yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] zecabra:
Hello

instead of the Dns app, can I add this lines to build.prop in my android, it will work?

example, ignore the google dns:

net.ppp0.dns1=8.8.8.8 net.ppp0.dns2=8.8.4.4

net.dns1=8.8.8.8

net.dns2=8.8.4.4
[Android Software/Hacking General [Developers Only]] MrT69:
Sorry, I guess this is a bad news for you.

I have had installed it and right after activation the security for the server it's not longer working.

The current provider and the current technical limitations and restrictions will cause that I can't install it. A lot of attacks running against my server and because of the fact that there is no real protection from the provider I can't open them.

I remember the fist public installation in 2014. It has taken less than one hour and 3 servers was under fire. This is currently to much risk.

I guess within the next 4 to 6 weeks this problem is hopefully solved.
[Android Software/Hacking General [Developers Only]] MrT69:
Since Android 5 Google has removed this. Give it a try and test it.

That's the reason for all DNS Changer Apps.
[Android Software/Hacking General [Developers Only]] MrT69:
TEST IF KEWEON IS WORKING

I see here that a lot of people now playing around with the DNS Servers. Thanks a lot and whenever you need help I can give support.

For all this guys I have implement a "Test URL". If you are successfully connect to the keweonDNS Server than you can either PING or do an NSLOOKUP to this URL:

i.hate.ads

and get a response from the IP Address 5.189.169.177. If this will not working you are not connected to the keweonDNS Server.

In addition there is a funny response within this URL.

This is my "thank you very much to the entire XDA Forum and Team".

And this will stay forever on my servers!

Thank you again. Without XDA the project would not have been possible!!
[Android Software/Hacking General [Developers Only]] problemathic:
im from philippines also. tested and eorking. use DNS changer. all other dns changer is not working. an advice from a fellow filipino.
[Android Software/Hacking General [Developers Only]] MrT69:
London Scheduled Maintenance

2018-02-08​

Event Type: Network Upgrade

Start Time: 2018-02-08 05:00:00 UTC

End Time: 2018-02-08 08:00:00 UTC

Click here

https://www.vultr.com/status/#dfw

check London.

I'm so sorry for this.
[Android Software/Hacking General [Developers Only]] MrT69:
Dear keweon users!

Based on the traffic and by calculating the average traffic for home users the KeweonDNS system is global used by more than:

5 Million Users worldwide

I was calculating this 5 times and it is 5.21 Million active users.

I want so say thanks a lot for all your trust into me and keweon. And again and again - also a huge big thanks to XDA and the Team. Without them all this would not be possible.

Seriously, this makes me speechless!!!! I still can't believe this.

This night will run a tiny update which will remove a lot of false positive blocked sites. Thanks also to all the supporter who tell me this informations.
[Android Software/Hacking General [Developers Only]] L3R0N:
I've been a long time user of Adaway but it requires root. I've just bought a new phone and didn't want to mess with warranty by rooting but still wanted 0 ads. Thanks to your solution, I've been able to do this. I live on the island of Dominica btw (yeah I know you've prob never heard of it ). I'm quite happy using keweon.
[Android Software/Hacking General [Developers Only]] MrT69:
I need your support and help!

If you know any website for testing adblocker Software please let me know this.

Copy the URL into a TXT File or export your browser favorits and send me all your test sites where you test if Adblockers are working to this address:

adblocktest@keweon.center

Please only send attachments. Your emails will be dropped immediately and only the attachments will be stored:

- ZIP files

- HTML files

- TXT files

Million thanks in advance!
[Android Software/Hacking General [Developers Only]] totalcmdext:
Please could you provide the IP address of servers based on the

https://www.vultr.com/status/#dfw

In iOS DNS override app it is need ipv4 address and for most of USA servers aren't available
[Android Software/Hacking General [Developers Only]] MrT69:
Take this. You need to find the best server by try & error.

https://xdaforums.com/showpost.php?p=73985083&postcount=6
[Android Software/Hacking General [Developers Only]] totalcmdext:
In the list doesn't have the following servers

1. Atlanta

2. Chicago

3. Dallas

4. Los Angeles

5.Miami

6. Seattle
[Android Software/Hacking General [Developers Only]] MrT69:
I hate the telegram App more and more because the hate speech from some people against keweon is indeed incredible. I'm sooooo pi**ed about a few users.

I guess the ads are gone from wallery. Can you confirm this?
[Android Software/Hacking General [Developers Only]] n0j0e:
Hey [MENTION=304818]MrT69[/MENTION]

Can you take a look to the Android-Hilfe keweon thread and answer some questions from me please. [emoji6]

Sent with much love & Android. OnePlus 5T OB33
[Android Software/Hacking General [Developers Only]] ticktock666:
Just tested it, still not working.

Thumbnails don't load anymore either, also all the regular boards don't open, just the nsfw ones work.

Maybe I need to wait for the changes to take effect, I'll try again tomorrow and report back.
[Android Software/Hacking General [Developers Only]] sonar77:
Stubby opportunistic mode

Hi.

In strict mode I get:

"Could not schedule query: None of the configured upstreams could be used to send queries on the specified transports"

Is it necessary to set opportunistic mode in stubby config file?

Thanks in advance
[Android Software/Hacking General [Developers Only]] smokeyrider:
No I was using strict mode. I think that those servers are not working any more. I'm not using keweon with stubby at the moment. You will have to find the ip address of the new keweon servers they are listed a few posts back. Check https://reinstall.keweon.center
[Android Software/Hacking General [Developers Only]] rmn.br:
Hello,

if I have set DNS dot.asecdns.com, I'm protected agains " Botnets, Cryptoware, Fake Software, Malware, Miningware, Online Worms, Phishing, Ransomware, Remote Keyloggers, Rogue Security Software, Spyware, Trojans and Virus,"

or it is necessarily installed certificat?

Thanks for keweonDNS.
[Android Software/Hacking General [Developers Only]] totalcmdext:
It is seems that there are problems with iOS 13 Beta versions. The DoH Switcher isn’t possible to activate and with DNS Override and profile installed the DNSleaktest doesn’t return proper german server but google
[Android Software/Hacking General [Developers Only]] dareino:
Strange..I dual boot with Win10 and Linux Mint. Things are working in Win10 including dns leak and pinging i.hate.ads. When I boot into my regular desktop,LM,things arent working?

Running latest dd-wrt on a Netgear r7800 router, also following your dd-wrt advice.

Below screenshot is from LM:

why does my isp show at the bottom? Also im using these ip address: 107.191.55.215 ,213.239.207.143 , 45.77.62.37 on both router and network adapter;

rebooted router desktop a few times,same result. Works in Win10 fine?

also I use a cron job to pull down a host file from stevenblack website ,http://sbc.io/hosts/hosts, which I can reach on either desktop but the router wont connect to it any longer.:

I have since unchecked DNSSEC in router but still cant d/l file

Aug 8 15:32:00 darcoSM daemon.info dnsmasq[13831]: using nameserver 45.77.62.37#53

Aug 8 15:32:00 darcoSM daemon.info dnsmasq[13831]: using nameserver 107.191.55.215#53

Aug 8 15:32:00 darcoSM daemon.info dnsmasq[13831]: using nameserver 213.239.207.143#53

Aug 8 15:32:00 darcoSM daemon.info dnsmasq[13831]: read /etc/hosts - 8 addresses

Aug 8 15:32:00 darcoSM daemon.info dnsmasq[13831]: read /tmp/dlhosts - 0 addresses

~

Aug 8 07:35:27 darcoSM daemon.info dnsmasq[5055]: 123 192.168.1.1/48532 validation sbc.io is BOGUS

Aug 8 07:35:27 darcoSM daemon.info dnsmasq[5055]: 123 192.168.1.1/48532 reply sbc.io is 176.9.107.237

Aug 8 07:35:27 darcoSM daemon.warn dnsmasq[5055]: Insecure DS reply received, do upstream DNS servers support DNSSEC?

Aug 8 07:35:27 darcoSM daemon.info dnsmasq[5055]: * 192.168.1.1/48532 reply io is BOGUS DS

Aug 8 07:35:27 darcoSM daemon.info dnsmasq[5055]: 124 192.168.1.1/48532 validation sbc.io is BOGUS

Aug 8 07:35:27 darcoSM daemon.info dnsmasq[5055]: 124 192.168.1.1/48532 reply sbc.io is NODATA-IPv6

Aug 8 07:35:27 darcoSM daemon.info dnsmasq[5055]: 125 192.168.1.1/48532 query[A] sbc.io from 192.168.1.1

Aug 8 07:35:27 darcoSM daemon.info dnsmasq[5055]: 125 192.168.1.1/48532 forwarded sbc.io to 45.77.62.37

Aug 8 07:35:27 darcoSM daemon.info dnsmasq[5055]: 126 192.168.1.1/48532 query[AAAA] sbc.io from

[IMG="dns"]https://i.imgur.com/9Os8UEo.png?1[/IMG]

d
[Android Software/Hacking General [Developers Only]] MrT69:
This certificate is only for clean up and speed up your Internet. It will prevent HTTPS errors within browser and because of this it will also speed up your websites.

It is from the technical point of view not required to use it.

A few sites e.g. bild.de are only working with the certificate because they are using https error detection. Also the same problem with some Adblock blocker.
[Android Software/Hacking General [Developers Only]] MrT69:
In the meantime it's fixed ;) somone posted me the URL.
[Android Software/Hacking General [Developers Only]] MrT69:
I was testing this App on iOS 13 and it was not working after the first installation.

https://apps.apple.com/de/app/morhill-doh-switcher/id1451319401

1. Install it

2. Run it

3. Error message happens

4. Reboot device

5. Run it

6. Have fun
[Android Software/Hacking General [Developers Only]] MrT69:
It's quite easy to read by a simple Javascript which DNS Server you are using. If the server would be "normal" visible then they would be easy to detect as adblocker.

I asume that everybody knows what DNS Server he is using within the system and because of this the Servers are hidden for this kind of detection.

I hope this explains this confusing dnsleak results.
[Android Software/Hacking General [Developers Only]] dareino:
no it doesnt...what about ping i.hate.ads? Works in windows, not in linux...why does window NOT show a leak but Linux does?

d
[Android Software/Hacking General [Developers Only]] knojap:
Hello,

keweon Servers doesn't work.

If I'm using the keweon server i have no internet?

213.239.207.143

107.191.55.215

Is there a problem?

2nd.

What about a new keweon Magisk module?

Thanks
[Android Software/Hacking General [Developers Only]] rmn.br:
Thanks for the answer. Since yesterday I started have problems with XDA Labs and Reddit applications, they throwing errors No internet connection.

edit: I'm using DNS: dot.asecdns.com (with installed certificate)
[Android Software/Hacking General [Developers Only]] jyoti.id:
Same with while using dnspipe app
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
Why s this s privacy error...suddenly websites don't open getting this error and websites which open images don't load.any fix...

Google Play Store not.opening...youtube not opening...guys any fix..using DNS server from here

https://reinstall.keweon.center/
[Android Software/Hacking General [Developers Only]] MrT69:
2 Root Servers are broken and I'm restoring them. Everything should be back within the next 30 minutes.
[Android Software/Hacking General [Developers Only]] MrT69:
2 Root Servers was broken and I initiated the restore. They are already online and now the Database restore is running. Everything should be fine within the next 20 to 30 Minutes.

Sorry for this!
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
Hello can't access this app bro..shows no internet connection..

https://play.google.com/store/apps/details?id=com.activision.callofduty.companion
[Android Software/Hacking General [Developers Only]] ticktock666:
[MENTION=304818]MrT69[/MENTION]

I guess it was bad luck I tried the servers last night during the downtime.

I used the magisk module "dns switch" to set my dns to the certificate servers, installed the certificate, and rebooted.

Now when I visit dnsleaktest, it shows 108 servers, mostly cloudflare and google, and at the bottom I get the keweon servers.

Here are some screenshots for extra details
[Android Software/Hacking General [Developers Only]] MrT69:
I know this. I don't know any other big public server which I can use for this.

But none of this servers belongs to me. Even the one at the bottom ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Check it again. ?
[Android Software/Hacking General [Developers Only]] NightFox029:
Will all those servers know the source IP of the dns request?
[Android Software/Hacking General [Developers Only]] MrT69:
No!!!!! This would make no sense at all.

Dns works within the way that only the first DNS Server knows your request.

If my server don't know the answer then my server asks the next server, my root server. If they don't know the answer then the ask the root servers. They hand over the answer to my root server, they forward the server to my DNS and only my DNS Server send the answer to you.

This answer ping pong game is known as "Round Robin process".
[Android Software/Hacking General [Developers Only]] hafiz.hasan:
Works now.thanks...
[Android Software/Hacking General [Developers Only]] totalcmdext:
Morhill DoH Switcher is working with iOS13 beta release with the new Keweon Address.

The only problem is that in dnsleaktest doesn’t return any Hetzner server. No ads are blocking.
[Android Software/Hacking General [Developers Only]] MrT69:
Root Servers are broken!

I've been sitting on it since last night. At least I know what is broken, but I don't know why.

As soon as my database is loading the interface (virtual or real - it doesn't matters) goes down. After 2 seconds its up again. Once again 2 seconds later it's down again. It's a funny off/on bouncing.

The DNS server doesn't get a connection to the database. At the moment I can't even tell you when everything will work again, because at the moment I'm tired, I'm sad and I haven't seen anything like that.

Of cause, here at home it's working, on a physical machine also but I'm out of money. It will not working on this crap VPS Server. I even have tried a installation from scratch, no luck until now.

Sorry... I really don't now what's going wrong.

But hey, the frontend server will now work damn stable and really fast. What a incredible f**k!!!
[Android Software/Hacking General [Developers Only]] pxrave:
this explains why the new servers aren't working good :/

dont get stressed relax. you do this for free in your freetime. if you need any support just give a call.
[Android Software/Hacking General [Developers Only]] Hoerli:
GRC's DNS Benchmark - keweon-List

I have created a list with the keweon DNS servers for GRC's DNS Benchmark Tool.

This makes it very easy to find the best server :)

Download of the Benchmark-Tool: https://www.grc.com/dns/benchmark.htm
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Update

I have had a lot of fun during the update and here a little overview.

The BIOS/Firmware update was running and the Server come back with various problems. It was anyway a need to reinstall them and every Server has taken round about 8 to 10 hours.

On Friday evening I noticed a NIC bouncing on my 3 root servers and I assumed it was a technical problem. It's a stupid thing when you invent some awesome feature and you don't remember to this.

I have had build in several fuse to protect the servers. When there is too much traffic then the interface should shut down and come back. I assumed it was a Server issue and because of personal panic I have had forgotten this feature.

It happens because some guys have had fun to attack the server with senseless traffic. Damn funny. On my Telegram Channel I have heard from a "Security Specialist" that some guy downloaded the Certificate 4 Million times (!) because they want to "mess up my download statistic" because of punish me. I guess it was the same guy and I really don't want to know more about this.

In the meantime I have restricted down the DNS Server usage because it was not possible to drop away this kind of traffic. Since 6 yrs this server is running without and now it was a need to do it but it's OK.

The servers are back again and the traffic has normalized. I hope I'm hard enough punished for whatever but if they go ahead with various attacks I need to tune the security again. Unfortunately I have not a real firewall for drop this packages but LINUX is nothing different then Windows. I can always both persuit to do there Job ;)

Today I have fixed a few things on them and now everything is working as expected.

The Servers are working and the "new" DoH/DoT instance is online.

Hope you enjoy this!
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks for this!!!!!
[Android Software/Hacking General [Developers Only]] ticktock666:
Just to share some info, might be useful to others, and might be completely obvious stuff, but still:

- the dot servers can be used directly in Android pie private dns option you can find under WiFi settings, you'll need to enter the server address, not the ip.

- if you're using a firewall app, and want to use the private dns option, you'll need to allow 2 things (I use afwall+ your milage may vary if you use something else): you need to allow apps running as root, and the uid 1000, usually it's a system related app that contains Android system among other things in afwall list.

- if you want to switch the dns servers manually, you can use the magisk module dns_switch and enter the values manually, this works with the regular servers and doh ones, I personally used it with servers and the certificate, though it seems the option to reset dns settings through the module is broken atm.

I hope this helps someone, I'm not very technical so it took me some trial and error to find these things, feel free to correct me on any mistake or to point better methods and alternatives.
[Android Software/Hacking General [Developers Only]] n0j0e:
The Magisk dns_switch module from JohnFawkes can't use DoT server! It's Magisk framework limited. Only DoH server! [emoji6]

Sent with much love & Android. OnePlus 5T OB33
[Android Software/Hacking General [Developers Only]] ticktock666:
I never tried that actually, I'll probably make it clear in my post that I used it with the regular servers and the ones used with the certificate for adblocking
[Android Software/Hacking General [Developers Only]] knojap:
Most of the servers are down???
[Android Software/Hacking General [Developers Only]] aminmigo88:
i cannot find the module on magisk as few months later , where can i found the module please.
[Android Software/Hacking General [Developers Only]] MrT69:
Have had an attack again with senseless traffic. Fail2ban was required and now it's stable.
[Android Software/Hacking General [Developers Only]] knojap:
Doesn't look so?
[Android Software/Hacking General [Developers Only]] knojap:
here

here
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks... haven't had take a look at the tiny servers.

Incredible thing.
[Android Software/Hacking General [Developers Only]] MrT69:
Everything is back and running now.

Faster - and stable!

I'm so sorry that this has taken so much time.

Have fun!!
[Android Software/Hacking General [Developers Only]] knojap:
Really for sure? :)
[Android Software/Hacking General [Developers Only]] micgeb:
What is the new private dns server for Android PIE?

I used dot.asecdns.com but I see ads.
[Android Software/Hacking General [Developers Only]] Timmmmaaahh!:
Looks fine here ?

MOD EDIT TO ATTACHMENTS
[Android Software/Hacking General [Developers Only]] ticktock666:
I better double check that, for science reasons, to make sure it's working.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Dns.keweon.center is the latest dot setting for keweon on android 9
[Android Software/Hacking General [Developers Only]] micgeb:
This Site https://tatsumaki.xyz/ don't work.

And in this game don't work too.

https://play.google.com/store/apps/details?id=com.cardgame.solitaire.full

With adaway I have no issues.
[Android Software/Hacking General [Developers Only]] micgeb:
Here are the screenshots
[Android Software/Hacking General [Developers Only]] cahdawe:
Why there are cloudflare and google server?
[Android Software/Hacking General [Developers Only]] MrT69:
Sorry for the delay... ;)

The next time when you see such an issue then send this to my whitemail address. Copy it into a TXT File and only send the attachment.

Btw, ANY (!) XYZ, TOP and WIN Domain is blocked by default for security reasons. In 2017 malwarebytes released a report that 96% of all this 3 TLD's are used for Malware, Spyware, Ransomware and all this crap. That's the reason.

If you have any additional domain of one of this 3 TLD's just send this to me by mail. This attachment will be dropped direct to my server. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Because my servers are hidden for security reasons and to protect users. If you browse to a website it's quite easy to identify which DNS Server you are currently using. If I hide them they can't see them and any kind of "Adblock detection is not longer possible".

I can add there server but I guess form my point of view it makes no sense to block any Google or Cloudflare server.
[Android Software/Hacking General [Developers Only]] MrT69:
Yep. This are physical instances.
[Android Software/Hacking General [Developers Only]] MrT69:
And your Game is also now free of ads ;)

Upload is in progress...
[Android Software/Hacking General [Developers Only]] MrT69:
INFO:

The appspot.com domain will be blocked within the future. Actually I don't know which impact this might cause and therefore I would need user feedback. Apple devices are safe because they using the keweon Cert even within the Apps. Google has removed this option and this might cause troubles.

Here is the reason why. I have seen this late but actually I'm working on an update.

CLICK HERE FOR DETAILS
[Android Software/Hacking General [Developers Only]] MrT69:
Sorry, something went wrong and the Server wasn't anylonger working.

Actually doing a reboot and everything come back.

...:eek:

EDIT:

Fixed.
[Android Software/Hacking General [Developers Only]] MrT69:
Update and Info

To prevent App breaking I have moved the Appspot Domain to the gray list database.

This means the domain is blocked but if there are important subdomains or addresses it's possible to open them.

I haven't seen any important things but it might be that you will see something.

MacOS/iOS - Certificate Info

The certificate just terminates HTTPS and there is no real traffic then a stupid HTTP/200. Whenever someone would break this certificate then he would see nothing but a blank 200.

Apple has restricted the devices only to accept Certificates with a key length of 2048 Bits. Because of performance I was using certificates with a key length of 1024 bits.

This will change today or tomorrow to better support Apple. It's already running on my test server but I still need to do some tests. You will see no difference but Apple devices will better work with the certificate after this.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Is keweon not working?
[Android Software/Hacking General [Developers Only]] MrT69:
It is working. Yesterday night there was a trouble with all 3 root servers. They went down for 20 minutes. I was not able to fix it.

I already prepared the restore but after a reboot everything was working.

Strange thing...
[Android Software/Hacking General [Developers Only]] Codebucket:
I rather recommend to trust your own instance, there are plenty of guides with Pi-hole or AdGuard Home, both offer much more security, including DNSSEC.

https://github.com/rajannpatel/Pi-H...-Full-Tunnel-and-Split-Tunnel-OpenVPN-Configs

https://github.com/AdguardTeam/AdGuardHome/wiki/Getting-Started