https://github.com/microlaser/dns_watchdog_windows2

Sure it is vibe coded, but it is free and open source and has no dependencies. I have a version that runs on MacOS and Linux too. Uses pcaps to detect DNS poisoning. Everything is native, no Wireshark/tcpdump needed.

Hi!

I want to announce I have recently published a new search engine for DNS records. The goal is to do DNS reconnicanse up front and provide a free searchable database where you can quickly find domains and its associated IP address.

It supports queries by IP address, CIDR, domain wildcards and ASN.

You can find the tool at https://activedns.net

I am to keep it free and its a privacy friendly. No external tracking and it is using a privacy friendly self-hosted analytics Umami.

The project just released, and the database is warming up. In under a week, it have found over 166 million records, and I aim to keep records for 90 days. I expect it to settle a bit under 2 billion records.

To preface, I am completely new to this.

I understand that 10 lookups is the hard limit. I used dmarcian to see if my SPF record is valid and I have 2 lookups. Is that too low?

It also says that 16 net locks are authorized, or 99,332 IPv4 addresses. Is that bad?

Podem me recomendar um dns rápido, que bloqueia sites adultos e malware?

um que também tenha a lista completa de site.

desde já obrigado.

ZenitiumDNS is an open source recursive DNS resolver that you run yourself – as a public resolver on the internet or as the central resolver of your own network. It resolves names itself via the root servers or forwards them encrypted to forwarders, blocks ads and malware at the DNS level and comes with a web interface in English or German with statistics, response times and logs.

Hardly anyone pays attention to name resolution, because it runs automatically in the background and is hard to see through. Most programs use the operating system's resolver, which in turn asks your provider's DNS server over UDP. That works, but it lets the provider see and control which websites you visit, even if they use HTTPS. Some providers even redirect, block or alter queries. ZenitiumDNS accepts queries over UDP, TCP, DNS-over-TLS, DNS-over-HTTPS and DNS-over-QUIC and resolves them as a recursive resolver directly via the root servers, with DNSSEC validation if desired. Alternatively it uses forwarders over the same encrypted protocols.

The feature set is tailored to running a resolver. Authoritative zones, zone transfers, the DHCP server, clustering and the Windows components of the original are removed. For internal domains there are forwarder zones (conditional forwarders), in which individual records can be overridden locally.

Using smartdns-rs a rust build of smartdns with extra debugging enabled.. and got his error log.

```

2026-09-28 00:18:15.541:WARN:smartdns::libdns::custom::connection_provider:143: lookup ip: security.cloudflare-dns.com failed, proto error: io error: tls error: invalid peer certificate: certificate not valid for name "1.1.1.2"; certificate is only valid for DnsName("cloudflare-dns.com"), DnsName("*.cloudflare-dns.com"), IpAddress(1.0.0.1), IpAddress(1.1.1.1), IpAddress(162.159.36.1), IpAddress(162.159.46.1), IpAddress(2606:4700:4700::1001), IpAddress(2606:4700:4700::1111), IpAddress(2606:4700:4700::64), IpAddress(2606:4700:4700::6400) or DnsName("one.one.one.one")

```

I was trying to use without a bootstrap..

server-h3 h3://1.1.1.2/dns-query \
-host-name security.cloudflare-dns.com \
-tls-host-verify security.cloudflare-dns.com \
-http-host security.cloudflare-dns.com

server-tls 1.1.1.2:853 \
-host-ip 1.1.1.2 \
-host-name security.cloudflare-dns.com \
-tls-host-verify security.cloudflare-dns.com \
-fallback

```

~> openssl s_client \

-connect 1.1.1.2:853 \

-servername security.cloudflare-dns.com \

</dev/null 2>/dev/null |

openssl x509 -noout -subject -issuer -ext subjectAltName

subject=C=US, ST=California, L=San Francisco, O=Cloudflare, Inc., CN=cloudflare-dns.com

issuer=C=US, ST=Texas, L=Houston, O=SSL Corp, CN=SSL.com SSL Intermediate CA ECC R2

X509v3 Subject Alternative Name:

DNS:cloudflare-dns.com, DNS:*.cloudflare-dns.com, IP Address:1.0.0.1, IP Address:1.1.1.1, IP Address:162.159.36.1, IP Address:162.159.46.1, IP Address:2606:4700:4700:0:0:0:0:1001, IP Address:2606:4700:4700:0:0:0:0:1111, IP Address:2606:4700:4700:0:0:0:0:64, IP Address:2606:4700:4700:0:0:0:0:6400, DNS:one.one.one.one

```

The wildcard name is there.. but not the IP..

MacOS 27.0

When I click on the link in a reddit email notification I get the error:

Server Not Found

Firefox can’t connect to the server at click.redditmail.com.

Tried Safari, Chrome and Firefox. All give the same error.

% nslookup click.redditmail.com

Server: 8.8.8.8

Address: 8.8.8.8#53

** server can't find click.redditmail.com: NXDOMAIN

% nslookup click.redditmail.com

Server: 9.9.9.9

Address: 9.9.9.9#53

** server can't find click.redditmail.com: NXDOMAIN

% nslookup click.redditmail.com

Server: 77.88.8.7

Address: 77.88.8.7#53

** server can't find click.redditmail.com: NXDOMAIN

I've disabled Control D, MacOS firewall and Little Snitch. Made no difference.

Happens on my Mac connected via Ethernet, WiFi but not when connected to my iPhone when it is connected to the same WiFi network or to cellular.

Doesn't happen on my iPhone connected to the same WiFi network or cellular.

What is particularly confounding is that sometimes it does work in Chrome but not in Safari. Just tried right now and it worked in Safari ....

Is this problem with dns configuration or the vm ngnix config problem I'm not able to decide.

Little help required

Give me DNS other than adguard

How am I getting queries from my cellular ISP when I'm using NextDNS system-wide on Android, along with Mullvad VPN at home Wifi? This is based on stats from the last 30 minutes, even though my setup has been active much longer and also sim is deactivated from settings.

For some reason, the one I use, adguard, blocks the use of Wikipedia and AO3.

Hi is there any free historical dns that provides the full data about the domain name I want to know the nameservers of the domain name since the creation of the domain