From 956b4f57588321d29ad32328b5c9df4145bd9664 Mon Sep 17 00:00:00 2001 From: dct-infra <84126039+dct-infra@users.noreply.github.com> Date: Thu, 13 Jan 2022 09:54:57 +0300 Subject: [PATCH 1/4] IP changed (#620) IP changed --- v3/public-resolvers.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 2d7dbfb4..3c2d2e56 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -1061,7 +1061,7 @@ sdns://AQcAAAAAAAAAFDEwMy4xNTguMjIzLjE2Mjo4NDQzIB9z-95JSBqhYTv8UIQqUs65Ym2DYNXzB DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Saint Petersburg, Russia. -sdns://AQcAAAAAAAAADDk0LjI0Mi41OS4zNSBODx7VDHmrdwypnwyTGYbrznR8UddwTB13_uABxZynrBcyLmRuc2NyeXB0LWNlcnQuZGN0LXJ1MQ +sdns://AQcAAAAAAAAADTk0LjI0Mi41OC4xMzYgH3P73klIGqFhO_xQhCpSzrlibYNg1fMF_lw36Qfw-30XMi5kbnNjcnlwdC1jZXJ0LmRjdC1ydTE ## dct-ru2 From 556ccd8430a9767ede09b1e4391d5b8f4bc6c5ea Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Thu, 13 Jan 2022 07:55:20 +0100 Subject: [PATCH 2/4] Sign --- v1/dnscrypt-resolvers.csv | 2 +- v1/dnscrypt-resolvers.csv.minisig | 6 +++--- v2/public-resolvers.md | 2 +- v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md.minisig | 6 +++--- 5 files changed, 11 insertions(+), 11 deletions(-) diff --git a/v1/dnscrypt-resolvers.csv b/v1/dnscrypt-resolvers.csv index 24d3f5ea..7717d82e 100644 --- a/v1/dnscrypt-resolvers.csv +++ b/v1/dnscrypt-resolvers.csv @@ -88,7 +88,7 @@ d0wn-tz-ns1,d0wn-tz-ns1,Server provided by Martin 'd0wn' Albus,,,,2,yes,yes,no,4 d0wn-tz-ns1-ipv6,d0wn-tz-ns1-ipv6,Server provided by Martin 'd0wn' Albus,,,,2,yes,yes,no,[2c0f:fda8:5::2ed1:d2ec],2.dnscrypt-cert.tz.d0wn.biz,D606:15FB:D145:3BA1:4E76:8A3E:5C5C:B3AC:1746:1331:463D:A0AF:8CF7:DF04:DA4D:756D, dct-at1,dct-at1,"DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Vienna, Austria.",,,,2,yes,yes,no,83.138.55.36,2.dnscrypt-cert.dct-de1,4E0F:1ED5:0C79:AB77:0CA9:9F0C:9319:86EB:CE74:7C51:D770:4C1D:77FE:E001:C59C:A7AC, dct-de1,dct-de1,"DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Düsseldorf, Germany.",,,,2,yes,yes,no,103.158.223.162:8443,2.dnscrypt-cert.dct-de1,1F73:FBDE:4948:1AA1:613B:FC50:842A:52CE:B962:6D83:60D5:F305:FE5C:37E9:07F0:FB7D, -dct-ru1,dct-ru1,"DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Saint Petersburg, Russia.",,,,2,yes,yes,no,94.242.59.35,2.dnscrypt-cert.dct-ru1,4E0F:1ED5:0C79:AB77:0CA9:9F0C:9319:86EB:CE74:7C51:D770:4C1D:77FE:E001:C59C:A7AC, +dct-ru1,dct-ru1,"DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Saint Petersburg, Russia.",,,,2,yes,yes,no,94.242.58.136,2.dnscrypt-cert.dct-ru1,1F73:FBDE:4948:1AA1:613B:FC50:842A:52CE:B962:6D83:60D5:F305:FE5C:37E9:07F0:FB7D, dct-ru2,dct-ru2,"DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Moscow, Russia.",,,,2,yes,yes,no,185.22.154.19,2.dnscrypt-cert.dct-ru2,1F73:FBDE:4948:1AA1:613B:FC50:842A:52CE:B962:6D83:60D5:F305:FE5C:37E9:07F0:FB7D, decloudus-nogoogle-tst,decloudus-nogoogle-tst,"Servers helps you deGoogle and unGoogle by completely blocking Google tracking in addition to annoying ads, online trackers, and malware. Supports DNSSEC. No Logs.",,,,2,yes,yes,no,176.9.199.158:8443,2.dnscrypt-cert.DeCloudUs-test,FBDD:87BD:5DE0:AC4B:B4DD:16EF:5F44:FEEC:E64F:B468:BF75:CB28:2E94:6566:78E0:0A2E, decloudus-nogoogle-tstipv6,decloudus-nogoogle-tstipv6,"Servers helps you deGoogle and unGoogle by completely blocking Google tracking in addition to annoying ads, online trackers, and malware. Supports DNSSEC. No Logs. For IPv6.",,,,2,yes,yes,no,[2a01:4f8:151:11b0::3]:8443,2.dnscrypt-cert.DeCloudUs-test,FBDD:87BD:5DE0:AC4B:B4DD:16EF:5F44:FEEC:E64F:B468:BF75:CB28:2E94:6566:78E0:0A2E, diff --git a/v1/dnscrypt-resolvers.csv.minisig b/v1/dnscrypt-resolvers.csv.minisig index fcb4a18e..12de0296 100644 --- a/v1/dnscrypt-resolvers.csv.minisig +++ b/v1/dnscrypt-resolvers.csv.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5xv/RUVuU2YmT/5vG9An/mH4Fdf3CHxRk7iik2QjcggWjqAn/R0nyk3lWeAfHdIS/i1BAb1TVk+ZdBQOgp80ngk= -trusted comment: timestamp:1641598816 file:dnscrypt-resolvers.csv -hzPQkQxnsfyW9d9V1zM1mDVDwUnvEc0T0rR6LqoddEkcDoeoSihhcOo/mUBn8lKdFx/YP9J1wOqKu6GYS/BjAA== +RWQf6LRCGA9i5wJRzv1zb2h4ypqANDMb0My8WfURi80o2+Mhc2QhKp6+JenrH4lzx6j8G4u/MYKrVwrbBdx2H9fqzuzBrVKJ9QY= +trusted comment: timestamp:1642056920 file:dnscrypt-resolvers.csv +F21RsJzRluFkX4lE6Q8/vGcFdCkjyrmcgIAsWSUCWP63CZngkrIVsdC7vClvSQFUFDl0msFGdocbgTGqF/s8BQ== diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index 1d5b1bb7..65c3f897 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -1048,7 +1048,7 @@ sdns://AQcAAAAAAAAAFDEwMy4xNTguMjIzLjE2Mjo4NDQzIB9z-95JSBqhYTv8UIQqUs65Ym2DYNXzB DNSCrypt | IPv4 only | Non-logging | Non-filtering | DNSSEC | Saint Petersburg, Russia. -sdns://AQcAAAAAAAAADDk0LjI0Mi41OS4zNSBODx7VDHmrdwypnwyTGYbrznR8UddwTB13_uABxZynrBcyLmRuc2NyeXB0LWNlcnQuZGN0LXJ1MQ +sdns://AQcAAAAAAAAADTk0LjI0Mi41OC4xMzYgH3P73klIGqFhO_xQhCpSzrlibYNg1fMF_lw36Qfw-30XMi5kbnNjcnlwdC1jZXJ0LmRjdC1ydTE ## dct-ru2 diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index 14b9be06..ddae58d0 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5+GnXJ/EfD2lO+TY/fnqY9DpvJY10egz5w/+uAKPrESfxvDgYDtGoDQDPo7Vzud2jZp/OvnjE0AUw/enWxePngg= -trusted comment: timestamp:1641598816 file:public-resolvers.md -D/UjSx/+wg9g0xLK23alc788XZ+ASc5WJCjNVuvJqqv5Om9ASseTsQrQvpK9qFHSAZ+fEnNXnjmBbn8MgX17Bg== +RWQf6LRCGA9i56kh/UIZ1WIn+hs1hFnRl9IvJ1RpLQdQdQvjLLdOF33MucgFdQ/bf/ZXCvJ46f5TQyyeQPsSL/WtJuDrrMApzwI= +trusted comment: timestamp:1642056920 file:public-resolvers.md +UBTG98d9oXSLqbr9eNmkGT+PVAldoRi/hxmFSkwvqaudrOsY9MUF8vQKaBo11qnfWA27ZIl1ozZpRvpbt4oIDA== diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index bced3383..0e7cedcb 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5wLtq2J0A1Oq5WaJEWYDmXFYGQmtM/V4qf+A0zXD9NmflJyk7eVn5X7Qj3u/6lXufXJi51DVK8wCmiMNmxh8tQY= -trusted comment: timestamp:1641598816 file:public-resolvers.md -CwdCesLUAN6LpLcNGtstf0SFv7SS0Hj0CbDAahC0xEPVFFCmcXAcBmeu2R/0+1IzoGQATyZeDLfUX5azbcN2Cw== +RWQf6LRCGA9i53y2dBLrOlFVNNZi+72l6ZUAx1vu2lcLJxo19QYzJiQ9R4Cz2kIIqYfIqG5sUaAHNYxrxdbfkVrNkGKxLxvTQQQ= +trusted comment: timestamp:1642056920 file:public-resolvers.md +HoD9AOAiyqol8NvbrVN1RxRjEasWAoe92kfSjT68IgvGrq+D/PWrk8teSD3lmTLOJampzVhaPM41k2Kc6sYWAA== From 1921eba4444f8eb0b46105bb1f1ae710912ec02f Mon Sep 17 00:00:00 2001 From: HellboyPI Date: Thu, 13 Jan 2022 09:15:23 +0100 Subject: [PATCH 3/4] Cisco OpenDNS without filtering (#621) I found about Cisco OpenDNS without filtering on the wiki: https://en.wikipedia.org/wiki/OpenDNS I extracted the ip address from the DOH address: https://doh.sandbox.opendns.com/dns-query This ip address is different from the ip address on the wiki page, but it is also valid: https://blogs.cisco.com/security/cisco-interop-discovery-of-designated-resolvers-protocol-implemented I use this ip address, because the latency is better with this ip address. Co-authored-by: Frank Denis <124872+jedisct1@users.noreply.github.com> --- v3/public-resolvers.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 3c2d2e56..3d55ed23 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -348,6 +348,17 @@ address when forwarding them to a selection of companies and organizations. sdns://AQEAAAAAAAAADjIwOC42Ny4yMjAuMjIwILc1EUAgbyJdPivYItf9aR6hwzzI1maNDL4Ev6vKQ_t5GzIuZG5zY3J5cHQtY2VydC5vcGVuZG5zLmNvbQ +## cisco-sandbox + +Cisco OpenDNS Sandbox (anycast) - RFC-compliant DNS service without filtering + +dnssec/log/no-filter/ecs 146.112.41.4 + +Warning: This server is incompatible with anonymization. + +sdns://AQUAAAAAAAAADDE0Ni4xMTIuNDEuNCC3NRFAIG8iXT4r2CLX_WkeocM8yNZmjQy-BL-rykP7eRsyLmRuc2NyeXB0LWNlcnQub3BlbmRucy5jb20 + + ## cisco-doh Remove your DNS blind spot (DoH protocol) From aba171e7b40c1c9d509d833fb51451d9a2cb754f Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Thu, 13 Jan 2022 09:15:55 +0100 Subject: [PATCH 4/4] Sign --- v1/dnscrypt-resolvers.csv | 1 + v1/dnscrypt-resolvers.csv.minisig | 6 +++--- v2/public-resolvers.md | 11 +++++++++++ v2/public-resolvers.md.minisig | 6 +++--- v3/public-resolvers.md | 22 +++++++++++----------- v3/public-resolvers.md.minisig | 6 +++--- 6 files changed, 32 insertions(+), 20 deletions(-) diff --git a/v1/dnscrypt-resolvers.csv b/v1/dnscrypt-resolvers.csv index 7717d82e..409bb2af 100644 --- a/v1/dnscrypt-resolvers.csv +++ b/v1/dnscrypt-resolvers.csv @@ -16,6 +16,7 @@ cisco,cisco,Remove your DNS blind spot (DNSCrypt protocol),,,,1,yes,no,no,208.67 cisco-familyshield,cisco-familyshield,Block websites not suitable for children (DNSCrypt protocol),,,,1,yes,no,no,208.67.220.123,2.dnscrypt-cert.opendns.com,B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79, cisco-familyshield-ipv6,cisco-familyshield-ipv6,Block websites not suitable for children (IPv6),,,,1,yes,no,no,[2620:119:35::35],2.dnscrypt-cert.opendns.com,B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79, cisco-ipv6,cisco-ipv6,Cisco OpenDNS over IPv6 (DNSCrypt protocol),,,,1,yes,no,no,[2620:0:ccc::2],2.dnscrypt-cert.opendns.com,B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79, +cisco-sandbox,cisco-sandbox,Cisco OpenDNS Sandbox (anycast) - RFC-compliant DNS service without filtering,,,,1,yes,no,no,146.112.41.4,2.dnscrypt-cert.opendns.com,B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79, cleanbrowsing-adult,cleanbrowsing-adult,"Blocks access to all adult, pornographic and explicit sites. It does",,,,2,yes,yes,no,185.228.168.10:8443,cleanbrowsing.org,BCAC:32FA:D543:6917:1F08:32D6:0750:27C3:208C:EEF0:E8E9:9F94:18DC:7760:65D4:8F29, cleanbrowsing-adult-ipv6,cleanbrowsing-adult-ipv6,"Blocks access to all adult, pornographic and explicit sites. It does",,,,2,yes,yes,no,[2a0d:2a00:1::1]:8443,cleanbrowsing.org,BCAC:32FA:D543:6917:1F08:32D6:0750:27C3:208C:EEF0:E8E9:9F94:18DC:7760:65D4:8F29, cleanbrowsing-family,cleanbrowsing-family,"Blocks access to all adult, pornographic and explicit sites. It also",,,,2,yes,yes,no,185.228.168.168:8443,cleanbrowsing.org,BCAC:32FA:D543:6917:1F08:32D6:0750:27C3:208C:EEF0:E8E9:9F94:18DC:7760:65D4:8F29, diff --git a/v1/dnscrypt-resolvers.csv.minisig b/v1/dnscrypt-resolvers.csv.minisig index 12de0296..4adeb15c 100644 --- a/v1/dnscrypt-resolvers.csv.minisig +++ b/v1/dnscrypt-resolvers.csv.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i5wJRzv1zb2h4ypqANDMb0My8WfURi80o2+Mhc2QhKp6+JenrH4lzx6j8G4u/MYKrVwrbBdx2H9fqzuzBrVKJ9QY= -trusted comment: timestamp:1642056920 file:dnscrypt-resolvers.csv -F21RsJzRluFkX4lE6Q8/vGcFdCkjyrmcgIAsWSUCWP63CZngkrIVsdC7vClvSQFUFDl0msFGdocbgTGqF/s8BQ== +RWQf6LRCGA9i552DCC5ebGFuj7KMtVSogt6AZB20e0qY9dsExY8oZxup2gO7JhHkYeboHwRujMcgpMIcKbItVKOOKXvJeOi1bAw= +trusted comment: timestamp:1642061733 file:dnscrypt-resolvers.csv +35iNDib6WpRSweg6d5ODbrnki3E6hbqlPcNklfbEpeaoWa+BoraPWesWM0YQ3xlfbAPRCiB6yzifKsV5D8bIBg== diff --git a/v2/public-resolvers.md b/v2/public-resolvers.md index 65c3f897..8e47698e 100644 --- a/v2/public-resolvers.md +++ b/v2/public-resolvers.md @@ -394,6 +394,17 @@ address when forwarding them to a selection of companies and organizations. sdns://AgAAAAAAAAAAEFsyNjIwOjExOTpmYzo6Ml0gaFOPx4GOgdJCKpBgY2-lKCpD9g3OG7pgwtfzq6tmAJcPZG9oLm9wZW5kbnMuY29tCi9kbnMtcXVlcnk +## cisco-sandbox + +Cisco OpenDNS Sandbox (anycast) - RFC-compliant DNS service without filtering + +dnssec/log/no-filter/ecs 146.112.41.4 + +Warning: This server is incompatible with anonymization. + +sdns://AQUAAAAAAAAADDE0Ni4xMTIuNDEuNCC3NRFAIG8iXT4r2CLX_WkeocM8yNZmjQy-BL-rykP7eRsyLmRuc2NyeXB0LWNlcnQub3BlbmRucy5jb20 + + ## cleanbrowsing-adult Blocks access to all adult, pornographic and explicit sites. It does diff --git a/v2/public-resolvers.md.minisig b/v2/public-resolvers.md.minisig index ddae58d0..474fe664 100644 --- a/v2/public-resolvers.md.minisig +++ b/v2/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i56kh/UIZ1WIn+hs1hFnRl9IvJ1RpLQdQdQvjLLdOF33MucgFdQ/bf/ZXCvJ46f5TQyyeQPsSL/WtJuDrrMApzwI= -trusted comment: timestamp:1642056920 file:public-resolvers.md -UBTG98d9oXSLqbr9eNmkGT+PVAldoRi/hxmFSkwvqaudrOsY9MUF8vQKaBo11qnfWA27ZIl1ozZpRvpbt4oIDA== +RWQf6LRCGA9i5xgZllOfiMiA8/NaHMaJEP0GA4j3kVp5HaUF/V6FHi68w79kOzIrjKe3uv/dtDfD9qCDuJmLoFbrUgnV3ycEJAE= +trusted comment: timestamp:1642061733 file:public-resolvers.md +D30O4hcDwwavveOv3iWCM8QKd1QQZA7k+juNIIoPrpWOGdk4m+ZJ4xndE/ilZXX33PPm4IfhSNfPlbSsXKQuDA== diff --git a/v3/public-resolvers.md b/v3/public-resolvers.md index 3d55ed23..2cb3bb60 100644 --- a/v3/public-resolvers.md +++ b/v3/public-resolvers.md @@ -348,17 +348,6 @@ address when forwarding them to a selection of companies and organizations. sdns://AQEAAAAAAAAADjIwOC42Ny4yMjAuMjIwILc1EUAgbyJdPivYItf9aR6hwzzI1maNDL4Ev6vKQ_t5GzIuZG5zY3J5cHQtY2VydC5vcGVuZG5zLmNvbQ -## cisco-sandbox - -Cisco OpenDNS Sandbox (anycast) - RFC-compliant DNS service without filtering - -dnssec/log/no-filter/ecs 146.112.41.4 - -Warning: This server is incompatible with anonymization. - -sdns://AQUAAAAAAAAADDE0Ni4xMTIuNDEuNCC3NRFAIG8iXT4r2CLX_WkeocM8yNZmjQy-BL-rykP7eRsyLmRuc2NyeXB0LWNlcnQub3BlbmRucy5jb20 - - ## cisco-doh Remove your DNS blind spot (DoH protocol) @@ -415,6 +404,17 @@ address when forwarding them to a selection of companies and organizations. sdns://AgAAAAAAAAAAEFsyNjIwOjExOTpmYzo6Ml0gaFOPx4GOgdJCKpBgY2-lKCpD9g3OG7pgwtfzq6tmAJcPZG9oLm9wZW5kbnMuY29tCi9kbnMtcXVlcnk +## cisco-sandbox + +Cisco OpenDNS Sandbox (anycast) - RFC-compliant DNS service without filtering + +dnssec/log/no-filter/ecs 146.112.41.4 + +Warning: This server is incompatible with anonymization. + +sdns://AQUAAAAAAAAADDE0Ni4xMTIuNDEuNCC3NRFAIG8iXT4r2CLX_WkeocM8yNZmjQy-BL-rykP7eRsyLmRuc2NyeXB0LWNlcnQub3BlbmRucy5jb20 + + ## cleanbrowsing-adult Blocks access to all adult, pornographic and explicit sites. It does diff --git a/v3/public-resolvers.md.minisig b/v3/public-resolvers.md.minisig index 0e7cedcb..4d9830aa 100644 --- a/v3/public-resolvers.md.minisig +++ b/v3/public-resolvers.md.minisig @@ -1,4 +1,4 @@ untrusted comment: signature from minisign secret key -RWQf6LRCGA9i53y2dBLrOlFVNNZi+72l6ZUAx1vu2lcLJxo19QYzJiQ9R4Cz2kIIqYfIqG5sUaAHNYxrxdbfkVrNkGKxLxvTQQQ= -trusted comment: timestamp:1642056920 file:public-resolvers.md -HoD9AOAiyqol8NvbrVN1RxRjEasWAoe92kfSjT68IgvGrq+D/PWrk8teSD3lmTLOJampzVhaPM41k2Kc6sYWAA== +RWQf6LRCGA9i53iAfAqSoHTm4L8Y+2K2qLioM/UL1CqHeuSGlUBo4qsVE6ly+jeeyw5SJ695DwSARm84dprrO5eg4urV7KvrwAs= +trusted comment: timestamp:1642061733 file:public-resolvers.md +sfSdKSvVegPU43qGOBxxvGDsa38aLl+/g6f7I15ilTzrBYNSDlV6GS/YqNQD/NL8B6kNjG82BhYjdSZZpm/8CQ==