yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
Yesterday an update went wrong and it has broken a lot of things. At the moment the database upload is running and within the next 20 to 30 minutes everything should work again.

I'm sorry for this!!!
[Android Software/Hacking General [Developers Only]] Tiongkia:
Hi

Thanks for the hardwork. Greatly appreciated.

Is it still down? My browser seems not working if I on my dns. Once i off it, i can surf net.

Thanks again!
[Android Software/Hacking General [Developers Only]] rmn.br:
Seems to be still down or something going wrong, as soon as I switch to dot.asecdns.com, my WiFi connection stop transfering data, Im connected but no traffic.
[Android Software/Hacking General [Developers Only]] MrT69:
Good morning. All Database servers died off. I don't know why and I don't understand this because at home the test server is also not longer working.

Even a restore did not solve the problem. It seems I need to reinstall the entire backend and for the next 12 hours I can't do anything.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Bummer! Thanks for keeping us posted.
[Android Software/Hacking General [Developers Only]] rmn.br:
deleted my question about alternative to Keweon

edit: That's true, search before post! I don't know why I didn't, usually I do. ...everyday learn. thx
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Eh... Duck it?
[Android Software/Hacking General [Developers Only]] totalcmdext:
keweonDNS - now with improved Certificate (iOS, Mac &amp; Android)

In iOS 13.2 have a lot problems today.

AppStore and other basic programs isn't possible to load.....

Like Mail exchange etc
[Android Software/Hacking General [Developers Only]] MrT69:
This server are actually working for US. Please ignore the VULTR list because this shows only the actually network and server conditions.

USA / Dallas

k1ns-tx-001.keweon.center

45.76.57.41

2001:19f0:6401:9ed::41

USA / New Jersey

k1ns-ny-001.keweon.center

45.77.144.132

2001:19f0:5:2962::132

USA / Silicon Valley

k1ns-sv-001.keweon.center

45.32.140.26

2001:19f0:ac01:639::26

There are only three servers because on the one hand it's only to see if the user will accept my solution and on the other hand I have reached my financial limit.

If I can do it within the way I want to do it the entire system will cost per month round about 35.000 US$. This would mean better filtering, more servers, increase your Internet speed by 80% faster and a damn nightmare for the entire global advertising industries.

This would be the XXL PREMIUM Gold High End Ultimate Edition of keweon. ?

At the moment I'm working on a different and better solution but right now it's not possible to offer a faster and more stable version. It also does not make any sense to offer a damn cute system which is also damn cute expensiv and no one is interested to use it. It was a need to see how the users will have trust into all of this.

I'm working on it. The problem is the money, not the technical solution.

Giving up is not one of my favorite strengths. ?
[Android Software/Hacking General [Developers Only]] problemathic:
these are new servers bro?
[Android Software/Hacking General [Developers Only]] jyoti.id:
[MENTION=304818]MrT69[/MENTION] yes that download issue is happening in pc also & i tried in different devices (Android). Same for each of them.
[Android Software/Hacking General [Developers Only]] MrT69:
I really don't understand why this will happens. I will promiss to you that I don't lock any downloads. And definitely not from XDA.

Strange thing. But I will check something. I know already a view users which are using keweon and they are also from India.

I will send you an PN but please wait until the weekend.
[Android Software/Hacking General [Developers Only]] MrT69:
WOOOOWWWWWWW....

During the last 7 days I have see that the daily DNS traffic increases by 22,5% - PER DAY!

That makes me on the one hand damn proud and on the other this makes me nervous because I hope that the servers stay stable. For the next 2 to 3 Month I see no problem but that is a reason to make more preasure on the funding thing for fullfill the AWS requirements.

I hope within the next 2 to 3 weeks everything is done. AWS already rejected my 1st application and I want to prevent that this happens again.

Cross the fingers and million thanks to all of you!!!!!!
[Android Software/Hacking General [Developers Only]] Shadow337:
It should be like that? Or I done it wrongly?
[Android Software/Hacking General [Developers Only]] MrT69:
You should remove all GoogleDNS. ;) Set the same DNS at the second entry or choose a different one. Same with IPv6 which is important if you use DNS within your mobile 3/4G network.

If you want to see and test if it's working search a PING Tool at PlayStore and try to ping to:

i.hate.ads

If you get an answer you are working with keweonDNS. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Update for you

1. Blacklist cleanup

- blacklist cleanup & removed 148.873 entries

2. Blacklist grows

- extended the Blacklist database with China AdServer & Provider

- need some feedback please

3. Server usage

- it is an incredible thing how the server usage grows

- servers working with a CPU load at 3%

4. Personal comment

- this all is so f***ing cute :D

Thanks a lot to all of you!!!!
[Android Software/Hacking General [Developers Only]] MrT69:
Does anyone knows why this happens via keweonDNS?

If you have an download within any XDA thread than you can get this download via Browser without any problems.

If you take the XDA App the downloads are blocked.

Someone here around who already knows why this happens?

Is it the same case by using hosts files?

Thanks in advance.
[Android Software/Hacking General [Developers Only]] :
Yes. I have tried MoAB hosts file and couldn't download from XDA app.
[Android Software/Hacking General [Developers Only]] OldMid:
Downloads work for me, but I'm using the aforementioned magisk zip instead of a DNS switcher app, doesn't require a VPN or a constantly on app which can affect battery and performance depending on the device
[Android Software/Hacking General [Developers Only]] jyoti.id:
Wow! Strange, as [MENTION=8918441]OldMid[/MENTION] said, i tried the Magisk module & the Xda in app download works. ?

But as it was said that to check if dns is working via magisk module or not, go to dnsleaktest.com, it gave me some different result. im using Netherland server but result shows me Bhubaneswar, India. Is it supposed to be like this?
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
That's your IP. DNS has nothing to do with your IP. Click on any of the tests and then it shows the current dns server you are using. I guess you're using jio, so normally it would show JIO as your dns server, but after you use keweon it will show the respective dns server.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Oh ? noob in these dns things. Thanks.

Yeah, its showing as Belgium ? thanks again ??
[Android Software/Hacking General [Developers Only]] MrT69:
Interesting thing. I have definitely nothing blocked from the XDA forum.

Hmmmm...
[Android Software/Hacking General [Developers Only]] OldMid:
I'd suggest putting the magisk file in the op as I have been keeping up with keweon for a while but only decided to join when I saw the magisk zip, made things so much easier
[Android Software/Hacking General [Developers Only]] MrT69:
If I could I would change it direct within Android. The VPN fake thing from frostnerd works really damn good.

But I want to use it directly. I can't use Magic disc because I need to keep my device with vendor defaults for testing. Unfortunately I have only one device.
[Android Software/Hacking General [Developers Only]] OldMid:
Ah, a shame, if you need any particular testing in regards to rooted or devices with custom ROMs/kernels, Im more than willing to help:)
[Android Software/Hacking General [Developers Only]] MrT69:
For Android I'm using AndyDroid to debugging.

It's hard to debug on Android direct. From this point of view that's OK.

As I have had startet keweon 5 yrs ago I was working with decompile the Apps.

But as I have had seen that they are sometimes using some API calls from the OS and framework it was a need to find a different solution.

Best example is HTC vs. SAMSUNG. When I filter Amazon with all ads and trackers HTC App is working. My girlfriend use a Samsung. Same DNS Server and Amazon App was not longer running.

That's sometimes hard to find all issues. On the one device it's working but not on a different.

After using Andyroid a view times there was no longer a need to work with rooted devices.

Nice thing and the best tool for Android debugging.
[Android Software/Hacking General [Developers Only]] OldMid:
Awesome, as someone who's planning an working on android in the future, that's good to know, I'll keep it in mind:good:
[Android Software/Hacking General [Developers Only]] n0j0e:
keweon is under maintenance! We must wait for news from MrT69.

Sent with much love and Android.
[Android Software/Hacking General [Developers Only]] MrT69:
For Info:

keweonDNS is back again. Details follow soon.

If something is not working at the moment give this app a 3rd try.

All DNS caches are absolut empty. I have had the problem with Amazon App but this is definitely whitelisted. After the 3rd try it was opening without an error.

I'm sorry for this and million times thanks in advance for your patience.
[Android Software/Hacking General [Developers Only]] MrT69:
On Tuesday at about 20:15 my son visit me and the Apple PlayStore on his iPhone was not access able. This issn’t on the blacklist because Apple is almost complete on the whitelist. In the further process some pictures did not load on different web pages and I accepted at this point there are errors in the blacklists.

At about 21:30 the root server in Helsinki went down completely and there was no more reaction from the server.

2 days before I already opened a ticket at Hetzner. The server was moved to another host because the operating system apparently had a problem. In rescue mode the network interface reacted normally so I did a restore on sunday.

Tuesday at 22:00 Helsinki was again restored from the snapshot and server was working normal for a few minutes.

22:35 I noticed that all 3 root servers could only perform database requests for every 3rd DNS request.

22:40 Helsinki offline and database test. No response to and from the database.

22:45 All servers react to any requests with NXDOMAIN.

23:00 Switch off and on of all 3 Root and Database servers because they couldn't serve any more requests and waited 1 hour. No changes.

00:10 Nuremberg offline and Snapshot Restore.

00:35 Helsinki offline and Snapshot Restore.

01:15 DNS requests are only answered sporadically and may be there is something wrong within my infrastructure

05:00 CPU load of all servers between 300 and 400%, database queries are still answered with NXDOMAIN from all servers. No access to any Database is possible. All 3 Database Server reported broken Database.

07:10 Delete all 3 root DNS servers as well as all 3 database servers. Hetzner default Server Template installed. The network traffic to the servers was normalized 2 hours later.

16:15 One Root and DB core servers reinstalled. During the installation the server is only accessible for my private IP address at home. Tests of all servers are successfully.

16:50 Firewall for public DNS access activated. CPU usage jumped immediately within seconds to 400%. Logging for the Server activated and there were just only xxxx.s3.amazonaws.com addresses which was flooding the DNS with useless requests. All DNS requests are answered immediately with NXDOMAIN.

17:10 Take down of all servers & open a ticket

18:00 Hetzner confirmed "technical issues"

18:30 All Root Servers and DB Servers deleted again and completely manual reinstalled. Re-Design of the entire security for the servers. Good time to do it because the DB Server had been installed since 2014.

04:30 Mail confirms the removal of the technical problems during the night

05:45 Activation of the firewall with a complete new set of rules and public access enabled. All Root Servers and all DB Server are working.

08:40 Started with tests and security checks.

09:50 All servers are still working and public access is possible

Since 10:00 I'm still nervous... ;)
[Android Software/Hacking General [Developers Only]] VogonP0et:
Thank you for all your hard work [MENTION=304818]MrT69[/MENTION] , which is very much appreciated! I had forgotten how rubbish my (un-rooted) work phone is with loads of ads... :(
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Glad you got it solved, [MENTION=304818]MrT69[/MENTION]! Whoa, quite an elaborate explanation. Since you addressed security while you were at it, we'll just call this "server maintenance" [emoji39]

Wrapped with delicious Fajita [emoji896]
[Android Software/Hacking General [Developers Only]] MoHuToP:
I'm so sorry for this offtopic, but can I find somewhere future discussion of this?

Regards!
[Android Software/Hacking General [Developers Only]] woo2:
thank you very much
[Android Software/Hacking General [Developers Only]] MoHuToP:
Thank you for effort to answer my question. I really hope you didn't find my interpellation in wrong way. In terms of DNS services, keweon is really what I used for years and after working on multiple personal and few office systems, there no issues about leaked logs or something else. And again, thank you for your long answer and reasonable explanation.

Best regards!
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot for this. I don't have a real problem with this guys because they have had done within this way a real good marketing. Some users believes to them but at the early beginning in 2011 I was aware this idea will not only make friends.

Even this "don't use it because it's fraudulent" thing will cause that users take a look at it and I would never underestimate the force of the users.

When I notice that even Adgurad, Sophos, Cisco, Meraki, OpenDNS, Checkpoint or PaloAlto are not able to block what will be blocked by keweon and all this without a proxy, then it's clear that there will be trouble. But I don't care about that at all.

keweon is just an idea and a new way of possibilities.

It's my idea, the users usage and feedback and this together is a huge kick in the advertising a*s.
[Android Software/Hacking General [Developers Only]] MrT69:
UPDATE

Since I had to do all root instances anew I did it on my most current DNS technique of course. A few people have already tested it. I was able to change the VPS infrastructure now and it works a bit faster now. According to some users "the fastest DNS ever" I wouldn't go that far because it depends on how many people use it. If there are 30 users on one server then even a Mini VPS server is bored about this. I proudly presend my new DNS Accelerator (actuall within DEV RC4 Status).

DoH Server (for Intra or PDF)

doh.asecdns.com/dns-query

DoH Server (Nebulo App)

1st DNS: doh.asecdns.com/nebulo

2nd DNS: doh.asecdns.com/nebulo

DoT Server (Android & Co.)

dot.asecdns.com

DoT Server (Nebulo App)

1st DNS: dot.asecdns.com

2nd DNS: dot.asecdns.com

Hope you enjoy this.
[Android Software/Hacking General [Developers Only]] O l l i X:
If you don't trust a product, you don't use it.. If the product is a problem to someone else you don't trust, then you can bet the untrustworthy part will defend itself in any way possible.. Name calling, pulling hair, nutt-shots, public shaming and anything in between..

Even IF it's true, and Thorsten could rip us all off.. He deserves whatever he's getting out of it, just for putting up with **** like this..!

And remember, your government ripps you off every month, and that's no problem for you, I guess.. ??*♂️
[Android Software/Hacking General [Developers Only]] MoHuToP:
No offence, but keweon is not a product - its service. So your DNS is your first step into personal privacy. Anyway, everyone can test his privacy level and decide how to start another step into personal privacy. Anyway, the question was determined to OP and he was so kind to long answer my question. Thanks for this!

Best regards! :)
[Android Software/Hacking General [Developers Only]] MrT69:
Check for keweonDNS

The entire license check is not active for various reasons. If you want to check if keweon is in use then just open the URL:

https://license.keweon.de or https://license.keweon.center

If it were a business environment, there would be either DEMO or LICENSED status information. There's more to it when it's done, of course, but right now there are other things that are more important than this.

Anyway, it's good enough to check if keweon is active or not.
[Android Software/Hacking General [Developers Only]] aL_09:
Do I need to install the keweon certificate if I use DoT Server (dot.asecdns.com) ?
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
I'm using DoH without the certificate so I guess not. Give it a try. I believe it dodges AdBlock detection better with it.

Wrapped with delicious Fajita [emoji896]
[Android Software/Hacking General [Developers Only]] n0j0e:
Using DoT without cert. No problems so far.

Sent with much love and Android.
[Android Software/Hacking General [Developers Only]] MrT69:
The Cert do only 3 things.

Because of Adblock and HTTPS Websites this blocking causes errors within the Browser. With the Cert all errors are thus suppressed. Without errors the Website runs faster and it will in addition clean up your browser and website.

Various sites using already HTTPS errors for Adblock detection. If you go to a website and you block the ads which will be served via HTTPS the site notice this and adblock detection happens.

When you block Hosts by 127.0.0.1 then there will be never a response to the website. Any block on keweonDNS will always cause a valid HTTP/200 answer which will confirm to the website everything is done successfully. Without the Cert it only covers the port 80 communication. With the Cert you always get a valid HTTP/200 message and all the stupid Java Scripts assume there is no need to do any additional requests or transmissions. Additional downloads will be successfully blocked. That's the reason why everything runs faster with the Cert.

If it's working without an issue and if you are fine with the speed and you can accept all the ugly holes within the website then there is no need to use it.

In the 90s I was coding patches, cracks and keygens. All this experience of this times are the reasons why keweonDNS is working. A web page is nothing else than an executable file that is compiled at runtime. Ads are nothing else then stupid nag screens which can be killed by a simple byte switch. Sounds easy but finally it's a little bit more.

The cert is just to offer a complete package. If you are fine with the half of the package then it's OK. The important thing for me is that everything runs 100%. But it is also important that the user has the decision if he wants to or not.
[Android Software/Hacking General [Developers Only]] rmn.br:
I'm using dot.asecdns.com with certificate and I think here isn't competition for Keweon in speed (e.g. web page loading)
[Android Software/Hacking General [Developers Only]] MrT69:
This depends on the web page of cause.

Best example is https://denic.de on the Desktop. Open the debugger and check the site with and without cert. Then you see a tiny example.
[Android Software/Hacking General [Developers Only]] rmn.br:
That's true but I had to use some days a go other DNS services and I noticed far slower page loading than with Keweon.

edit: it's based on my personal user experience
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot...

But sometimes my servers are the slower ones. This is of of cause related to the infrastructure. You can't compare my micro service against Google or Cloudflare. They have a slightly higher budget then me :)
[Android Software/Hacking General [Developers Only]] totalcmdext:
Please could you update the procedure in order to have keweonDNS in Windows 10?
[Android Software/Hacking General [Developers Only]] MrT69:
As soon as I have some equipment I can update this. Haven't had forget this. ;)
[Android Software/Hacking General [Developers Only]] simbahmgn:
Is this dns working in Indonesia?

Im using Samsung Pie device, but when i check its not active...

Im using dot versions.
[Android Software/Hacking General [Developers Only]] MrT69:
Nope. Your Government blocks the communication.

You can only use this with Nebulo App or Intra by using DoH.

DoT works on Port 853 which will be filtered. With other users from Indonesia I have seen that DoH is working because it's on Port 443.

All the DNS changer Apps working as same as a VPN App but there is no encryption on it. By Nebulo App I know this 100% sure. If you even have a local VPN restriction you can use this App.
[Android Software/Hacking General [Developers Only]] MrT69:
For actual reasons I was updating the AV database with EMOTET feeds and I wasn't checking them against the whitelist. This was causing a few false postiive locks. At the moment I'm fixing this

EDIT:

Everything is fixed now!.
[Android Software/Hacking General [Developers Only]] MrT69:
Now I need your help please.

On iPhones you have the Option to use DNSCloak and I would like to ask if someone can help me creating configs for this tool.

The config generator is here but I can't verify this. Can someone help here please?

privacytools.io - DNSCloak
[Android Software/Hacking General [Developers Only]] totalcmdext:
What is the difference between DNSCloak and DoH Switcher?
[Android Software/Hacking General [Developers Only]] MrT69:
DNSCloak suports DoH, DoT and normal DNS. The DNS switcher just supports DoH.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
What's an eyephone? [emoji2957]

Wrapped with delicious Fajita [emoji896]
[Android Software/Hacking General [Developers Only]] MrT69:
iPhone explanation:

Amazing Mobile device with a non Google Spyware OS. Compared to Android 10 it's an Operating System which belongs to you and not to the cloud.

;)
[Android Software/Hacking General [Developers Only]] Shadow337:
Can You add restriction for polish banking apps like MBank or PKO-BP please?

I've installed keweonDNS on my father phone but sometimes he cant sign in mobile bank app because of dns. "Sometimes" I mean 1-2 times peer week

This adress are:

1. mbank.pl

2. ipko.pl

And apps in playstore same:

1. mbank

2. iko
[Android Software/Hacking General [Developers Only]] totalcmdext:
In the configuration file of DNSCloak put at the end the following

[static.keweonDNS-DoH-IPv4]

stamp = 'sdns://AgcAAAAAAAAADTE1OS42OS40OS4yNTAAD2RvaC5hc2VjZG5zLmNvbQovZG5zLXF1ZXJ5'

I am looking to find how to put the DoT......
[Android Software/Hacking General [Developers Only]] MrT69:
Can you do me a favor and send me the Apps or the Playstore links for the Apps?

EDIT:

Both domains are not on the blacklist. It will need some time until I know more why this apps will not open.

EDIT2:

Take a look at this. I guess this might be interesting for you ;)

https://xdaforums.com/showpost.php?p=74568401&postcount=67
[Android Software/Hacking General [Developers Only]] MrT69:
OK, lets test.

Can you please check if it's now working? If not then please let me know this.
[Android Software/Hacking General [Developers Only]] Shadow337:
Yes i can

Sorry, sadly i cant sign in into app now

Ss translated text:
[Android Software/Hacking General [Developers Only]] MrT69:
2nd try...

Give it a try again please.
[Android Software/Hacking General [Developers Only]] Shadow337:
Now its working, Thank You very much :)
[Android Software/Hacking General [Developers Only]] MrT69:
Update - EMOTET

After the extraction of the EMOTET feeds update it happens again that a few false/positive domains are on the blacklist again.

The exctraction script is modified and I have extend the whitelist check with this domains:

twitter.com

pastebin.com

github.com

I'm sorry for this. The update is on the way.