doh-cf-workers
dns-blocklists
Our great sponsors
doh-cf-workers | dns-blocklists | |
---|---|---|
31 | 82 | |
351 | 3,889 | |
- | - | |
5.3 | 8.5 | |
2 months ago | 5 days ago | |
JavaScript | Text | |
BSD Zero Clause License | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
doh-cf-workers
-
Cloudflare DNS stopped working totally!
For desktop browser, just change the Secure DNS/DNS over HTTPS settings to one of the servers in https://github.com/curl/curl/wiki/DNS-over-HTTPS, if they're all blocked, create your own with https://github.com/tina-hello/doh-cf-workers. On Android use Intra to load custom DoH, and on iOS use https://dns.notjakob.com/ to create the DoH profile.
-
Public DNS resolver is blocked, way to bypass?
If Cloudflare Workers aren't blocked, you can use https://github.com/tina-hello/doh-cf-workers to forward to it, though it only work with DNS over HTTPS client (most desktop browsers, Windows 11, iOS, macOS, Intra on Android and YogaDNS on older Windows)
-
Ditching Normal DNS for Enhanced Safety: Zero Trust with DNS over HTTPS/TLS
DoH is another game entirely, even if you import the known DoH domains manually, anyone including dedicated kids, can create their own DoH proxy in minutes.
-
Encrypted DNS, what's the point?
Even those who weren't interested in self-hosting might spend a couple of minutes hosting their own DNS proxy since it's much more flexible and don't require root or dedicated port (at least with DoH).
-
Stop devices from using other DNS to bypass AdGuardHome?
While you can in turn block those DoH servers (and probably block port 853 too to stop the default DoT & DoQ traffic), there are ridiculous amount of public DoH servers available, partly because of how easy it is to self-host AGH and expose the DoH endpoint to the public. Anyone can even create their own in minutes.
-
Can't change DNS settings, can ISP block it?
Check if your router support DNS over TLS (DoT) or DNS over HTTPS (DoH), that would ignore the ISP filtering, assuming the ISP doesn't just block port 853 for DoT, or filtering well-known DoH server, in which case just setup your own.
-
Android phones can't connect if I block port 853 on router to stop others bypassing NextDNS
If you don't want to set up AGH at home or at a VPS, accept that the phones need to use the NextDNS/Nebulo/Intra/AdGuard app set to your NextDNS DoH endpoint while you block other providers, though this doesn't actually stop others from using their own/generic NextDNS, or even any provider if their DoH client support bootstrapping. Also, unless it's a seriously fancy router that analyzes traffic statistics, blocking DoH is merely using public list of DoH domains, anyone can create their DoH proxy which won't be blocked. Some routers have SNI filtering which can block websites regardless of the DNS used, but then you need to provide your own blocklist.
-
Subliminal Through Tor?
That's probably SNI filtering, but try other servers from https://adguard-dns.io/kb/general/dns-providers/ and https://github.com/curl/curl/wiki/DNS-over-HTTPS/ just in case, or make your own proxy on https://github.com/tina-hello/doh-cf-workers
-
Zero Trust:Block other DNS over HTTPS/TLS
If you want to go that route, keep in mind the entire Cloudflare Workers and Cloudflare Pages subdomains (workers.dev and pages.dev) can be used as free DoH proxy. Sure you can put the nuclear option, but it would break sites that do use them.
-
Filtering bypass.. I surrender? FEATURE REQUEST INSIDE
A purely DNS-based solution is bound to be easily bypassed, it's really simple to bootstrap the IP so there's no need to even use the network/OS DNS to resolve the custom DoH domain, with hundreds of publicly known DoH and trivial deployment of DoH forwarder you're fighting a losing game.
dns-blocklists
-
Runs on your OpenWrt box: AdGuard Home is network-wide blocking ads and tracking
Hagezi blocklists are the current standard now: https://github.com/hagezi/dns-blocklists
You could go for one of the Lite blocklists for the network wide, family friendly (non-breaking) list.
-
Hagezi Pro blocking video play in websites recently
Report from here: https://github.com/hagezi/dns-blocklists/issues
-
Where do you all get your DNS block lists from? Is there a public forum that has a list of them?
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/pro.plus.txt or whichever one suits you best - https://github.com/hagezi/dns-blocklists
-
Ability to use hagezi lists?
Hi, I was wondering if there was a way to use Hagezi lists within Firewalla natively? Both block and allow? https://github.com/hagezi/dns-blocklists
- Block list for mobile ads recommendation now that Oisd changed?
-
Wrong Blacklisted Website - https://vcreatek.com/
You can create an Allowlist Request in Hagezi's Github. He usually pings the maintainers as well so that they can remove it too.
- Why blocklist does HaGaZi include?
-
Are there blocklists that actually work?
As far as lists go, its extremely subjective. Definitely look into the Hagezi lists and yokoffing's configuration guide, I'd recommend Multi Pro++ for most people. Most other blocklists are redundant with that one.
-
Randomly "path[n].xtracloud.net" is stopped getting blocked for past one month
Optimized mobile GPS Data - A-GPS Qualcomm - also used in emergencies # https://teddit.net/r/privacy/comments/12yii9u/comment/jhojlr7/ # https://github.com/hagezi/dns-blocklists/issues/1023 path1.xtracloud.net path2.xtracloud.net path3.xtracloud.net
-
How do I configure Nextdns to block ads?
that’s overkill IMO. you can find a more detailed rationale here.
What are some alternatives?
dnsproxy - Simple DNS proxy with DoH, DoT, DoQ and DNSCrypt support
oisd - oisd blocklist
dns-server-setup - Ansible playbook to easily deploy new, fully configured, DNS servers.
bypass-paywalls-clean-filters
serverless-dns - The RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io
NextDNS-Config - Setup guide for NextDNS, a DoH proxy with advanced capabilities.
DoH
hblock - Improve your security and privacy by blocking ads, tracking and malware domains.
libcurl - A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features
hosts - 🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
Unbound - Unbound is a validating, recursive, and caching DNS resolver.
blocklists