mozilla-vpn-client VS dns-adblock

The summary seems to ignore upstream.

They did infact

removed polkit : https://github.com/mozilla-mobile/mozilla-vpn-client/pull/70...

refactor auth using D-Bus: https://github.com/mozilla-mobile/mozilla-vpn-client/pull/71...

These are why author's PR was dropped.

git clone https://github.com/mozilla-mobile/mozilla-vpn-client.git cd mozilla-vpn-client git submodule update --init

RTNETLINK answers: Network is unreachable

So I intentionally decided not to have IPv4 connectivity system wide to catch apps with issues in IPv6 only environment and then carefully evaluate issues and report them to authors: https://github.com/mozilla-mobile/mozilla-vpn-client/issues/... https://github.com/signalapp/Signal-Desktop/issues/4121

Dual stack setups tend to hide IPv6 implementation issues and may create illusion that app is IPv6 compatible but in reality it's not.

Clearly my setup is too hostile for home users but as developer I enjoy it a lot.

Mozilla VPN is still in "beta testing" mode, and while everyone works out issues with clients, subscriptions, and all the other fun, it's better to limit the scope of a test. Mozilla VPN will roll out into more countries over time, and if yo want to know when, there's a "join the waitlist"-button on https://vpn.mozilla.org/.

A CLI is available - never used it in a headless environment yet. Hope that helps :) https://github.com/mozilla-mobile/mozilla-vpn-client/blob/main/docs/Command-line-interface.md

No. The Firefox Private Network browser extension offers set and forget network protection while you shop, bank, and browse in Firefox. It’s lightweight and simple. A VPN is a more robust software application that allows location switching. It’s a separate app you install to secure everything on your device that connects to the internet, including all browsers, social media apps, and banking apps. Learn more if you’re interested in our VPN.

Having said that, people can only track you if you make connections to their domains. If you don't even want the owner of a site you visit directly to know you visit it, use Mozilla VPN (if available in your country) or a slower free alternative like Tor or VPN Gate.

Mullvad already has a built-in customizable DNS blocker https://github.com/mullvad/dns-adblock, that way only Mullvad fully sees your traffic, including third-party DNS in the mix just add another entity to get your traffic (even with encrypted DNS, they still see the domain you visit through SNI), and except for systems like AhaDNS Blitz or RethinkDNS, each config is linked to a specific account which means they know your DNS traffic regardless of your IP. Yes, some of them pinky swear they don't log, but why add extra risk?

Well, simple, the lists are here: https://github.com/mullvad/dns-adblock/tree/main/lists/doh/adblock

Mullvad's VPN also includes their DNS service which has ad and tracker blocking. The blocklists they use are available here.

Mozilla VPN and Mulvad do that with their custom DNS.

Just put FreshTomato on a router and I'm looking for help to continue using Mullvad's ad/tracker/malware blocking DNS when I'm not connected over the VPN. I found some guides using Stubby and DNSMasq, but they did not fit my specific need to use no DNS other than Mullvads. (If it doesn't work it'll act as a kill switch.)

Yeah I agree about advantages of NextDNS. These are Mullvad's lists, btw. https://github.com/mullvad/dns-adblock/find/main