Welcome to the IPFire Wiki

This wiki is a community-maintained resource about everything there is to know about IPFire. Join us and help us improving it!

Looking for something?

Use the search and find answers to everything about IPFire. If you cannot find what you are looking for, join our community and talk to fellow IPFire users, developers and everybody else involved in the project.

IPFire Community

List of Public DNS Servers

This is a list of publicly available DNS servers suitable for use with IPFire. They are operated by many different organisations in many different countries. Please consider carefully which ones you would like to use.

Operator Location Address(es) DNS over TLS Hostname
Alternate DNS US 198.101.242.72
US 23.253.163.53
censurfridns.dk DK 2001:67c:28a4:: / 89.233.43.71 unicast.uncensoreddns.org
Anycast 2002:d596:2a92:1:71:53:: / 91.239.100.100
Cloudflare Anycast 2606:4700:4700::1111 / 1.1.1.1 cloudflare-dns.com
Anycast 2606:4700:4700::1001 / 1.0.0.1 cloudflare-dns.com
CyberGhost US 38.132.106.139
UK 194.187.251.67
Digitalcourage DE 46.182.19.48 dns2.digitalcourage.de
Digitale Gesellschaft Schweiz CH 2a05:fc84::42 / 185.95.218.42 dns.digitale-gesellschaft.ch
CH 2a05:fc84::43 / 185.95.218.43 dns.digitale-gesellschaft.ch
DNSlytics #1 US 216.146.35.35
DNSlytics #2 US 216.146.36.36
dns.sb Anycast 2a09:: / 185.222.222.222 dns.sb
Anycast 2a09::1 / 185.184.222.222 dns.sb
French Data Network (FDN) FR 2001:910:800::12 / 80.67.169.12
FR 2001:910:800::40 / 80.67.169.40
Freenom World NL 80.80.80.80
NL 80.80.81.81
Google Public Free DNS Anycast 8.8.8.8 dns.google
Anycast 8.8.4.4 dns.google
Hurricane Electric Anycast 2001:470:20::2 / 74.82.42.42
Lightning Wire Labs DE 2001:678:b28::54 / 81.3.27.54 recursor01.dns.lightningwirelabs.com or recursor01.dns.ipfire.org
Neustar DNS Advantage US 156.154.70.1
US 156.154.71.1
New Nations DE 5.45.96.220
DE 185.82.22.133
puntCAT ES 109.69.8.51
Quad9 Anycast 9.9.9.9 dns.quad9.net
Anycast 9.9.9.10
SafeDNS Anycast 195.46.39.39
Anycast 195.46.39.40
SkyDNS RU 193.58.251.251
Sprintlink General DNS US 204.117.214.10
US 199.2.252.10
US 204.97.212.10
Surfnet NL 2001:610:1:40ba:145:100:185:15 / 145.100.185.15 dnsovertls.sinodun.com
NL 2001:610:1:40ba:145:100:185:16 / 145.100.185.16 dnsovertls1.sinodun.com
NL 2001:610:1:40ba:145:100:185:17 / 145.100.185.17 dnsovertls2.sinodun.com
NL 2001:610:1:40ba:145:100:185:18 / 145.100.185.18 dnsovertls3.sinodun.com
Verisign US 64.6.64.6
US 64.6.65.6
Verizon (Level 3) Anycast 4.2.2.1
Anycast 4.2.2.2
Anycast 4.2.2.3
Anycast 4.2.2.4
Anycast 4.2.2.5
Anycast 4.2.2.6

Unusable DNS Providers

These providers are not suitable for use with IPFire because they do not support DNSSEC.

Operator IP Addresses
Cleanbrowsing 2a0d:2a00:1::2 / 185.228.168.9, 2a0d:2a00:2::2/ 185.228.169.9
Comodo Secure DNS 8.26.56.26, 8.20.247.20
DNSReactor 45.55.155.25, 104.236.210.29
FreeDNS 37.235.1.174, 37.235.1.177
GreenTeamDNS 81.218.119.1, 09.88.198.133
Nuernberg Internet Exchange (N-IX) 194.8.57.12
OpenDNS (Hosted Blacklists) 208.67.222.222, 208.67.220.220, 208.67.220.222, 208.67.222.220
Yandex.DNS 77.88.8.88, 77.88.8.2

About location and DNSSEC status

The location of the servers has been stated by using GeoIP Tool and the IPFire GeoIP server. However, it might be possible that the location is wrong (or has been changed meanwhile).

The servers that are marked with "Anycast" are using anycasts so that traffic will be routed to the nearest of the many instances that are there on the network. Thereof the exact location of the server(s) cannot be determined. Worse, different configurations of Anycast instances cannot be determined reliable.

Security Considerations

A DNS server has a very powerful function in network topology. Please keep in mind that it might log your queries (which is a huge information leak).

Further, not all of the DNS servers below return correct answers in any case. Some of them return failures for harmful or malicious sites. Check the operators website for more information on this topic.

For security reasons, it is required to use DNS servers which support DNSSEC. For privacy and availability reasons, avoid using just one providers' DNS servers.

Edit Page ‐ Yes, you can edit!

Older Revisions • February 7 at 10:49 pm • Michael Tremer