[tor-relays] PSA regarding Quad9 DNS Resolver

Nathaniel Suchy (Lunorian) me at lunorian.is
Fri May 11 21:45:41 UTC 2018

As long as their alternate resolvers do not censor any queries it's
(probably) allowed and will (probably) not get you flagged as a bad exit
for censoring traffic.

On 5/11/18 12:24 PM, nusenu wrote:
> Toralf Förster:
>> On 05/11/2018 01:41 PM, Nathaniel Suchy (Lunorian) wrote:
>>> Like OpenDNS, Quad9 is a censoring DNS resolver
>> Is this true for too ?
> https://quad9.net/faq/
>> Is there a service that Quad9 offers that does not have the blocklist
>> or other security?
>> The primary IP address for Quad9 is, which includes the
>> blocklist, DNSSEC validation, and other security features. However,
>> there are alternate IP addresses that the service operates which do
>> not have these security features. These might be useful for testing
>> validation, or to determine if there are false positives in the Quad9
>> system.
>> Secure IP: Provides: Security blocklist, DNSSEC, No EDNS
>> Client-Subnet sent. If your DNS software requires a Secondary IP
>> address, please use the secure secondary address of
>> Unsecured IP: Provides: No security blocklist, DNSSEC, sends
>> EDNS Client-Subnet. If your DNS software requires a Secondary IP
>> address, please use the unsecured secondary address of
>> Note: Use only one of these sets of addresses  secure or unsecured.
>> Mixing secure and unsecured IP addresses in your configuration may
>> lead to your system being exposed without the security enhancements,
>> or your private data may not be fully protected
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20180511/62f4c146/attachment.sig>

More information about the tor-relays mailing list