3

I'm using AdguardHome as a DNS server to filter a lot of stuff. As an upstream DNS, I use a bind server which acts as a local root server (as described at https://localroot.isi.edu). This server is in my house and has my public IP address when it talks to the world.

My problem is that dnsleaking test shows my public IP address and so, even if I'm sure that DNS request doesn't leak, my real IP leaks through DNS requests that are made to other DNS servers even if I'm on a VPN.

As my home is the only user of this DNS server, I'm wondering how I can obfuscate the public IP of my localroot DNS server...

3
  • 3
    You don't want the internet DNS servers your home DNS server contacts to know what the IP of your home DNS server is? How do you expect to get a response from the internet DNS servers? And why do you want to hide your IP from DNS servers? What are you concerned about?
    – schroeder
    Commented May 3 at 9:08
  • 2
    If your want to hide the IP address of your DNS server you have to put your DNS server behind a VPN. It does not help if you use a VPN but then use a DNS server not behind the VPN. Of course, in these cases the VPN provider can see your IP address, because somehow they need to send packets back to you. Commented May 3 at 9:41
  • Thanks for your comments. Steffen Ullrich give me the obvious answer and I don't know why I didn't managed to thonk about it ! Thanks a lot ! For Schroeder, I explicit my concern : When I use a VPN and I verify leaks, I'm not very pleased to see my real IP address in the result even if it's in DNS leak. As I'm or family is the only user of this DNS, I supposed it can be linked by nameservers owners who own also the website I visit to link both IP. As my real IP is static public IPv4, it's a privacy concern for me. Commented May 3 at 11:26

2 Answers 2

2

A DNS leak occurs when a DNS request is sent to the ISP DNS server, so the ISP knows which domains the client is accessing. In your case, it's irrelevant.

If you are not using a VPN or proxy, your connection to all internet sites goes thru your ISP anyway, because they are the ones routing internet packets to your computer, they have to know your IP address and they have to know the sites you want to access.

You are probably using Adguard because your goals are to reduce the amount of ads on your devices instead of concealing your navigation habits, so a DNS leak is not an issue.

To avoid your ISP knowing the DNS requests you make, use DNS over TLS or DNS over HTTPS on your internal DNS server. It will encrypt the queries to the upstream DNS server.

It will not change much because if your internet connection does not go thru a VPN server, your ISP will know the sites you accessed. And if your connection goes thru a VPN server, your VPN provider knows what you accessed. And even if you have a self-hosted VPN server running on a VM somewhere, the VM provider knows what you accessed.

3
  • Thanks for your answer. As stated in the question, I do use VPN. I've several goals, reduce amount of ads of course, but also minimise the collection of navigation habits. Commented May 3 at 12:31
  • DNS leak will not interfere much with your goals.
    – ThoriumBR
    Commented May 3 at 13:04
  • OP, If you use a VPN, then this may prevent your ISP from 'collecting your navigation habits', but it allows your VPN provider to collect your navigation habits. So, you are not really solving the problem, you are just shifting the problem from your ISP to your VPN provider. If you really want to solve the problem, by making it difficult for anyone to collect your navigation habits, then use Tor or Tails.
    – mti2935
    Commented May 3 at 15:20
1

So the answer was given by Steffen Ullrich in the second comment : I need to use a VPN for my DNS server so that all its requests are done with another IP than my public one !

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .