yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] Twotems:
Thanks so much for this DNS. I stumbled on this when I downloaded Blokada and now have it set up as the dns for my home router and phones. Works perfectly. :good:
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update - Samsung S8/S8 Plus devices

Samsung S8/S8+ devices has a problem on Android 9 and connecting to DoT (Privacy DNS) via Android OS. Samsung knows about the problem (or bug) since a few months and until today there is no patch in process.

If they won't do somethings then I do it from the other side ;)

I have adjusted the DNS Servers to work with Samsung S8/S8+ devices to support natively "DNS over TLS" via AndroidOS.

The Server is actually within hidden and restricted Beta Test but I guess tomorrow I will move this to the Online Servers.

If you have a S8/S8+ with Android 9 installed and you are already using the "Privacy DNS" feature then let me know please what kind of Firmware and which Server you are using. Thanks a lot in advance.

Hope you enjoy this!
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update

The keweonDNS Server supports now DNSSEC for more security. At the moment not all servers are working with DNSSEC but most of them and the rest will be done during the next days.
[Android Software/Hacking General [Developers Only]] MrT69:
At this point let me say thanks to you

Yesterday it was the first day for the "Micro AI" solution which is databased managed.

Thanks a lot to all of you for the great support by sending all the false positiv things. In summary I was able to filter out round about 1.8 Million false/positive.

A few minutes ago I still see some false blocked site but I guess it's now better then bevore.

Keep an eye on your sites and let me know when you see some ads or non working sites.

Facts since Januar 2019:

Reported f/p:

623.817 entries

Reported broken Sites:

15.053 entries

Reported Block Requests:

86.224 entries

Removed entries because of user Reporting:

1.729.412 entries

Removed entries by AI solution:

2.416.873 entries

Blacklist Database export to HOSTS file:

5.4 GB

Whitelist Database export to HOSTS file:

970 MB

Thanks again to all of you.
[Android Software/Hacking General [Developers Only]] methuselah:
Can you please give the import file for https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen so that it's easy to add with one clock in the app to import the right settings for your dns!
[Android Software/Hacking General [Developers Only]] MrT69:
Open this address http://smokescreen.app/keweon and import the settings.

Thanks a lot!!
[Android Software/Hacking General [Developers Only]] Q-werty-Q:
Hey I finally managed enable keweon DNS using stubby on my win 10 system,just curious does it block windows 10 tracking and telementary?
[Android Software/Hacking General [Developers Only]] MrT69:
First at all, can you send me the Strings you have worked out? I want provide them for DNSCloak for iOS.

And Windows 10 is just minimal blocked. I would need for this a Company to sort this out. As I have had it done for me at home Windows 10 was working but a lot of Enterprise Features was not longer working.

I would need Active Directory, Wsus, SCCM and Office365 installatuon for a long term logging and then it is possible to block the entire Microsoft crap.

The next Problem with Microsoft is the "internal Windows DNS Server".

If you block something then Windows notice this and then it bypass the DNS Server. You can see this very easy when you install Microsoft HyperV, install a Windows 10, log with DNS Tools from NirSoft and wait 2 or 3 days. Interesting results.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon on iOS

At the moment I know 2 Apps for iOS devices. The first thing is DNSCloak and in addition there is this App:

Morhill DoH Switcher von MonkeyBroker, LLC

https://itunes.apple.com/de/app/morhill-doh-switcher/id1451319401?mt=8

My son is using this and this App is doing it's Job. At the moment this App supports only DoH but if someone can contect the Dev I guess DoT support should be not a big problem.

iOS device Apps also using manually added Root Certificates. If Apple supports also with the next iOS "Privacy DNS" then I' m done with Android.

It would be great if some people can test this App (it's Freeware) and give some Feedback.
[Android Software/Hacking General [Developers Only]] wkobaint:
How to import this setting?

I always get failed notification to import setting
[Android Software/Hacking General [Developers Only]] MrT69:
Open the Site within the Browser and then double click the download for open it.

Choose "Nebulo" to open the file and then you can import the settings.
[Android Software/Hacking General [Developers Only]] wkobaint:
Alright done!

Thank you Bro!
[Android Software/Hacking General [Developers Only]] MrT69:
keweonDNS & Nebulo App

Daniel (@Ch4t4r) has implemeted a real awesome feature which is currently only supported by keweonDNS.

Correct me please if I'm wrong, Daniel.

You will see within the settings there are always the option of 2 DoT/DoH Server entires. It's high recommended that you fill out both lines with the DoT/DoH address because this increase the speed and in addition it will make sure you will see no problems when one of the Server do a reboot.

The actually settings within the config from smokescreen.app/keweon does not support this feature but it will corrected the next days.

If you want to do it manually until the fix is online please use this settings:

For keweon DoT Service:

keweon DoT

dot.asecdns.com:853
dot.asecdns.com:853

For keweon DoH Service:

keweon DoH

doh.asecdns.com/nebulo
doh.asecdns.com/nebulo

This special failover feature is invented by Daniel and it will speed up the entire DoH and DoT requests dramatically.

This feature is actually only supported by keweonDNS.
[Android Software/Hacking General [Developers Only]] smokeyrider:
Hi I'm using keweon dns servers DoT with the personal DNS filter from f-droid. Keweon dns over tls servers no longer block ads using this app. Had there nan a change recently. These are my setter settings.

136.243.69.38::853::DoT

159.69.48.240::853::DoT

[2a01:4f8:212:2325::38]::853::DoT

[2a01:4f8:1c17:6fc7::250]::853::DoT

Thanks
[Android Software/Hacking General [Developers Only]] MrT69:
Server 176.9.62.58 and 176.9.62.62 is broken

Actually I don't know where's the problem but I guess I need to reinstall the entire server.
[Android Software/Hacking General [Developers Only]] cahdawe:
My isp is using deep packet inspection. I could not stream netflix, only open their web. What can i do to resolve this especially on android?
[Android Software/Hacking General [Developers Only]] MrT69:
Everything is back now again.

At the moment there is running a huge Portscan Attack from different IP Addresses and that has garbage my logfiles. This has caused that a few servers stopped working.

Seriously, I'm just mad at Hetzner.

Provider Security looks different to me.
[Android Software/Hacking General [Developers Only]] Ch4t4r:
On Android, use an app which encrypts your dns traffic using dns-over-https or dns-over-tls. Look a few posts back for options. (I'd recommend Nebulo but I'm the developer of that, so I'm biased ;))
[Android Software/Hacking General [Developers Only]] totalcmdext:
In DNSCloak do you have any config file to check it?
[Android Software/Hacking General [Developers Only]] MrT69:
I don't have an IPhone to test of it's the right string. That's the problem.
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update

Since round about one week there is running an attack against all my servers and this have had caused a lot of troubles.

Last week on Wednesday someone started successfully a reflectuon attack via Port 80. None of my server using this Port and even Hetzner wasn't able to explain this to me but the Ticket about this is closed.

This open Port was the reason why I was moveing the Certificate. Let'sEncrypt needs to have this Port open for renew the Certificate but now it's closed.

Since yesterday 11:00 PM GMT +1 everything is running normal again.

In addition I have changed also the Let'sEncrypt Certificate and I'm now using a COMMONDO DV certificate for all DoH/DoT Servers.

At the moment it seems the DoT Servers having still smal problems but within the next hours all open issues will be solved.

All Standard DNS Servers was not affected about this problems.

The DoT Server is also working within Android Pie on Samsung S8 devices.

The DoT Server address for Android:

dot.asecdns.com

The DoT Server address for Nebulo: dot.asecdns.com:853

The DoH Server is available at:

https://doh.asecdns.com/nebulo

https://doh.asecdns.com/dns-query

https://doh.asecdns.com/keweon

Thanks a lot for being patient.
[Android Software/Hacking General [Developers Only]] cahdawe:
should we reinstall new certificate?
[Android Software/Hacking General [Developers Only]] surya790:
DNS over tls is not working most of the time...

Even mainstream sites like the verge are not loading.
[Android Software/Hacking General [Developers Only]] MrT69:
The Servers are now back again, stable, safer and faster:

Because of an aggressiv attack against the server it was a need to take them down.

During this time I have reinstalled the entire Infrastructure and because of this it was possible to add more features and make them faster, more secure and stable.

They are just only VPS Instances and if I would have them physical with my own Firewall then this would be a different Story.

DoT on Android 9 (Privacy DNS)

dot.asecdns.com

DoT @ Nebulo:

dot.asecdns.com:853

and

dot.asecdns.com:853

DoH @ Nebulo:

https://doh.asecdns.com/nebulo

and

https://doh.asecdns.com/nebulo
[Android Software/Hacking General [Developers Only]] totalcmdext:
Inoreader app stop working with doh.asecdns.com/nebulo in ios
[Android Software/Hacking General [Developers Only]] cahdawe:
What about on windows?
[Android Software/Hacking General [Developers Only]] DenyDarko:
Hey [MENTION=304818]MrT69[/MENTION],

I've noticed that by enabling DoT (Private DNS) on my android device, the following website (a kinda ****ty news greek website) is slow when loading :

https://www.newsit.gr/

Can you check?
[Android Software/Hacking General [Developers Only]] GamaShani:
Hello Sir [MENTION=304818]MrT69[/MENTION] ??,

I am unable to visit the below mentioned website..

I am using Private DNS(both .ch and .com) in my device with old certificate installed in the root directory of the system..

Can you please check it? :)

https://android-zone.ws/forum/2-android-applications/
[Android Software/Hacking General [Developers Only]] ezhilmaran:
Is this the valid certificate? Because it says it expires by 2065 and I'm unable to access banking sites because of the certificate
[Android Software/Hacking General [Developers Only]] DenyDarko:
Well this is keweondns certificate.

It appears on blocked websites.

However, it's expiry date is WAY too much and browsers don't like it at all.

Maybe [MENTION=304818]MrT69[/MENTION] can consider replacing it with a normal expiration like 10 years
[Android Software/Hacking General [Developers Only]] micgeb:
It's a warez site and this is not allowed on xda
[Android Software/Hacking General [Developers Only]] knojap:
delete
[Android Software/Hacking General [Developers Only]] ttocs99:
Can't install certificate on Android 9 I can download it but chrome force close when install from there

---------- Post added at 11:05 AM ---------- Previous post was at 11:03 AM ----------

Edit nevermind done it

---------- Post added at 11:11 AM ---------- Previous post was at 11:05 AM ----------

I'm a bit confused and help. I've installed the certificate and privacy DNS , is that all I need to use to get the full benefit of the software.
[Android Software/Hacking General [Developers Only]] MrT69:
Exactly. That's all.
[Android Software/Hacking General [Developers Only]] MrT69:
I already planed to create a better certificate but if the Browser have problems with this then this is a bad thing.

Damn...
[Android Software/Hacking General [Developers Only]] knojap:
Last Days extreme Problems.

Many Sites doesn't work. Than it works, than again not.

Whats going on? :)
[Android Software/Hacking General [Developers Only]] DenyDarko:
https://support.servertastic.com/kn...ficate-has-a-validity-period-that-is-too-long

Check this out
[Android Software/Hacking General [Developers Only]] knojap:
Yes i know the problem. But why is Facebook & Youtube sometimes working and sometimes not?
[Android Software/Hacking General [Developers Only]] ttocs99:
I've done what needs to be done but how come webpages takes an age to load.
[Android Software/Hacking General [Developers Only]] knojap:
I'm confused withe the server list. Don't know which to use:

You wrote:

DNS Server to use with keweon Adblock Root Certificate:

This Servers block in addition:

- pixel.facebook.com

- Amazon data collection and advertising

- more things which are normally not possible will coming soon step by step

Germany / Nuernberg

k1-de-143-nbg.keweon.center (Physical)

213.239.207.143

2a01:4f8:a0:8487::143

USA / Dallas - Texas

k1-ns2-us02.keweon.center (vServer)

107.191.55.215

2001:19f0:6401:175d::215

and you wrote:

If you have installed the root certificate, I recommend that you use these two servers. This servers can be used without certificate but a lot of sites will not porpper work.

Quote:

IPv4: 213.239.207.143

IPv6: 2a01:4f8:a0:8487::143

IPv4: 107.191.55.215

IPv6: 2001:19f0:6401:175d::215

These servers have special blocklist entries which blocks things such as graph.facebook.com, pixel.facebook.com, all amazon-adsystem.com domains and all the things which are normaly not possible to block without any impact to apps, websites and other things. Also, this blocks special domains for YouTube which prevents data transmission to them.

So I'm in germany. Do i have to use only one DNS Server?

Thanks
[Android Software/Hacking General [Developers Only]] happysurf:
Android 9 Private DNS feature

I want try your DNS on my Xiaomi Redmi Note 7 with the new Android 9 feature called Private DNS (DNS over TLS).

- For Google, the host to to insert is dns.google.com;

- For Adguard, the host to insert is dns.adguard.com;

- For Keweon, the host to insert is .........................???

Thanks.
[Android Software/Hacking General [Developers Only]] yr0n:
dot.asecdns.com
[Android Software/Hacking General [Developers Only]] MoHuToP:
Hello there. It's there any problems today? Lots of request getting errors today.
[Android Software/Hacking General [Developers Only]] daleski75:
Seems much faster now used to take ages to resolve web pages before loading
[Android Software/Hacking General [Developers Only]] daleski75:
Spoke too soon taking an eternity to resolve web pages again on my OnePlus 7 Pro.

Are there any alternative private dns servers which can be used apart from dot.asecdns.com ?
[Android Software/Hacking General [Developers Only]] Shadow337:
Hello there,

Admin can you ublock site "cda.pl" ?

Because it always show that connection is refused

Thank You
[Android Software/Hacking General [Developers Only]] charutl:
Magisk module for kweon dns manager

I want to flash kweon DNS manager for magisk manager 19.2 . i lost that file last week but nowadays i cant able to see that file from magisk download section.. if anyone had download link pls let me know.
[Android Software/Hacking General [Developers Only]] ticktock666:
That module was not updated to support magisk 19, since this version of magisk changes a lot of things including where magisk file are stored, the older version of the module won't work.

This is actually the reason I'm still running magisk 18, because only a handle of modules have been updated to support the latest version.
[Android Software/Hacking General [Developers Only]] jaggillararla:
Why don't u have DNS with TLS for the adblock certificate? I only see 2 servers from USA and Germany
[Android Software/Hacking General [Developers Only]] 5amar31:
Did something change recently? YouTube history isn't tracking properly for me.
[Android Software/Hacking General [Developers Only]] Tilman:
I installed the certificate, the dns through the app using VPN, but I still have ads everywhere - Play Store, Facebook, Messenger.
[Android Software/Hacking General [Developers Only]] ticktock666:
The primary and secondary dns servers seem to be down for me, can't access anything with them.

I'm currently using the Germany and Netherlands servers, setting them up through the keweon magisk module.
[Android Software/Hacking General [Developers Only]] vtec303:
same here, Netherlands and UK not working, I will change to some others and check, cheers

Edit: working fine now.
[Android Software/Hacking General [Developers Only]] GamaShani:
I am using Keweon(dot.asecdns.com) through Android 9 Private DNS feature with the certificate installed in the root directory of the system..

Whenever I am doing the DNS leak test it shows the following results..

Earlier it showed up the correct servers of some Hetzener ..

Can somebody please help me out.. ???
[Android Software/Hacking General [Developers Only]] knojap:
Same Problem here!!!
[Android Software/Hacking General [Developers Only]] MrT69:
NOTE - and please share this to your friends

https://reinstall.keweon.center

A few more information's will come end of this week.
[Android Software/Hacking General [Developers Only]] realista87:
i really appreciate the effort of the main developer, also with the telegram support about some problems we can encounter.

For example tonight i had a problem, i discovered that a new xiaomi cam ( aqara g2) had troubles with keweon dns, i simply could not connect from my smartphone whilst on 4g, but connected on the same wifi network all worked. So i contacted the deloper on telegram showing my problem, he took the apk app ( mi home) and fixed the problem.... i'm sure some domain used by xiaomi with its CHINA servers, were blocked so the cam could not sent out the image through the web ( but on same wifi yes) ...... at the end he solved my problem very promtly and i can say he is one of the best developer i ever chatted with ....

have a nice day
[Android Software/Hacking General [Developers Only]] Blackeyedangel:
Hey man, thank you for all the awesome work, and for ALLLLLL the effort, time and money you are spending on this dream which we can all enjoy from!
[Android Software/Hacking General [Developers Only]] jyoti.id:
Saavn app is not working while dns is on!
[Android Software/Hacking General [Developers Only]] MrT69:
Please always send an App link because sometimes it's hard to find them on App Store. ;)

Fixed with the current update. Upload is in progress and in 30 minutes online.
[Android Software/Hacking General [Developers Only]] jyoti.id:
I'm really sorry for not attaching the link. Will surely do next time. & Thank you for the fast update :)
[Android Software/Hacking General [Developers Only]] jyoti.id:
Can't download the certificate.
[Android Software/Hacking General [Developers Only]] ticktock666:
[MENTION=304818]MrT69[/MENTION] the dns have recently started blocking all media from 4chan.org

Started about 2 weeks ago or so, I wasn't sure it was related to keweon, but after finding some free time to test tonight I can be sure it is, as the website works fine from other devices on my network, and even works fine on my mobile if I disable keweon dns.

Just to be clear: 4chan.org loads fine, only media on the site doesn't load, usually they load from http://is2.4chan.org/[board name]
[Android Software/Hacking General [Developers Only]] jyoti.id:
Can anyone please send me the certificate file because i can't download it from the given link.
[Android Software/Hacking General [Developers Only]] Mad1446:
Hello, I'm using DoT server and this ad came up in the app. I have reported in telegram group but it seems I got banned for no reason. The app is called wallrey. Could you please check the telegram group.
[Android Software/Hacking General [Developers Only]] MrT69:
I'm so sorry dude... A lot of people told me that your posting was some kind of spam because there was just a screenshot and no further informations.

Please PM me your telegram username and I will immediatly unblock you.

Seriously. So many times sorry for this missunderstanding.
[Android Software/Hacking General [Developers Only]] MrT69:
Just visit the site and wait for 3 seconds:

https://pki.keweon.center

The download happens automatically. Just the download ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Fixed today!
[Android Software/Hacking General [Developers Only]] MrT69:
Damn!

Can you double check it if you have the same problems on a PC?

Because here in germany everything is working on Mobile and PC.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Actually right now i don't have any pc, but i can try later,,, just let me know where i can have the process to do so!

I have tried in different browser (IDM+ app browser), same thing there also.
[Android Software/Hacking General [Developers Only]] MrT69:
As long as it is working on my site it's hard to sort the problems out without to see any problems. ;)

It also can be that the servers to slow. There are so many different reasons why this could happens. I hope that this damn slow system can be replaced verry soon!

Anyway. Do a PC test and let me know the result please.
[Android Software/Hacking General [Developers Only]] pleasetouchmenot:
Thankyousomuch for the suggestion. Sad that my phone is on stock not rooted state (Samsung S7 Edge). Waiting for the Oreo update that's why. Maybe i'll think about it if i root my phone again. Coz this keweon is damn slick i want to try it via root method.

Got it. Recently i changed my DNS to Australia and Silicon Valley (used both of them) and got a full reboot. Internet speed for me is not that great (guess it's always my wifi carrier fault) or maybe i need to try all of your preferred DNS so i can test and choose what's the best DNS for my server and country so i can get a better speed. I'll get a report/feedback if i noticed something strange behavior of my phone. Thankyousomuch again, [MENTION=304818]MrT69[/MENTION], you're one of a kind sir.
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
.

Installation :

Flash using Magisk or recovery

How to use :

Open Terminal

Type : su

Type : keweon

Select your dns

reboot and done

How to check your DNS (noobs way) :

Goto https://dnsleaktest.com and click on any of the test. It will show the DNS servers you are using.

---------- Post added at 03:59 PM ---------- Previous post was at 03:46 PM ----------

I have no problem with the XDA LAB. But I don't use chrome. Err, ever thought about using firefox for better privacy??

But yeah I do have problem with AMAZON app & Showbox app. But I guess the problem is because of how these apps the designed. I think Amazon doesn't allow to run the app if it can't show advertisements constantly :rolleyes:. As for Showbox it fetches some advertisements only for the first time, so I let it load ads(by turning off keweon) then I switch to keweon again and ads are gone after that :laugh:
[Android Software/Hacking General [Developers Only]] MrT69:
FAILOUT OF KEWEON DATABASE SERVER:

Received an notice from the Provider that it was urgently required to boot the instance where my Database Servers where located.

Within 10 minutes (16:10 GMT +1) everything is back again.

DAMN.... Sometimes I hate this game :(
[Android Software/Hacking General [Developers Only]] MrT69:
What happens when the Blacklist Database failed? I didn't expect that I would ever need this Szenario but it was working as planed, developed and designed.

When the Database Server failed and nothing is working anymore than you still have connection to the Internet. You will have ads and all the crap but the Internet is working.

Sorry for this!!
[Android Software/Hacking General [Developers Only]] problemathic:
bro my 1gb data for e days (mobile internet) been consumed so fast by that telegram app. now im back again.