undefined | Better HN

0 pointsjosephcsible3y ago0 comments

Doing so is usually pointless. Either your ISP isn't evil, in which case there's no need since you could just use theirs, or your ISP is evil, in which case they'll hijack all of the recursive queries that your own resolver would need to make.

0 comments

justsomehnguy3y ago

Note: you can run your own resolver not at your home machine

josephcsibleOP3y ago

If you have a suitable machine to do so, then couldn't you just tunnel your DNS traffic through it and out its default resolver, without having to run your own?

justsomehnguy3y ago

The question would be why bother with 3rd-party resolvers in that case?

NB I have a slightly different setup - I run Unbound locally and route DNS requests through the 'suitable machine' on VPS over VPN established by my LAN router. I considered moving the resolver there but didn't yet found the setup what would be usable for me when I would be out of my LAN. Opening my resolver to the whole world is the way to be a part of the bot relays for DDoS attacks, so this is out of question.

j / k navigate · click thread line to collapse

0 pointsjosephcsible3y ago0 comments

0 comments

justsomehnguy3y ago

Note: you can run your own resolver not at your home machine

josephcsibleOP3y ago

If you have a suitable machine to do so, then couldn't you just tunnel your DNS traffic through it and out its default resolver, without having to run your own?

justsomehnguy3y ago

The question would be why bother with 3rd-party resolvers in that case?

j / k navigate · click thread line to collapse