2

Is there a way to resolve DNS through HTTP/HTTPS, the case was:

my ISP redirecting every DNS request to their own DNS and poisoning the DNS records.

all I need is a software that could resolve requests using http or https, for example, when I set /etc/resolv.conf to

nameserver 127.0.0.1

there would be a program/service that listens to 127.0.0.1:53 and submit HTTP requests containing DNS queries to another server

Rui F Ribeiro
  • 56,709
  • 26
  • 150
  • 232
Kokizzu
  • 9,699

2 Answers2

2

I found alternative answer that could solve the problem, using encrypted DNS, first install:

pacman -Sy dnscrypt-proxy

Then start the dnscrpyt program manually:

dnscrypt-proxy --resolver-name=cloudns-can

The list could be found on /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv

Or automatically:

sudo systemctl enable dnscrypt-proxy
sudo systemctl start dnscrypt-proxy

Then change your /etc/resolv.conf

nameserver 127.0.0.1
Kokizzu
  • 9,699
  • Similar, but using SysV init and BIND http://unix.stackexchange.com/questions/270716/configure-bind-as-forwarder-only-no-root-hints-encrypted-rpz-blacklist-wh – Rui F Ribeiro Feb 19 '17 at 09:49
1

Shouldn't you consider DNSSEC and diffrent DNS resolver? You can get a list from here: https://duckduckgo.com/?q=Public+DNS+Servers&t=ffsb&ia=answer&iax=1

Abdullah
  • 324