💾 Archived View for capsule.galusik.fr › log › 2022-10-16-connman-public-dns.gmi captured on 2023-09-28 at 16:05:21. Gemini links have been rewritten to link to archived content

-=-=-=-=-=-=-

Artix: Quick setup Connman with public DNS resolvers

2022-10-16

Why?

In Artix GNU/Linux[1] with Xfce, the network is managed by Connman[2]. The default setup is to use your ISP DNS resolvers. This is generally the case for all others OS and network managers.

I live in France. French ISP must follow state guidelines. In others words, if the state don't want you to visit a website for whatever reasons, they ask your ISP to put this website on their unreachable list. Then, you will think that this website is down whereas it is just "hidden" from you.

So, to bypass this censorship, you have two ways:

Setup a local DNS server like unbound[3] (the safest way: you only have to trust you)
Setup your network manager (the easy and quick way: you have to trust the DNS provider)

The easy and quick way

The easy way is to change the defaut values of your network manager, here Connman. So:

Right clic on the connman applet to open "network settings"
Choose, for example, the Wireless menu
Choose your network, clic on the setup button to open the "network settings - your network" window
Choose the "nameservers" menu

You will find something like:

192.168.1.1 (IPv4 primary local box ISP adress)
2a11:cb19:67c:5710:969d:79ff:fecd:10a (IPv6 primary local box ISP adress)
2a11:cb19:67c:5710:969d:79ff:fecd:10a (IPv6 secondary local box ISP adress)

Make the changes with, for example, the Quad9 settings. Keep in mind that the choosen DNS provider will see all your requests (it is alreday the case with your ISP):

9.9.9.9 (IPv4 Primary DNS)
2620:fe::fe (IPv6 Primary DNS)
2620:fe::9 (IPv6 Secondary DNS)

Hit the "Apply" button. Disconnect and reconnect from your wireless network and voilà, you're done. You can reach websites where babies are eaten!

Some DNS resolvers

Providers   IPv4              IPv6
====================================================  
Quad9       9.9.9.9           2620:fe::fe
            149.112.112.112   2620:fe::9 

OpenDNS     208.67.222.222
            208.67.220.220

Mullvad     194.242.2.32      a07:e340::3
            193.19.108.3

FDN         80.67.169.12      2001:910:800::12
            80.67.169.40      2001:910:800::40

Google      8.8.8.8           2001:4860:4860::8888
(don't)     8.8.4.4           2001:4860:4860::8844

...
...

Some links

Artix Linux[1]

Connman[2]

unbound[3]

OpenNIC (Looking for an open and democratic alternative DNS root? Concerned about censorship?)

dns-checker.org (global list of all DNS resolvers providers)

<--

Commentaires / Comments ?

Envoyer un email à la liste de discussion publique / Send a mail to the public Inbox

---