yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
I always install it at both places. But you can test it very easy.

Install it at one place and open this URL: https://i.love.keweon.

If the sites open - DNS is working.

If you receive a HTTPS error the Certificate is not working.

If you receive a white page everything is working.
[Android Software/Hacking General [Developers Only]] MrT69:
dot.asecdns.ch = 136.243.69.38
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Thxs a lot.
[Android Software/Hacking General [Developers Only]] trvr73:
[MENTION=304818]MrT69[/MENTION] I need your advice :)

Doesn't matter what I use for private DNS on OP6T with Android Pie (asecdns, cloudflare, adguard) it keeps disconnecting many times during a day

with message "Can't connect". After some time it connects again (until disconnected again). Also doesn't matter whether I'm on WiFi or 4G. It is really confusing :)

With Nebulo it works like a charm.

Thanks in advance.

T.
[Android Software/Hacking General [Developers Only]] MrT69:
Is it possible to reset or reflash your device? I don't know if you have a Stock or Mod ROM but this sounds for a device issue.

If it works with Nebulo it can't be your provider who lock the connection. The DoT Serves are working.

Thats why I assume it only can be a device problem.
[Android Software/Hacking General [Developers Only]] trvr73:
It's stock ROM. I'd like to avoid reflashing ;) but maybe it is good idea. What is strange, I'm not alone - I've found similar problem described on Adguard's forum.

Of course I can stay with Nebulo app.

T.
[Android Software/Hacking General [Developers Only]] MrT69:
I regularly reset my device and let it install from scratch latest every 2 months. But it's interesting that you have problems using DoT Server with a Stock ROM.

What kind of device you have?
[Android Software/Hacking General [Developers Only]] trvr73:
OnePlus 6T. Just found that can be a bug in latest Oxygen and it is on the list to be checked./fixed. We'll see :)

I'm hesitating whether switch to beta ROM...
[Android Software/Hacking General [Developers Only]] GamaShani:
Before this I used Keweon using the Nebulo application and I recently installed the Android Pie Rom for my device..

I have installed the certificate but do not have any idea what to do next..? :confused:

Can somebody please tell me how to set up the whole thing.. ?
[Android Software/Hacking General [Developers Only]] MrT69:
PrivacyDNS within Android is always "DNS over TLS".

Therefore you have 2 Options with keweon:

1. Use dot.asecdns.com

(this are 3 Servers but they are virtual Server)

2. Use dot.asecdns.ch

(this is just 1 Server but its a physical Machine)

When you want to use Nebulo App then you can switch between DoT (DNS over TLS) and DoH (DNS over HTTPS)

The keweon DoH Server Address is: doh.asecdns.com/nebulo

This are also 3 Servers and when you use the Nebulo App then type the address above in both address fields. If one Server is booting then you will see no outage.

The keweon Certificate is just for speed and clean up Browser. Because of the fact that Google has restricted the Certificate usage it will not work within any Apps. User certificates are excluded for use within Apps. If you have a rooted device then copy it over to the System Certificate Storage and then it should also working within Apps.

I haven't had test this until today but regarding to Google API documentation this should work.

Hope this helps.
[Android Software/Hacking General [Developers Only]] MrT69:
A colleague has a OnePlus 5 device and he is also on DoT with default stock ROM. No problems with this. I guess its something within your device which will block this. ;)

If you are able to setup your device from scratch then do a factory reset, clean the cache and let me know if this will work after all.

Million times thanks in advance!
[Android Software/Hacking General [Developers Only]] nokazzz:
More snd more powerful loading very fast doh and dot thanks
[Android Software/Hacking General [Developers Only]] smokeyrider:
Hi

I am using Keweon DoT in windows 10 with stubby. I am using this ip and url dot.asecdns.ch = 136.243.69.38. Is there an IPV6 address I can use with dot.asecdns.ch

Thanks
[Android Software/Hacking General [Developers Only]] MrT69:
Sure. Either just ping the Server or do a Nslookup with doh.asecdns.ch for getting it. I always also setup IPv6 for any DNS Server.

For this DoT Server it is: 2a01:4f8:212:2325::38

Can you do me a favor and share the stubby config? I would like to offer it for othr users.

Thanks a lot in advance.
[Android Software/Hacking General [Developers Only]] smokeyrider:
Hi

I tried the IPv6 address butit won't connect through stubby. The IPv4 connects and is quick.

To add to stubby, open (via command prompt as administrator) the stubby.yml config file with notepad or similar and add this at the end, make sure all other servers are commented out with #.

## DNS Keweon IPV4

- address_data: 136.243.69.38

tls_auth_name: "dot.asecdns.ch"

Be aware Stubby is is strict on spacing. Instructions here

https://dnsprivacy.org/wiki/display/DP/Windows+installer+for+Stubby
[Android Software/Hacking General [Developers Only]] MrT69:
Oh... I will double check it. Thanks a lot!!!!
[Android Software/Hacking General [Developers Only]] GamaShani:
Anything else I need to do Sir [MENTION=304818]MrT69[/MENTION] ? :confused:
[Android Software/Hacking General [Developers Only]] ttocs99:
Well I didn't get redirected so that means it working?
[Android Software/Hacking General [Developers Only]] MrT69:
Cool. What the hell you have done wrong??? ??

Will check it again. But a big thanks for the info.
[Android Software/Hacking General [Developers Only]] pleasetouchmenot:
I'm from Philippines and i'm new to this DNS changing method for adblocking (currently using adhell 2 as my adblocker). Sorry for this dumb question but will it work on PH server? If so, What DNS and what certificate can i use? My phone is android (Samsung S7 Edge) stock not rooted. Any help for this dumb is much appreciated :)
[Android Software/Hacking General [Developers Only]] MrT69:
Wherever you can use DNS - you can use it. I have the DNS set on my SOHO Router and my entire Network is free of ads.

Every device which is connected to the SOHO Router is also free of ads. If you have e.g. your XBOX or AppleTV or whatever connected via this router all the entire Apps are also free of Ads. That's the big advantage against every existing Adblocker.

If you have a non routed device than I recommend to use the certificate because this prevent HTTPS errors. Just open a browser on your device, go to:

pki.keweon.center

and after 3 seconds the certificate download will start. You only need to install it manually. This is a 3 click process. Type a Name (e.g. keweon) click ok, ok again and it's done. No more HTTPS errors because of adblocking.

And the Android Client from frostnerd (DNS Changer within the Playstore) is working even on a non rooted device.

If you want to see what's the different between using keweon with and without the certificate than just uninstall the certificate. Than you know why it is recommended.

If you want to know what DNS Server you should use than you should ask someone from your Country or try and do. I have no clue what I should recommend for you. Take the Server which is physically next to you and try it.

If you have additional questions than feel so free and ask. There are no dumb questions. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks. I have tested it on boston.com Domain. Either they have disabled the thing or it's disabled via keweon.

Interesting thing. Thanks a lot for this feedback!!!
[Android Software/Hacking General [Developers Only]] pleasetouchmenot:
Thankyousomuch for your intructions. I recently activated the certificate that you gave me and it installed as a user certificate. Sad that i can't find the exact DNS from my exact area/location. Is any DNS can be use? As far as it's inside the country? Also, i don't have a SOHO router, only local modem from a local carrier company on my country. So it means, that the certificate is enough? Or i need the DNS changer app also? And can i get rid of my current adblocker now, and use your certificate independently? Or with DNS changer? :)
[Android Software/Hacking General [Developers Only]] pleasetouchmenot:
Is this okay?
[Android Software/Hacking General [Developers Only]] MrT69:
You need to find by try and error the best DNS Server for yourself. Within Germany I have a damn slow connection to Singapore Server and for me this server is not useable. The guys from China told me that this Server has a damn cute speed.

Just take one Server use it and test it. If it's fast enough than keep it. The certificate does not make sense to use it without keweonDNS.

If you have set the DNS Server on your router than you don't need the app as long as you stay within your WIFI range. As long as you have connect to the DNS Server you don't need the App. If you use keweonDNS via your router and you have additional computers at home I would also recommend it to install the certificate on your computer. You will see that everything runs faster because you will have less HTTPS errors. If you don't know how to install the certificate than use either the MSI File or the registry file. Double click and the rest will be done automatically.

If you use keweon on your Router than the DNS Server will become faster because of caching technologie on your router. ;)

But you need to find the right one.
[Android Software/Hacking General [Developers Only]] MrT69:
Interesting thing. Where did you get this IP Addresses from?

Both belongs not to one of my servers.

If you want to use keweon than take one of this servers:

KLICK HERE

Take one or two of them of your choice, enable v6 within the App, also copy the v6 Servers into the fields and than you are ready to go.
[Android Software/Hacking General [Developers Only]] MrT69:
The current system is some kind of limited. The problem is not the technologie, the problem is the money for me.

As an example is YouTube. With the current version you can get rid of almost all ads. A view things are currently not possible because that would become so damn expensive.

The big different between keweon and common adblocker is the technologie. All Adblocker will download the Ads, than check it within the browser and finally they fade it out.

keweon will even clean up the traffic. If it's an advertising (virus, tracker or whatever) the traffic will be 0 (ZERO) bytes.

At the moment it is OK when you keep your current Adblocker for fine tuning. But keweon will cause the traffic is reduced. If you have a rate limit on your mobile device keweon will protect your traffic. You only get what you see.

Within a big insurance company here in Germany with 18.000 employees I was able to track the traffic different. The average trafice reduction was at 230 MB per user and day. Now you can imagine why I want to license keweon for Business ;)

As long as you need it you can keep your Adblocker. But I guess it's not required to keep it. I have get a lot of feedback when I have compared it against different AdBlocker or even CISCO MERAKI. At the moment I know nothing which you can compare with keweon. Of cause, the DNS are not so fast and sometimes it even breaks down the internet performance. This sometimes hurts.
[Android Software/Hacking General [Developers Only]] pleasetouchmenot:
Wow that's a complete explanation. Thankyousomuch [MENTION=304818]MrT69[/MENTION]. That's all i need to know on how this DNS based adblocker works. Now i recently changed my v4 and activated v6, and put the singapore DNS. As of now i don't see any major changes in terms of internet speed (my internet's still slow) but i'm one sure that i don't see any ads on any app that i've opened. That's why i chose to completely disable and remove my adblocker and use your full method. You're one of a kind sir :)

I have a last question though, can i change on your different DNS server anytime i want? And if everytime i change and choose a different DNS of yours, is a reboot necessarily for the DNS to take effect or this will work automatically without refreshing resources by restarting the phone?
[Android Software/Hacking General [Developers Only]] pleasetouchmenot:
Here's a sample screenshot. Am i doing it right? :laugh:
[Android Software/Hacking General [Developers Only]] pleasetouchmenot:
*removed* sorry for spamming. Got a really bad wifi connection this morning that's why the post doubled.
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
The DNS changer app is using local vpn to route the dns queries, because of which it will drain more battery. If you have magisk mind giving a try to this masigk module? It's lot easier to change dns and doesn't consume battery either. Plus the root certificate is also included here.
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
This is the magisk module.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Only installing does the job!?
[Android Software/Hacking General [Developers Only]] MrT69:
Take a deeper look in the Android App and you can see that you can create shortcuts. You can setup 10 or 20 different Servers and by clicking on the shortcut this DNS Server will be activated immediately.

I have round about 20 shortcuts on my mobile device because I need somtimes switch between different test systems. That's the reason why I really love this app. As soon as you have switched you just need to close the Browser or the App and reopen it. The entire reboot is only recommeded because it's the fastest way to clean the cache and the safest solution to see if keweon works.
[Android Software/Hacking General [Developers Only]] jyoti.id:
I was using for 1day & i didnt face anything that you can say ad, but one thing i noticed is that its making something wrong with the download, whenever the dns is active & im trying to download something (chrome/xda app), in chrome its downloading the file link(20-30kb, named with the link), not the file(5mb, named with the file name), & in xda its not starting the download. But whenever im turning it off, everything working fine. Tried to change the servers, but same. Anyone can confirm?
[Android Software/Hacking General [Developers Only]] MrT69:
Interesting thing because DNS at all has nothing to do with download & speed. Either it's working or it's not working.

Hmmm... Are you using also the keweon Certificate?
[Android Software/Hacking General [Developers Only]] jyoti.id:
Yes
[Android Software/Hacking General [Developers Only]] MrT69:
No, that should work. If this is not working then try dot.asecdns.com to use.

If both settings are not working then your Provider will block the Server.

To bypass this you need to install "Nebulo" App and use the DoH Server option.

For DoH Server you need to use: doh.asecdns.com
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir [MENTION=304818]MrT69[/MENTION], I have moved the certificate to the Trusted credentials in the Root directory..

But it is still showing in the user certificates..

I am attaching the screenshots below, can you please tell me have I done it correctly? :confused:
[Android Software/Hacking General [Developers Only]] GamaShani:
Also Sir [MENTION=304818]MrT69[/MENTION] the application My Kirana is not working properly,

Nothing is loading in the application,

Can you please look into it.. ?
[Android Software/Hacking General [Developers Only]] MrT69:
Can you do me a favor and send me the App or an App Link?

It's good to know that you have the keweon Cert within the device store. Now I have someone who can test a few things ;)
[Android Software/Hacking General [Developers Only]] tholmes8291:
I'm rooted and having trouble finding where the certificate is stored so that I can move it from User to System. Can someone direct me to where they are?
[Android Software/Hacking General [Developers Only]] MrT69:
There is an (old) App but to move the Certificate you need to have a rooted device. Google has removed this from Playstore but the Code is at GitHub:

https://github.com/Nutomic/movecerts

The compiled APK file can downloaded here:

https://github.com/Nutomic/movecerts/releases

There is also a thread here at XDA from the Dev [MENTION=4275293]Nutomic[/MENTION]:

https://xdaforums.com/android/apps-games/app-certs-t2827049
[Android Software/Hacking General [Developers Only]] DenyDarko:
There a Magisk module.

That's what I use
[Android Software/Hacking General [Developers Only]] GamaShani:
Sir [MENTION=304818]MrT69[/MENTION], I am testing some more apps to check whether they are working or not..

Do I need to remove the below two entries from the User Certificates for the proper functioning of the KeweonDNS?

Also In game advertisements videos for earning coins,etc. aren't working..

Here is the application link ?

https://play.google.com/store/apps/details?id=com.mykirana
[Android Software/Hacking General [Developers Only]] MrT69:
Advertising Videos can't work because then they will be visible at other pages. Keep in mind keweon is an Adblock solution. ;)

If I would open them then I can also shut down everything.

For the Certificate there is no need to remove it. If you are fine by using it then you can keep it. This will break nothing. From this point of view it's OK.

Btw, I guess kirana is now working. Right now the upload is running and I guess within 30 to 40 minutes it's online.
[Android Software/Hacking General [Developers Only]] smokeyrider:
Hi

I am trying to open website minergate.com all I get is a blank screen. The certificate seems to be causing this. It's only a problem on this site.

[IMG="screenshot minergate"]https://drive.google.com/open?id=1h-h8joPmTN-6eGSxmLDuk-boDv_cV3Ml[/IMG]

Is there a way to open this site.

Thanks
[Android Software/Hacking General [Developers Only]] MrT69:
The site is blocked and I will remove this from the blacklist.

When you see this kind of false block again then copy the URL into a TXT file and post this to my whitelist mail within the signature.

Do not write the URL within the mail. Just attachments will arrive for privacy security and spam protection.

Quite easy. ?
[Android Software/Hacking General [Developers Only]] MrT69:
Fixed ;) Thanks a lot!
[Android Software/Hacking General [Developers Only]] smokeyrider:
Hi still having problems with this site and the Keweon certificate. Opens as a blank page. Here is a thumbnail of the certificate, usually it is issued as commodo certificate. Sorry my description is a bit vague.
[Android Software/Hacking General [Developers Only]] GamaShani:
All the things are perfectly working fine.. :)

May God bless you Sir [MENTION=304818]MrT69[/MENTION].. ?

I pray that all of your wishes may get fulfilled.. :angel::svetius:
[Android Software/Hacking General [Developers Only]] MrT69:
Quite easy the next time. Just copy the URL into a TXT file and post it to my whitelist mail within the signature.

Add a tiny comment and that's all you need to do.
[Android Software/Hacking General [Developers Only]] cahdawe:
-Simple tutorial to use keweonDNS with Stubby in Windows 10 [IPV4]-

1. Download the Stubby Installer ~HERE~

2. Download the config ~HERE~

3. Install the Stubby

4. Open C:\Program Files\Stubby

5. Copy stubby.yml to C:\Program Files\Stubby

4. Right-click "stubby_setdns_windows.ps1" file and click Run with PowerShell

5. Run stubby.bat

CMIW
[Android Software/Hacking General [Developers Only]] cahdawe:
To edit the config

Open C:\Program Files\Stubby\stubby.yml with notepad

Add 1 hastag at the begining of the server title

no hastag for at the begining of the address_data & tls_auth_name

to disable it, Add 2 hastag for the title

1 hastag for address_data & tls_auth_name

see attachment
[Android Software/Hacking General [Developers Only]] smokeyrider:
Can use Keweon IPv6 as well. This is my config added at the end of \stubby.yml

## DNS Keweon Adblock Germany

- address_data: 136.243.69.38

tls_auth_name: "dot.asecdns.ch"

- address_data: 2a01:4f8:212:2325::38

tls_auth_name: "dot.asecdns.ch"
[Android Software/Hacking General [Developers Only]] GamaShani:
Hello Sir [MENTION=304818]MrT69[/MENTION], I am viewing some sponsored and in store adds in the link provided below..

https://www.ndtv.com/world-news/str...rlds-largest-plane-makes-flying-debut-2022760
[Android Software/Hacking General [Developers Only]] MrT69:
I'm searching someone with Samsung S8 Stock ROM and the usage of private DNS (DNS over TLS)

Is this working?
[Android Software/Hacking General [Developers Only]] DenyDarko:
Hey [MENTION=304818]MrT69[/MENTION]

I'm with a friend and I've installed for him the nebulo with doh.asecdns.com

Thing is, it blocks MIUI system APP updates.

Unfortunately I'm not able to find the specific offending hostname as it's not my device but I thought it's important to let you know.
[Android Software/Hacking General [Developers Only]] MrT69:
Ohhh... Will check this tomorrow. Thanks a lot!!!
[Android Software/Hacking General [Developers Only]] MrT69:
Is this now working?
[Android Software/Hacking General [Developers Only]] MrT69:
I'm always using a virtual machine for Android to test and there is really nothing reasonably clean on the Internet.

Here is now a virtual machine for VirtualBox. My current version of VirtualBox is 6.06.

Download. Unpack. Import. And then have fun with it.

If you want to do it by yourself then the VM has to stand for about 1 to 2 hours after installation. The same is with flashing ROM's on the phone. Do not touch for 20 minutes after flashing. Please do not ask me why this is so on Android. Thus, the VM is ready to use.

Here the link:

http://uploaded.net/file/0sac384y

The VM is 100% free of virus, spyware and other things like that as far as supplied by the manufacturer as such. The VM is already rooted, which was also done by the manufacturer. The root (system) directory is "read / write" by default.

Would be glad if suggestions for improvements, changes or other settings will come from your side to make this machine better.

Hope you enjoy this.
[Android Software/Hacking General [Developers Only]] jaggillararla:
How can I add the dns over tls on Android pie? Cloudflare is using it.
[Android Software/Hacking General [Developers Only]] MrT69:
Just use dot.asecdns.com (3 Server but tiny and virtual) or use dot.asecdns.ch (just 1 Server but more power and physical)

Have fun with it!
[Android Software/Hacking General [Developers Only]] jokono421:
Help to get working on wireguard app

I just can't get the right info in the right place. Using wirguard app, and not sure what info goes where. Can you please do a guide or example? Of how to get it running through wireguard app. Bolth kernal n rom are compatible. Just not sure about which info of yours ,I put where in app.
[Android Software/Hacking General [Developers Only]] Q-werty-Q:
Can it block ads and trackers without root certificate? And how can take advantage of android pie build-in DNS changer?
[Android Software/Hacking General [Developers Only]] MrT69:
Sure.

The Certificate is just for pretty up webpages and speed up your internet.

A few sites working with HTTPS error detection and they don't work without certificate. Best example for this is "bild.de".
[Android Software/Hacking General [Developers Only]] MrT69:
The VPN App can only use the normal DNS Servers. As far as I have seen you can't use DoH or DoT within the settings.
[Android Software/Hacking General [Developers Only]] pxrave:
[MENTION=304818]MrT69[/MENTION] hey your dns blocks every facebook picture

i use 2a01:4f8:1c17:6fc7::250 dns over https
[Android Software/Hacking General [Developers Only]] Q-werty-Q:
Hey bro,im trying to use this DNS with adguard app since graph and staticxx Facebook domains and google analytics still can connect in ur DNS,I know people cant use Facebook if this domain is blocked,so can u make one or two servers where every social media and google trackers blocked,that would be really awesome for people who concerned about their privacy and don't use social medias.

Not a request just a suggestion,and thank you for making this DNS,its really needed one especially these days.