What DNS do you use with your Asus/Merlin

[sfx2000]

only for adult content, not what is deemed as paedophile and copyright content, its only a matter of time other stuff gets added to the mandatory lists.

Unfortunate - if I recall AU did this as well...

For us in the US - the primary concern is three letter agencies doing the drift-net approach - hence the big data center in Utah, along with others... a $1.5 billion investment there...

Do what you want.. just be mindful - they're mostly focused on certain activities/behaviors - and they're pretty good at digging out TOR/VPN so folks be mindful of that...

TOR/VPN is no privacy, end-points are always discoverable and traceable...

 

[Zirescu]

TOR/VPN is no privacy, end-points are always discoverable and traceable...

End-Point sure, but not back to the user.

 

[sfx2000]

End-Point sure, but not back to the user.

VPN, definitely back to the end-user... make no mistake about that one...

TOR - there's some interesting means and methods to decloak users there as well...

 

[Nullity]

I use 4 separate, free WiFi locations with 6 VPNs and 11teen Tor instantiations that are all encapsulated with a nine-level proxychain which comes from my private list of 50000 OC768 backbone links.

and that's just my decoy traffic...

 

[Zirescu]

VPN, definitely back to the end-user... make no mistake about that one...

TOR - there's some interesting means and methods to decloak users there as well...

Care to share some info about that?

 

[sfx2000]

Care to share some info about that?

no

 

[Nullity]

Care to share some info about that?

Check the Tor mailing list or any of the many official Tor white-papers or Tor-related academic papers... there are many. Decades of research is out there to be found, which includes known attack vectors.

Sadly, sfx makes claims but supports them with no facts. Tor has been designed from the beginning knowing that all data may be monitored... this is the most fundamental aspect of Tor or the "onion routing" technology that the Tor project is based on.

Yes, everything is potentially vulnerable, that is obvious... but claims without proof are unhelpful and paranoid. I could say "AsusWRT has a security flaw", which is very likely true, but without specific details my statement is less than useless...

 

[L&LD]

Check the Tor mailing list or any of the many official Tor white-papers or Tor-related academic papers... there are many. Decades of research is out there to be found, which includes known attack vectors.

Sadly, sfx makes claims but supports them with no facts. Tor has been designed from the beginning knowing that all data may be monitored... this is the most fundamental aspect of Tor or the "onion routing" technology that the Tor project is based on.

Yes, everything is potentially vulnerable, that is obvious... but claims without proof are unhelpful and paranoid. I could say "AsusWRT has a security flaw", which is very likely true, but without specific details my statement is less than useless...

My take on Tor is that it first has to connect to and with established protocols. That is what makes it vulnerable, no matter what is done after the fact to 'hide' a user as they make their way across the 'net.

If all they needed to do was activate the 'invisible' shield option, we would be able to do that without Tor in the first place.

 

[sfx2000]

Sadly, sfx makes claims but supports them with no facts.

There are reasons why I do not go into detail with regards to certain topics... sufficient enough to say that one should be reasonably paranoid when dealing with VPN's and TOR..

 

[Wutikorn]

Well you could configure the router to use all three public dns servers (Google, OpenDNS and your ISP) with the following option in dnsmasq:

all-servers

dnsmasq will query all three and use the first response it gets back. But this is not considered good practice. This way if one server is slow and another is faster, you will always get the fastest response time.

Is that how home router work, Asus AC68U to be more specific? Or do home routers try to reach the primary one first the the second?

 

[ColinTaylor]

Is that how home router work, Asus AC68U to be more specific?

No

Or do home routers try to reach the primary one first the the second?

Normally a router will only query its primary DNS. If there is no reply from that server it will query the secondary.


http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

--all-servers
        By default, when dnsmasq has more than one upstream server available, it will send
        queries to just one server. Setting this flag forces dnsmasq to send all queries to all
        available servers. The reply from the server which answers first will be returned to
        the original requester.

 

[Wutikorn]

NoNormally a router will only query its primary DNS. If there is no reply from that server it will query the secondary.


http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

--all-servers
        By default, when dnsmasq has more than one upstream server available, it will send
        queries to just one server. Setting this flag forces dnsmasq to send all queries to all
        available servers. The reply from the server which answers first will be returned to
        the original requester.

Is that for home router? Does it mean that home router can be set to query all servers at the same time if one uses telnet to set it up?

 

[ColinTaylor]

Is that for home router? Does it mean that home router can be set to query all servers at the same time if one uses telnet to set it up?

What do you mean by "home router" exactly?

Any router that uses dnsmasq and allows you to change its configuration can be made to query all servers.

 

[Wutikorn]

What do you mean by "home router" exactly?

Any router that uses dnsmasq and allows you to change its configuration can be made to query all servers.

I mean Asus AC68U. I'm not sure how good my ISP's DNS servers are; sometimes the main one is not responding. So I wonder if I will get benefit from query both servers at the same time, and wonder how to configure it.

 

[ColinTaylor]

I mean Asus AC68U. I'm not sure how good my ISP's DNS servers are; sometimes the main one is not responding. So I wonder if I will get benefit from query both servers at the same time, and wonder how to configure it.

It sounds like you could benefit from it. (But remember RMerlin's answer to your question in the other thread about CDN being slower for non-local DNS.)

Setup the 2 DNS servers in the GUI as normal and enable support for custom config files (https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files)

Then Telnet/SSH into the router and type the following command:

echo "all-servers" >> /jffs/configs/dnsmasq.conf.add

Reboot the router and you should be OK.

 

[Wutikorn]

It sounds like you could benefit from it. But remember RMerlin's answer to your question in the other thread about CDN being slower.

Setup the 2 DNS servers in the GUI as normal and enable support for custom config files (https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files)

Then Telnet/SSH into the router and type the following command:

echo "all-servers" >> /jffs/configs/dnsmasq.conf.add

Reboot the router and you should be OK.

Is that only for AsusWRT-Merlin firmware? Or is there a way to do this in stock firmware too?

 

[ColinTaylor]

Is that only for AsusWRT-Merlin firmware? Or is there a way to do this in stock firmware too?

Merlin only. Stock firmware doesn't have support for custom config files.

 

[Wutikorn]

Merlin only. Stock firmware doesn't have support for custom config files.

Okay, I will try this in a month when I am at my house. Thanks

 

[Wutikorn]

It sounds like you could benefit from it. (But remember RMerlin's answer to your question in the other thread about CDN being slower for non-local DNS.)

Setup the 2 DNS servers in the GUI as normal and enable support for custom config files (https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files)

Then Telnet/SSH into the router and type the following command:

echo "all-servers" >> /jffs/configs/dnsmasq.conf.add

Reboot the router and you should be OK.

Do I have to add this again if I changed my DNS servers?

 

[ColinTaylor]

Do I have to add this again if I changed my DNS servers?

No