DNS

Name

• resolver.tiar.app

• IPv4: 174.138.21.128 port 53 or port 5003

• IPv6: [2400:6180:0:d0::5f6e:4001] port 53 or port 5003

Table of Contents

• Features

• Configuration

  • Acrylic DNS Proxy
  • Adguard dnsproxy
  • Adguard Home
  • Dnsmasq
  • Juniper SRX
  • Mikrotik
  • OpenWrt
  • pfSense/OPNsense
  • Pi-hole
  • systemd-resolved
  • Technitium DNS Server
  • Ubnt EdgeOS
  • Unbound
  • YogaDNS

Features

• Filter: Ad, Ad-tracking and Malware (AdBlock)
• DNSSEC Validation
• No EDNS Client Subnet (ECS)
• No logs
• Free

Configuration

Acrylic DNS Proxy

• Linux
• MacOS
• Windows
• Others

Howto:

PrimaryServerAddress=174.138.21.128
PrimaryServerPort=5003

https://mayakron.altervista.org/support/acrylic/Configuration.htm

Adguard dnsproxy

• Linux
• MacOS
• Windows
• Others

Howto:

./dnsproxy -u 174.138.21.128:5003 -v -o log.txt

https://github.com/AdguardTeam/dnsproxy

Adguard Home

• Linux
• MacOS
• Windows
• Others

Howto:

https://adguard.com/en/blog/in-depth-review-adguard-home.html#dns

Dnsmasq

• Linux
• MacOS
• Windows
• Others

Howto:

Edit /etc/dnsmasq.conf

no-resolv
server=174.138.21.128#5003
cache-size=1000

Edit /etc/resolv.conf

nameserver ::1
nameserver 127.0.0.1
options trust-ad

http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

Juniper SRX

• Linux
• MacOS
• Windows
• Others

Howto:

[edit security nat]

destination {
    pool DNS-Tiarap {
        address 174.138.21.128/32 port 5003;
    }
    rule-set Redirect-DNS {
        from interface ge-0/0/1.0;
        rule DNS-All {
            match {
                destination-address 0.0.0.0/0;
                destination-port 53;
            }
            then {
                destination-nat pool DNS-Tiarap;
            }
        }
    }
}

Mikrotik

• Linux
• MacOS
• Windows
• Others

Howto:

In /ip firewall nat

add chain=dstnat action=dst-nat to-addresses=174.138.21.128 to-ports=5003 protocol=tcp dst-port=53

add chain=dstnat action=dst-nat to-addresses=174.138.21.128 to-ports=5003 protocol=tcp dst-port=53

https://wiki.mikrotik.com/wiki/Force_users_to_use_specified_DNS_server

Openwrt

• Linux
• MacOS
• Windows
• Others

Howto:

uci -q delete dhcp.@dnsmasq[0].server

uci add_list dhcp.@dnsmasq[0].server="174.138.21.128#5003"

uci set dhcp.@dnsmasq[0].noresolv="1"

uci commit dhcp

/etc/init.d/dnsmasq restart

pfSense/OPNsense

• Linux
• MacOS
• Windows
• Others

Howto

Menu > Service > DNS Resolver

General DNS Resolver Options

• Enable DNS Resolver
• Enable Forwarding Mode
• Save

Menu > System > General Setup

DNS Server Settings

• DNS Server 174.138.21.128
• Save

Menu > Firewall > NAT > Port Forward

• Interface: WAN
• Protocol: TCP/UDP
• Destination: Single host or alias 174.138.21.128
• Destination Port range: From port: DNS - To port: DNS
• Redirect target IP: 174.138.21.128
• Redirect target port: Others 5003
• Save

Pi-hole

• Linux
• MacOS
• Windows
• Others

Howto:

https://docs.pi-hole.net/guides/unbound/

systemd-resolved

• Linux
• MacOS
• Windows
• Others

Howto:

edit /etc/systemd/resolved.conf, change DNS= as below:

[Resolve]
DNS=174.138.21.128:5003

Restart systemd-resolved:

systemctl restart systemd-resolve

Check status:

resolvectl status

https://www.freedesktop.org/software/systemd/man/resolved.conf.html

Technitium DNS Server

• Linux
• MacOS
• Windows
• Others

Howto:

https://blog.technitium.com/2018/06/configuring-dns-server-for-privacy.html

Ubnt EdgeOS

• Linux
• MacOS
• Windows
• Others

Howto:

eth0 = WAN interface

eth1 = LAN interface

Enter configuration mode

configure

Set DNS IP 174.138.21.128 and Port 5003

set service dns forwarding options 'server=174.138.21.128#5003'

Listen on LAN interface

set service dns forwarding listen-on eth0

tell dhcp-client not to add the ISP DNS server to /etc/resolv.conf

set interfaces ethernet eth0 dhcp-options name-server no-update

commit & save configuration

commit; save

https://help.ui.com/hc/en-us/articles/115010913367-EdgeRouter-DNS-Forwarding-Setup-and-Options

Unbound

• Linux
• MacOS
• Windows
• Others

Howto:

forward-zone:
        name: "."
        forward-addr: 174.138.21.128@5003

https://wiki.alpinelinux.org/wiki/Setting_up_unbound_DNS_server

YogaDNS

• Linux
• MacOS
• Windows
• Others

Howto:

https://www.yogadns.com/docs/#servers