Welcome to the IPFire Wiki

This wiki is a community-maintained resource about everything there is to know about IPFire. Join us and help us improving it!

Looking for something?

Use the search and find answers to everything about IPFire. If you cannot find what you are looking for, join our community and talk to fellow IPFire users, developers and everybody else involved in the project.

IPFire Community

List of Public DNS Servers

During the process of dial-in, your ISP usually passes two to four DNS servers to the router or modem
for looking up IP addresses. They will be used if you have not set some other DNS servers.

However, it might be possible that these DNS servers are censored, compromised or don't provide DNSSEC validation which makes DNS replies more secure. In case you don't trust your ISPs DNS servers, feel free to use alternate DNS server from the list below.

Operator Location DNS over TLS Address(es)
Alternate DNS US 198.101.242.72
US 23.253.163.53
AS250 / Chaos Computer Club (CCC) DE 194.150.168.168
censurfridns.dk DK yes 89.233.43.71
yes 2001:67c:28a4::
Anycast 91.239.100.100
2002:d596:2a92:1:71:53::
Cleanbrowsing Anycast yes 185.228.168.9
yes 2a0d:2a00:1::2
yes 185.228.169.9
yes 2a0d:2a00:2::2
Cloudflare Anycast yes 1.1.1.1
yes 2606:4700:4700::1111
Anycast yes 1.0.0.1
yes 2606:4700:4700::1001
CyberGhost US 38.132.106.139
UK 194.187.251.67
Digitalcourage DE yes 46.182.19.48
DNSlytics #1 US 216.146.35.35
DNSlytics #2 US 216.146.36.36
French Data Network (FDN) FR 80.67.169.12
2001:910:800::12
FR 80.67.169.40
2001:910:800::40
Freenom World NL 80.80.80.80
NL 80.80.81.81
Google Public Free DNS Anycast 8.8.8.8
Anycast 8.8.4.4
Hurricane Electric Anycast 74.82.42.42
2001:470:20::2
Lightning Wire Labs DE yes 81.3.27.54
yes 2001:470:7655::54
Neustar DNS Advantage US 156.154.70.1
US 156.154.71.1
New Nations DE 5.45.96.220
DE 185.82.22.133
OpenNIC AT 5.132.191.104
AU 111.67.20.8
AU 163.53.248.170
AU 103.236.162.119
CA 104.37.195.178
CA 192.99.85.244
CH 31.171.251.118
CZ 51.254.25.115
DE 82.141.39.32
DE 50.3.82.215
DE 46.101.70.183
DE 94.16.114.254
DE 173.212.234.232
DE 173.249.7.187
DE 130.255.78.223
DE 144.76.133.38
DE 172.104.136.243
DE 94.247.43.254
EC 45.71.112.70
FR 163.172.185.51
FR 87.98.175.85
FR 51.255.48.78
FR 188.165.200.156
FR 92.222.97.145
FR 37.59.40.15
GB 159.89.249.249
IN 139.59.18.213
IT 193.183.98.66
JP 108.61.201.119
LT 212.24.98.54
MD 178.17.170.179
NL 185.208.208.141
NL 82.196.9.45
NL 146.185.176.36
NL 163.172.215.64
RO 188.213.49.35
RO 89.35.39.64
RO 89.18.27.167
RU 91.217.137.37
RU 185.117.154.144
RU 95.181.211.6
SE 176.126.70.119
SG 139.99.96.146
UA 217.12.210.54
UK 185.164.136.225
US 66.70.211.246
US 96.47.228.108
US 128.52.130.209
US 172.98.193.42
US 162.248.241.94
US 107.172.42.186
US 66.165.251.19
US 103.114.191.33
US 103.114.191.44
US 73.11.11.6
US 198.206.14.241
US 18.211.225.60
puntCAT ES 109.69.8.51
Quad9 Anycast yes 9.9.9.9
Anycast yes 9.9.9.10
SafeDNS Anycast 195.46.39.39
Anycast 195.46.39.40
SkyDNS RU 193.58.251.251
Sprintlink General DNS US 204.117.214.10
US 199.2.252.10
US 204.97.212.10
Verisign US 64.6.64.6
US 64.6.65.6
Verizon (Level 3) Anycast 4.2.2.1
Anycast 4.2.2.2
Anycast 4.2.2.3
Anycast 4.2.2.4
Anycast 4.2.2.5
Anycast 4.2.2.6

Unusable DNS Providers

These providers are not suitable for use with IPFire because they do not support DNSSEC.

Operator IP Addresses
Comodo Secure DNS 8.26.56.26, 8.20.247.20
DNSReactor 45.55.155.25, 104.236.210.29
FreeDNS 37.235.1.174, 37.235.1.177
GreenTeamDNS 81.218.119.1, 09.88.198.133
Nuernberg Internet Exchange (N-IX) 194.8.57.12
OpenDNS (Hosted Blacklists) 208.67.222.222, 208.67.220.220, 208.67.220.222, 208.67.222.220
Yandex.DNS 77.88.8.88, 77.88.8.2

About location and DNSSEC status

The location of the servers has been stated by using GeoIP Tool and the IPFire GeoIP server. However, it might be possible that the location is wrong (or has been changed meanwhile).

The servers that are marked with "Anycast" are using anycasts so that traffic will be routed to the nearest of the many instances that are there on the network. Thereof the exact location of the server(s) cannot be determined. Worse, different configurations of Anycast instances cannot be determined reliable.

Security Considerations

A DNS server has a very powerful function in network topology. Please keep in mind that it might log your queries (which is a huge information leak).

Further, not all of the DNS servers below return correct answers in any case. Some of them return failures for harmful or malicious sites. Check the operators website for more information on this topic.

For security reasons, it is required to use DNS servers which support DNSSEC. For privacy and availability reasons, avoid using just one providers' DNS servers.

Edit Page ‐ Yes, you can edit!

Older Revisions • February 7 at 2:52 pm • Michael Tremer