Technitium DNS Server VS Nebulo

It works on minimal hardware. I am running it on an Orange Pi 3 LTS.

https://technitium.com/dns/

#!/bin/bash # Check input file if [ $# -eq 0 ]; then echo "Usage: $0 " exit 1 fi # Configurable value for zip file suffix SUFFIX="daily" # Get input file DNS_FILE=$1 # Read lines while read -r line; do HOSTNAME=$(echo $line | cut -d',' -f1) IP=$(echo $line | cut -d',' -f2) TOKEN=$(echo $line | cut -d',' -f3) # Construct API URL with IP and token, change any unwanted settings below to false as documented in https://github.com/TechnitiumSoftware/DnsServer/blob/master/APIDOCS.md#backup-settings URL="http://$IP:5380/api/settings/backup?token=$TOKEN&blockLists=true&logs=true&scopes=true&apps=true&stats=true&zones=true&allowedZones=true&blockedZones=true&dnsSettings=true&logSettings=true&authConfig=true" # Construct output file name FILE_NAME=$HOSTNAME-$IP-$(date +%Y%m%d)-$SUFFIX.zip # Call API curl -o $FILE_NAME $URL done < $DNS_FILE

You can try using a DNS/DHCP server other than the Windows one, e.g. Technitium I use this on Linux but as it is written in Dotnet it will of course also work on Windows https://technitium.com/dns/

I recently made an effort to harden my network due to (technically) exposing more of it with FireZone (WireGuard). For the curious, I shared some details in a recent comment. I didn't mention it in the comment, but I also set up local DNS (Technitium) with block lists.

Thanks for asking. There is already a feature request on Github for it. It is not planned to be implemented for now since there are some core features that are prioritized to be implemented. But it should come later once the planned features are implemented.

See what's new in this release: https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md

How would this compare to https://technitium.com/dns/?

I am working on open source DNS server project since a few years adding features to it whenever I get time: https://github.com/TechnitiumSoftware/DnsServer

Yes the standard mode is a VPN. The app also offers a non-vpn mode that works best if you are root. Alternatively, you can piggy back it with a firewall app, but those will use the VPN api too. I have not tested it in that mode. FAQ

https://github.com/ch4t4r/Nebulo can run in proxy (localhost) mode.

Check it out https://github.com/Ch4t4r/Nebulo

DNS66, unfortunately, leaks DNS over TCP (which many spyware SDKs like InMobi / Gamooga use) and (iirc) it also lacks encryption which apps like personalDNSFilter, Nebulo implement.

Blokada remains a credible adblocker, but it isn't water tight, nor do I (and others I have spoken to, like the developers of Nebulo, personalDNSFilter, and DNS66) get the feeling the developers really get digital security or privacy.

Or nebulo for android, quad9, then blocklist.

Blokada is pretty decent at what it does, but there absolutely are better alternatives, https://github.com/ch4t4r/Nebulo is one.

For the above reasons, https://github.com/ch4t4r/Nebulo is a better app, privacy wise. It doesn't do any of the above.