |
| # Since ARM64 machines has higher RAM, Shrinking is desired but not necessary. Instead we will increase tmpfs to 1700MB | |
| # Getting root (if sudo -i doesn't work then set a root password beforehand using 'sudo passwd root' | |
| sudo -i | |
| # make sure we are on the highest kernel, so we can delete all the others ... |
Hiren’s BootCD 15.2 https://www.hirensbootcd.org/hbcd-v152/ https://www.hirensbootcd.org/files/Hirens.BootCD.15.2.zip
Hiren’s BootCD 15.1 https://www.hirensbootcd.org/hbcd-v151/ https://www.hirensbootcd.org/files/Hirens.BootCD.15.1.zip
Hiren’s BootCD 15.0 https://www.hirensbootcd.org/hbcd-v150/ https://www.hirensbootcd.org/files/Hirens.BootCD.15.0.zip
Hiren’s BootCD 14.1 https://www.hirensbootcd.org/hbcd-v141/ https://www.hirensbootcd.org/files/Hirens.BootCD.14.1.zip
Hiren’s BootCD 14.0 https://www.hirensbootcd.org/hbcd-v140/ https://www.hirensbootcd.org/files/Hirens.BootCD.14.0.zip
Hiren’s BootCD 13.2 https://www.hirensbootcd.org/hbcd-v132/ https://www.hirensbootcd.org/files/Hirens.BootCD.13.2.zip
Hiren’s BootCD 13.1 https://www.hirensbootcd.org/hbcd-v131/ https://www.hirensbootcd.org/files/Hirens.BootCD.13.1.zip
Hiren’s BootCD 13.0 https://www.hirensbootcd.org/hbcd-v130/ https://www.hirensbootcd.org/files/Hirens.BootCD.13.0.zip
Hiren’s BootCD 12.0 https://www.hirensbootcd.org/hbcd-v120/ http
| --no-mtime | |
| --no-call-home | |
| # --ignore-errors | |
| -f "bestvideo[height>=1080]+251/bestvideo[height>=1080]+bestaudio/bestvideo[height>=720]+251/bestvideo[height>=720]+bestaudio/137+bestaudio/136+bestaudio/bestvideo+bestaudio" | |
| # Note that I output to an MKV container, despite the fact that shitty devices will not play some files | |
| # or still don't support Opus, it *is* the highest quality available: http://opus-codec.org/comparison/ | |
| --merge-output-format mkv | |
| # If you need Mac compatible MP4 uncomment the following two lines instead of the ones above. It's usually a step under max quality, but this yields true mp4 files: |
| IPv4 Addr | IPv6 Addr | ASn | Political Region | Loc | Svc | Org |
|---|---|---|---|---|---|---|
| 8.8.8.8 | 2001:4860:4860::8888 | AS15169 | US | Worldwide (Anycast) | Google Public DNS | |
| 8.8.4.4 | 2001:4860:4860::8844 | AS15169 | US | Worldwide (Anycast) | Google Public DNS | |
| 1.1.1.1 | 2606:4700:4700::1111 | AS13335 | US | Worldwide (Anycast) | Cloudflare-DNS | Cloudflare/APNIC |
| 1.0.0.1 | 2606:4700:4700::1001 | AS13335 | US | Worldwide (Anycast) | Cloudflare-DNS | Cloudflare/APNIC |
| 95.85.95.85 | 2a03:90c0:999d::1 | AS199524 | EU | *W |
| # Put this file under /etc/spamassassin/ and run an sa-update or reload amavis etc. | |
| # | |
| #-------------------------------------------------- | |
| # The only RBL I trust, UCEPROTECT1 (single IP, not IP-ranges or entire ISPs) http://uceprotect.net | |
| #-------------------------------------------------- | |
| header RCVD_IN_UCEPROTECT1 eval:check_rbl_txt('uceprotect1', 'dnsbl-1.uceprotect.net') | |
| describe RCVD_IN_UCEPROTECT1 Listed in dnsbl-1.uceprotect.net | |
| tflags RCVD_IN_UCEPROTECT1 net | |
| score RCVD_IN_UCEPROTECT1 1.8 |
| # IPv6 Configuration | |
| # -> note that I have disabled ip6 for our internet-connection (wan/eth0) because | |
| # -> my upstream/ISP (still) does not do IPv6. The rest, even localhost, does ip6 stuff. | |
| net.ipv6.conf.all.disable_ipv6 = 0 | |
| net.ipv6.conf.default.disable_ipv6 = 0 | |
| net.ipv6.conf.lo.disable_ipv6 = 0 | |
| net.ipv6.conf.eth0.disable_ipv6 = 1 | |
| net.ipv6.conf.wan.disable_ipv6 = 1 | |
| # Packet Forwarding |