[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-relays] PSA regarding Quad9 DNS Resolver
- To: tor-relays@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: [tor-relays] PSA regarding Quad9 DNS Resolver
- From: "Nathaniel Suchy (Lunorian)" <me@xxxxxxxxxxx>
- Date: Fri, 11 May 2018 17:45:41 -0400
- Arc-authentication-results: i=1; auth=pass smtp.auth=me@xxxxxxxxxxx smtp.mailfrom=me@xxxxxxxxxxx
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lunorian.is; s=dkim; t=1526075147; h=from:sender:reply-to:subject:date:message-id:to:cc:mime-version:content-type:content-transfer-encoding:resent-to:resent-cc:resent-from:resent-sender:resent-message-id:in-reply-to:references:list-id:list-owner:list-unsubscribe:list-subscribe:list-post; bh=g03IpFQL42kOpbXb/QrGcNn+wDIucvFqI+foNnR46Ng=; b=0zJ7Nqn4zkbBLWwV4m2D8ALVZWAbyaSCcQrbgGS6aqr7a9PFPl30XJaC5/Dldy1xbofn0Q SA0EXiaCloorKyFyiNXthfZuMRxc5spfWYj/Kfb/Hc5LtGR0t24/Grfgl05UM8D/PESgOP KWUlJr8iNOL0HaMw+7zpDcyGts1Ep61SLlvFEb5qHg5VaHuyYGO+StgXrNx/QpIWxodQoo owl0wwPGajU9NpM9IUHDeK2p1M2iQlxMW+f//r6K3JicnlHUce5TVz5QK4bs2wD5vcHL9h YqF+vm8NoH89NmtUNT56QykySU1R/Don1V8jgZhQMU2+ng3+F6SRG5iPXvWkcA==
- Arc-seal: i=1; s=dkim; d=lunorian.is; t=1526075147; a=rsa-sha256; cv=none; b=jMfyVXCFIXR5e2xGLwI8k+CtqRlfRnRI0SqpL0b8wStFtZ3XC9Xj5RhTMb9Vvmi8sst30blyErGMQ4OuxZ+WeRsvpR1IHlm4MRyG53HPYS05hFMVO1DL5XlqI04n8oklpFbKFRootayZe+Ehkt1SEkjP6kAzabwwXSpRXPkq9g0Zx4XFasHOYXsLKV1NKDw1+73Hy3UEQ4PuEiHmj8aLCxtwa+YXKQexRYIpq0lH3oKVkBfNXyNR1IhJFPXrBwXf7jjUUuITT6lHh9nRi5uqLdWd5oOwN+DY42dzNGgVjDRgdVh4aw9Tzw2YpqJQhLDQG2TRCB2qPHw3DxeRmkRasg==
- Autocrypt: addr=me@xxxxxxxxxxx; prefer-encrypt=mutual; keydata= xsFNBFqE2wkBEAC/GxQ6HUGzogvdh6ofRRHcC0a248dLnGM/DyqotoHuQlIdpKJWsVMt5GLA rfg03HipWRk0C8ClPM5PJoUonlm//cmX1tKEraoqiEA1eDYK2BqGXJmhMosn42FpGg6h2BXD pOBcMCFPotAxp8ZeKIw8mwXpC/tJ9lbiU2t5wSJoJFrX1ZVwOAdaANS7FX23OVm1b3KaAR4Z 7qo6JGcxwrGwkk2hYEg5Uam2+0EIEWwh046wlimO54nZUkvq51/5UkuR/eog9hfwhqOomjDT JSn45443lsxChDPCzwUTXpInRWQlSKFQQCe+1TuOqOuIXoDcdYSSUgCxmUmw8Acy4zcRDLrV s+EeI/8tLkPVb2duXLzUIPX/I4/tcxTYF7tGG5z4g1kgDKMQntcWv4UYAEVgaMOD6UQc/EWX ugVrShWInQ3zswvVsH3DkLmYG8QX4w4YLTpb13ICT23b30Q6g0KRER1n3OovhmJihby2tGlM xgNUqE+JHw6VtJdpEYJCVCX8HUuQilrCWzIaeGC6wvJpy3DukVB1PRiLDYODGF1TZTarryAn uznDqi1JTpbF2h2YoRThj2cOa1+FItVcSfrVosdvlO7Ttj3dC5i7TTfrCBk8DxW2k72rqtcC tz2CuGmRBpmdlXUGFdRLck+qc2d78sGRWLR/aQ1nJGu06MTZ8wARAQABzSBOYXRoYW5pZWwg U3VjaHkgPG1lQGx1bm9yaWFuLmlzPsLBlAQTAQgAPhYhBEdTkX7+BHbOmAoeivM+9dFMIjmS BQJahNsJAhsDBQkHhh+ABQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAAoJEPM+9dFMIjmSL24P /0j7tkc38Sy0417REtnyXekD89tHStMYfU5hBYkKQC6X3iaG91FQ/P7rdWvdZx5XrZBDAuJ6 MyrbprPfygqhwMsxg7VIRhLf2SCnpAqGKjlYdSyOPBlnBpEGjCPUw6i2EJZuIwIzVboGbvCU R8KNgWtil1wRAJURD8cHWwpciH1zfWfuIZdErN9xXR6IeZjxop2BqgzmgFJMLsZT8NVIJbzw YOeqAcA926gAGVZRMkYLFSSQ6R1+xmLJekDgFQYDB+oCdV7CqkDZz2ExSNVT1AdcM4BFRxuc CbqZluk58BiCqXEkUUVhXeoo3qCkRpP/vxoHj6ScD66VbbUF6WbPBymoP7Z8muEFBXxP2EdU DlQ0tNv8tsVineFOAKFXmnq1sRN8y5q6CsiOEzYGE1zyt3GcaI+8icU61WyPFSPnbP1wwkv4 6MSmx6HGc2d6qQWjIVfcXaI/QH7d4G9nx/4NvhtM6af96PsVfW5lZQ2i5CB6hKEijMMsB4sL BfvUpRDuBYREFOsNhASd9OFEdNalvnbOeWJqcTvh2F18WJFkaaNT0R74zS2HjCVlOtJ8CbvJ 5M/3oVb1gGXX+l1kQiUdMC493BrcJqMOWnRQ4Kv8bzEERhFYzOA3eSNjQjeHbPFhBR9kQd32 zMoWoUlMTQs7DwpRfBAwahcIllA2sjcvJBD7zsFNBFqE2wkBEAD0vhAUYWoAsyfOWO2ouFU9 n7CjDtLmDoFKiV4JnLvurgHa2dZa8+Wo6F68IVCmWmaQhoBBr55ucjUogCVFlDiL4EnA3B/2 KyU502kfu0pSfDUI7hYYlc1D0RS8N6otEjNAv+0cpUHfMHzP1dUQ4voXCmbI4T/S6cXI5oTz 2NW1jL+MNgkndsq9w/+DNWvCdNoGGSwCFSSp7mEMZiYtrlP9uBZIAHlYfuj2SB1aVUBhNIr2 /ELvR1ozZSmYoucODWleQPPNxOQXpTBBssBCx1wAfGywU0VvTgfu/fbYmaRI6/IyXMUqeoZH nVqujfXByNwsKGTA0FlOxtlv9e2H8I8FXRgcJ/07yjjzLMIbrnQ77QIwI3igUcTo9kOOzXcb X6w7EznxDr9GsTwf6VmntUungmYcH6lLua8oBnums9ZV6PS7ajBbYyqndWJD8IpTpwloyVym b5tJfkWmfX21GPnIecg2cBOgpv3i12fX1My9fnigFikwr28fYjdPkHh9eg8YXROAgc45+Hrd f0eo0Bhhp0yIHdBzanwmBsK5qFieB/WEcydtMzdszRStIEY4E9OUIlz/v8E94sM2NeKwhcyQ F1IHmdb51pnjZWjHQs9tFnDWguYYQq5P+ntqKIjC8bSEnew6llra97ZFqrwusX4mlMbG5Zbs ZrgJEZ7sbsDumwARAQABwsF8BBgBCAAmFiEER1ORfv4Eds6YCh6K8z710UwiOZIFAlqE2wkC GwwFCQeGH4AACgkQ8z710UwiOZLCBRAApqtfcSPM74tTyQITmXUhxxXeundNDb+KVpeY5CsM tnykpor/wU7h8i86346T2gvmB0UZ7LuR3t1Kilx8dhIdPBVBfOYmnlTipnHHKIvRIe0rAVmH +StJaU0Ll4goG3k5B/AiSztClw4UoEMYUAL/5ONu9W80oyr9+lFPIL8o1sVHQwkOxHx+lIiC FsGH8K9FDIyUFjrPGFAExlUN8oou/RblBRqyhUG3OzSKhr/SGzgVNZivCmrf47WhlbMJd3ZS XWuqlUoYD67oGPZISCAEzjhtOBNInaG1bxTmGT4aPC+wpU39DgIVNhfORP0K8OkACTQ7WUFD 6fz+3ww1zeajebO4Fo0qX5p8qj89pQpav2e6YgsyLARFOVw3Y//wJxKo3QMdUrllcj+YWrII uBsLDMowsjVaxAPfrdV2OurI7swyNZwZFv1Olqzi5DWqLgQt5RdsW2R80RxK5eHG+FBbgfcQ hSx/zl0IGeyd4RA1WBNiedXKPiEFdWe2mz3LZi2rbpQ2KQ8qB7Sf5wddAeJA99XAG8rVoRCS DV4OjYi2H6lgZavYOjEtkHaJgOlrB3LxEUABSWl93WqKjco9t+GyLU3sh0jEhBRNqPUm49x7 miuumoH8Tj6MogkJwNy6Dw+IuD5i5Bi5vrq7o16/aCi5J4AVdnkinPum40NFR7qgnU4=
- Delivered-to: archiver@xxxxxxxx
- Delivery-date: Fri, 11 May 2018 17:46:07 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lunorian.is; s=dkim; t=1526075147; h=from:sender:reply-to:subject:date:message-id:to:cc:mime-version:content-type:content-transfer-encoding:resent-to:resent-cc:resent-from:resent-sender:resent-message-id:in-reply-to:references:list-id:list-owner:list-unsubscribe:list-subscribe:list-post; bh=g03IpFQL42kOpbXb/QrGcNn+wDIucvFqI+foNnR46Ng=; b=YzGIpdRTF934ZdDQSJFllJDpeF3/o+2aMNxksQR+YFbFmIyJFlt2fa4WC+XACxxYB4da73 M99G25qgG9m8tWD0ApN7jVvLPyQoFBad0+ntIAzxOJQtscCQoUCSa7RjFss89PqzuUYCkR yZlO/iYfUp/Oz7VO8jgAQEyE29NAkfa8SAHtOa6R1V5Ynfsq/ziUDAissSilqCUiCEG/ks zt1OgR5z0Kt0B0afEpa2xKUHVP1sTPifEQ4g7PkTG/7pUxo2Bl2OkhbYpGOQ8izqZrI3L2 nfQEZ4HwPMcqn2MpqwHtoKouoWPzRJTq32bmrbJHzK+QwvH/5yksY+2LKuCxiw==
- In-reply-to: <92352c08-01c6-27c8-5710-b694f031c6c3@riseup.net>
- List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
- List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
- List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
- List-post: <mailto:tor-relays@lists.torproject.org>
- List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
- List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
- Openpgp: preference=signencrypt
- References: <762D1A57-26BE-4770-B7E4-F1646B91201B@lunorian.is> <f5f3a594-6cf8-b433-1c56-36ecdafbcf8a@gmx.de> <92352c08-01c6-27c8-5710-b694f031c6c3@riseup.net>
- Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
- Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
- User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.7.0
As long as their alternate resolvers do not censor any queries it's
(probably) allowed and will (probably) not get you flagged as a bad exit
for censoring traffic.
On 5/11/18 12:24 PM, nusenu wrote:
>
>
> Toralf Förster:
>> On 05/11/2018 01:41 PM, Nathaniel Suchy (Lunorian) wrote:
>>> Like OpenDNS, Quad9 is a censoring DNS resolver
>> Is this true for 9.9.9.10 too ?
>
>
> https://quad9.net/faq/
>> Is there a service that Quad9 offers that does not have the blocklist
>> or other security?
>>
>> The primary IP address for Quad9 is 9.9.9.9, which includes the
>> blocklist, DNSSEC validation, and other security features. However,
>> there are alternate IP addresses that the service operates which do
>> not have these security features. These might be useful for testing
>> validation, or to determine if there are false positives in the Quad9
>> system.
>>
>> Secure IP: 9.9.9.9 Provides: Security blocklist, DNSSEC, No EDNS
>> Client-Subnet sent. If your DNS software requires a Secondary IP
>> address, please use the secure secondary address of 149.112.112.112
>>
>> Unsecured IP: 9.9.9.10 Provides: No security blocklist, DNSSEC, sends
>> EDNS Client-Subnet. If your DNS software requires a Secondary IP
>> address, please use the unsecured secondary address of
>> 149.112.112.10
>>
>> Note: Use only one of these sets of addresses secure or unsecured.
>> Mixing secure and unsecured IP addresses in your configuration may
>> lead to your system being exposed without the security enhancements,
>> or your private data may not be fully protected
>
>
>
>
>
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays