Unbound Unbound open DNS

[johndoe85]

How do I make unbound listen to the open internet?

I want to benefit from my adguard settings without have to use VPN tunnel when I am out roaming the streets with my cellphone.

And is there any risk with this that I should be aware off?

 

[ColinTaylor]

And is there any risk with this that I should be aware off?

Most, if not all clients don't have the ability to specify a non-standard port for a DNS server. Therefore you would have to run Unbound on the normal DNS port which would be a huge security risk. At a minimum your home internet connection is likely to become flooded with bot traffic.

 

[johndoe85]

Most, if not all clients don't have the ability to specify a non-standard port for a DNS server. Therefore you would have to run Unbound on the normal DNS port which would be a huge security risk. At a minimum your home internet connection is likely to become flooded with bot traffic.

Ok, i would have figured that out myself, but how much of a problem is it? Do the bots sit there and scan 24/7 in huge numbers? And for what reason? There are open free ones they can use, i don't imagine this being as big as it might have been once upon a time, but i could be wrong?


EDIT: And is there no security measures one can take with this to make it more safe? Like a hammer protection, ban certain TLD's etc?

 

[heysoundude]

What a number of people around here have been working on, and Asus has seen and is following suit for an upcoming update to their firmware, is a WireGuard server implementation.
There are several threads in the AddOns subforum for you to read through, and the developer of the script is pretty accessible. You should head over and check things out.

 

[johndoe85]

What a number of people around here have been working on, and Asus has seen and is following suit for an upcoming update to their firmware, is a WireGuard server implementation.
There are several threads in the AddOns subforum for you to read through, and the developer of the script is pretty accessible. You should head over and check things out.

I already have wireguard installed. Just wanted to skip that as much as possible.

 

[heysoundude]

skip what, exactly?

 

[reflector]

How do I make unbound listen to the open internet?

I want to benefit from my adguard settings without have to use VPN tunnel when I am out roaming the streets with my cellphone.

And is there any risk with this that I should be aware off?

Encryption

Network-wide ads & trackers blocking DNS server. Contribute to AdguardTeam/AdGuardHome development by creating an account on GitHub.

github.com

set up encryption, then youre able to use DoT natively on android, or DoH/DoT on iOS. you'd have to open up port 853 or 443 depending on which protocol you use.

 

[johndoe85]

Encryption

Network-wide ads & trackers blocking DNS server. Contribute to AdguardTeam/AdGuardHome development by creating an account on GitHub.

github.com

set up encryption, then youre able to use DoT natively on android, or DoH/DoT on iOS. you'd have to open up port 853 or 443 depending on which protocol you use.

Can this be used with an Samsung galaxy S9? running https://evolution-x.org/

 

[johndoe85]

skip what, exactly?

The use of VPN. My mobile network is slow and gets slower over VPN. It also drains battery life.

 

[reflector]

Can this be used with an Samsung galaxy S9? running https://evolution-x.org/

anything above android 9 should be able to.
if you look into your settings > connections. look for Private DNS.

 

[johndoe85]

anything above android 9 should be able to.
if you look into your settings > connections. look for Private DNS.

Yeah but can it handle other ports? Only one way to find out I guess.

 

[reflector]

Yeah but can it handle other ports? Only one way to find out I guess.

TLS is using port 853. what do you mean other ports?

 

[johndoe85]

Encryption

Network-wide ads & trackers blocking DNS server. Contribute to AdguardTeam/AdGuardHome development by creating an account on GitHub.

github.com

set up encryption, then youre able to use DoT natively on android, or DoH/DoT on iOS. you'd have to open up port 853 or 443 depending on which protocol you use.

Well, this is my question. How do I connect to this? I run this in my router, where and how do I open up ports for this? If I run it on the router I shouldn't have to open up anything. And adguard is not behind on any other machines so no need for redirect.

But my DDNS does not work. So I gotta change something somewhere to get this to work?

 

[heysoundude]

But my DDNS does not work. So I gotta change something somewhere to get this to work?

what DDNS Tunnel service are you using?

It'll be easier to get answers when you're forthright with your existing setup/config

 

[reflector]

Well, this is my question. How do I connect to this? I run this in my router, where and how do I open up ports for this? If I run it on the router I shouldn't have to open up anything. And adguard is not behind on any other machines so no need for redirect.

But my DDNS does not work. So I gotta change something somewhere to get this to work?

firstly, do you have a public IP?
yes you run on your router you still need to allow such connections through the firewall.

 

[johndoe85]

what DDNS Tunnel service are you using?

It'll be easier to get answers when you're forthright with your existing setup/config

What info do you want me to post?
I am using asuscomm.com for DDNS.

 

[johndoe85]

firstly, do you have a public IP?
yes you run on your router you still need to allow such connections through the firewall.

Ok where do i change this? Or enable this. Pin point

 

[reflector]

Ok where do i change this? Or enable this. Pin point

your internet provider. check your router WAN IP, vs website such as whatismyip. is it the same. if its not the same you need to call your internet provider about it.