Izihluzi ze-DNS zasekhaya kwi-Android ukuze kumiswe abalandeleli kwi-imeyile nakwezinye ii-apps

Ngaba wakha wavakalelwa kukuba Bayakuhlola nokuba ujonga i-imeyile yakho kwifowuni yakho ephathwayo.Asikuko ukucinga kwakho: uninzi lwee-imeyile zokuthengisa kunye nee-apps ezininzi ze-Android ziphethe ii-trackers ezingabonakaliyo ezirekhoda oko ukuvulileyo, nini, phi, kwaye ngesiphi isixhobo. Iindaba ezimnandi zezokuba ungawuthintela uninzi lwaloo mzila. ukuvimba iidomeyini zokulandelela ngaphakathi kwenkqubo ngokwayo, ngaphandle kweengcambu kwaye ngaphandle kokuseta isekisi yee-apps ezingaqhelekanga.

Kweli nqaku siza kubona indlela yokusebenzisa Izihluzi ze-DNS zasekuhlaleni kwi-Android ukuvimba abalandeleli kwii-imeyile, ii-apps, kunye nokukhangela kwiwebhuZeziphi iinkonzo ezinomdla ngakumbi (i-AdGuard, i-NextDNS, i-RethinkDNS, i-Mullvad, njl.njl.), indlela oku kudibana ngayo nezandiso ezichasene nokulandelela kwi-imeyile, kwaye zeziphi iindlela onazo ukuba ufuna ukuyiseta ekhaya nge-DNS yakho efana ne-Pi-hole, i-AdGuard Home okanye i-Technitium.

Yintoni i-DNS kwaye kutheni inceda ekumiseni ii-trackers kunye neentengiso?

I-DNS yinkqubo eqhuba Iguqulela amagama eedomeyini anjenge "example.com" kwiidilesi ze-IP.Ngalo lonke ixesha i-app, iwebhusayithi, okanye iklayenti yakho ye-imeyile kufuneka ilayishe into ethile (kuquka imifanekiso ye-imeyile, ii-pixels zokulandelela, okanye izikripthi zentengiso), ithumela umbuzo we-DNS ukuze ifumanise ukuba yeyiphi iseva ekufuneka iqhagamshelwe kuyo.

Isisombululi se-DNS esiqhelekileyo siphendula ngedilesi ye-IP echanekileyo, kwaye yiyo leyo. Nangona kunjalo, I-DNS enokucoca umxholo kuqala ijonga uluhlu lweedomeyini eziphawulwe njengeentengiso, ii-trackers, okanye i-malware.Ukuba idomeyini ikuloo luhlu, iseva inokubuyisela idilesi ye-IP yobuxoki, idilesi yangaphakathi engenanto, okanye ingaphumeleli ukusombulula isicelo. Isiphumo: umthombo wokulandelela okanye ibhanile yentengiso. Abaze bakhutshelwe.

Oku kuchaphazela zombini ukukhangela ii-imeyile kunye nee-apps ezininzi kuba Iiphikseli zokulandelela ii-imeyile zihlala zilayishwa njengemifanekiso yangaphandle evela kwiidomeyini zokulandelela.Ukuba i-DNS yakho iyawavala loo ma-domain, i-pixel ayizukukhutshelwa, umthumeli akayi kufumana isaziso esivulekileyo, kwaye uninzi lweprofayili abayenzayo ngawe luya kunqunyulwa.

Ukongeza ekuhluzeni, uninzi lwezisombululo zanamhlanje ziyaxhasa iiprotokholi ezifihliweyo ezifana ne-DoH (DNS-over-HTTPS), i-DoT (DNS-over-TLS) okanye i-DoQ (DNS-over-QUIC)Ngabo, umboneleli wakho we-intanethi akasakwazi ukubona zonke iiwebhusayithi kunye neenkonzo ozibuzayo nge-DNS, okanye aguqule iimpendulo ukuze afake ezakhe iintengiso okanye avale umxholo ngokungekho mthethweni.

I-DNS yabucala kwi-Android: Vimba kwinqanaba lenkqubo ngaphandle kweengcambu okanye ii-VPN ezingaqhelekanga

Ukususela kwi-Android 9 kukho useto olubizwa ngokuba "I-DNS yabucala" ekuvumela ukuba uchaze iseva ye-DNS efihliweyo yenkqubo yonkeYeyona ndlela icocekileyo yokuvula isihluzi se-DNS sendawo: awudingi root access, awudingi ukufaka i-VPN esisigxina, kwaye awudingi kuxhomekeka kuphela kwisikhangeli-intanethi.

Xa uvula i-DNS yabucala, Zonke ii-apps ze-Android ziyayeka ukusebenzisa i-DNS yenkampani yakho okanye ye-router Emva koko baqala ukusombulula iidomeyini ngeseva oyilungisileyo (umzekelo, i-AdGuard DNS okanye i-NextDNS). Nanini na xa usetyenziso lwe-imeyile, umxhasi wakho we-Gmail, okanye usetyenziso oluxhaswa yintengiso luzama ukuqhagamshela kwidomeyini yentengiso okanye yokulandelela, umboneleli we-DNS uyayidibanisa noluhlu lwayo aze ayithintele ukuba kuyimfuneko.

Olu hlobo lokucoca luluncedo kakhulu kwi iifowuni eziphathwayo eziphantsi okanye ezigcwele intengisoapho yonke ibhena eyongezelelweyo ichaphazela ngokubonakalayo ukusetyenziswa kwedatha, ubomi bebhetri, kunye nokusebenza. Ngokusika iintengiso kunye nee-trackers kwinqanaba lenethiwekhi, ii-apps ezininzi zasimahla kunye nemidlalo ziba lula ukuzilawula, kwaye ezinye ii-web kunye nee-imeyile zokulandelela azisebenzi ngaxeshanye.

Indlela yokukhetha iseva ye-DNS ye-Android: i-AdGuard, i-Rethink, i-Mullvad, i-NextDNS kunye nezinye

Abasebenzisi abaninzi bayazibuza ukuba ingaba kubaluleke na ukuba basebenzisa i-AdGuard, i-RethinkDNS, i-Mullvad, i-Cloudflare, i-Quad9, okanye omnye umboneleli, okanye ukuba ekugqibeleni Zonke zivimba into efanayo okanye engaphantsi.Impendulo ithi hayi: nangona zonke zisombulula iidomeyini, zahlukile kakhulu kubumfihlo, ukucoca, izibalo, kunye nokukwazi ukwenza ngokwezifiso.

Phakathi kwababoneleli abaziwayo be-Android, ezi nkonzo zilandelayo zivelele: I-DNS kawonkewonke inokucoca okanye ayinayo:

• I-DNS kawonkewonke ye-AdGuardIfikelela kumbhalo ocacileyo kwaye ixhasa i-DoH/3, i-DoT, i-DoQ, kunye ne-DNSCrypt. Ibonelela ngeendlela zokuthintela iintengiso kunye nokuthintela umkhondo, kunye neprofayili yosapho eyongeza isihluzo somxholo wabantu abadala. Bathi babhalise ngokungaziwa.
• I-Cloudflare (1.1.1.1)Igxile kwisantya kunye nobumfihlo, nge-DoH/3 kunye ne-DoT. Ibonelela ngeendlela ezisisiseko zokucoca ezisekelwe kwiseva ekhethiweyo (i-malware, umxholo wabantu abadala), kodwa amandla ayo akakho kulawulo olupheleleyo lweentengiso kwii-apps.
• Ulawulo D SimahlaI-DNS ene-plaintext, i-DoH/3, i-DoT, kunye ne-DoQ, kunye neeprofayili zokucoca ezinokukhethwa. Igxile ekunikezeni amanqanaba ahlukeneyo okuvimba ngokuxhomekeke kwiseva oyikhethileyo, kunye nokusebenza okuhle ngokubanzi.
• Mullvad DNSYenzelwe ukusebenza ngokungenamthungo ne-VPN yakho, ixhasa i-DoH kunye ne-DoT. Ikuvumela ukuba usebenzise izihluzi ze-tracker kunye neentengiso ngokuthe ngqo kwizicwangciso zikaMullvad, kunye noluhlu lukawonke-wonke olubhaliweyo.
• I-Quad9I-DNS kawonkewonke ene-plaintext, i-DoH, i-DoT, kunye ne-DNSCrypt. Ibonelela ngokuthintela i-malware eyakhelwe ngaphakathi kwaye, kuxhomekeke kwiseva, izihluzi ezongezelelweyo. Ingqwalasela yayo ingaphezulu kukhuseleko kunokuthintela yonke intengiso ngokucwangcisiweyo.

Ngaxeshanye, kukho iinkonzo ze Ukucoca i-DNS yelifu ngephaneli yokulawulayenzelwe ukwenza ngokwezifiso oko kuvaliweyo, ukudala iiprofayili ngesixhobo ngasinye, kunye nokujonga izibalo:

• OkulandelayoDNSIsebenza njenge-Pi-hole efini. Ikuvumela ukuba usebenzise uluhlu oluchasene neentengiso kunye noluchasene nokulandelela, uthintele zonke iindidi (iinethiwekhi zentlalo, ukungcakaza, njl.njl.), usebenzise imo ekhuselekileyo kwiinjini zokukhangela, kwaye uthintele iYouTube. Ixhasa i-DoH, i-DoT, kunye ne-DoQ, ibhala imibuzo (ngokugcinwa okucwangcisiweyo), kwaye inikezela ngesicwangciso sasimahla esinezicelo ze-DNS ezimalunga nama-300.000 ngenyanga ngeakhawunti nganye.
• Ulawulo D (intlawulo): inguqulelo ephucukileyo ene-web console, iiprofayili ezineenkcukacha ezininzi, ishedyuli kunye namathuba amahle kakhulu okuhluza amakhaya namashishini.

Ukuba uvela ekusebenziseni i-AdGuard njenge-app okanye i-DNS kwi-Android kwaye awuqinisekanga ukuba ukhethe i-RethinkDNS, i-Mullvad, okanye unamathele kwi-AdGuard, into ephambili kukubona Yintoni oza kuyibeka phambili: ubumfihlo obungqongqo, izibalo, ukuhlanganiswa kweVPN, okanye ulawulo oluyi-granularUmzekelo, iMullvad iyakhanya ukuba Sele usebenzisa i-VPN yaboI-AdGuard inenkqubo egxile ekuthinteleni iintengiso; i-RethinkDNS ivelele njenge-proxy ye-DNS efihliweyo kwi-Android ehambelana nezinye ii-VPN ezicwangcisiweyo (i-WireGuard, i-Orbot, njl.njl.).

Indlela yokuseta i-DNS ethintela iintengiso kwi-Android inyathelo ngenyathelo

Ukuze usebenzise ithuba lokucoca i-DNS yasekuhlaleni kwi-Android 9 okanye ngaphezulu, ungasebenzisa olu khetho uku I-DNS yabucala enomboneleli oquka ukuvimba intengiso kunye ne-trackerAmanyathelo achanekileyo anokwahluka kancinci ngokuxhomekeke kuphawu kunye nomgangatho wokwenza ngokwezifiso, kodwa ingcamango ngokubanzi yile:

• • Vula Useto yenkqubo.
  • Ngenisa icandelo Unxibelelwano o Inethiwekhi kunye ne-Intanethi.
  • Fumana ukhetho I-DNS yabucala (Sebenzisa injini yokukhangela yangaphakathi ukuba awuyiboni kwasekuqaleni).
  • Khetha "igama lomncedisi we-DNS yabucala".
  • Ngenisa i-host yenkonzo ye-DNS ofuna ukuyisebenzisa.

>

• Gcina utshintsho uze uvavanye uqhagamshelo.

Umzekelo oqhelekileyo osetyenziswa kwi-Android yi-AdGuard DNS. Kwi-ad filtering and tracking standard, kusetyenziswa i-host. dns.adguard-dns.comUkuba ufuna nezihluzi zomxholo wabantu abadala kunye nokukhuselwa kwabantwana, ungasebenzisa i-host family.dns.adguard.com, nto leyo eyongeza ukuvalwa kweendidi ezinxulumene nomxholo wabantu abadala.

Kwimeko ye-NextDNS okanye i-Control D, iphaneli yewebhu ivelisa i- igama lomenzi elithile elidityaniswe noqwalaselo lwakhoKhuphela elo gama (lidla ngokuphela ngo-"dns.nextdns.io" okanye into efanayo) kwaye ulincamathisele kwizicwangciso ze-DNS zabucala ze-Android. Ukususela ngelo xesha, ifowuni yakho iya kusebenzisa imithetho yakho yangokwezifiso kuzo zonke iindlela zenkqubo, kuquka ii-apps ze-imeyile, iibrowsers, kunye nezicelo zomntu wesithathu.

Ukuba inethiwekhi kawonke-wonke ye-WiFi ene-portal efihliweyo (izikhululo zeenqwelo-moya, iihotele, iikhefi…) ayikuvumeli ukuba uvule iphepha lokungena, kusenokwenzeka ukuba kungenxa yokuba I-DNS yabucala efihliweyo ithintela ukuqondisa kwakhona okusetyenziswa yi-portal.Kwezo meko, eyona nto iluncedo onokuyenza kukuyicima i-DNS yangasese okwethutyana, uyiqinisekise, uze uyivule kwakhona.

Sebenzisa i-DNS ekhuselekileyo kuphela kwisiphequluli: iChrome kunye neDoH

Usenokufuna Ukucoca i-DNS kuchaphazela kuphela ukukhangela iwebhu kwaye akuzizo zonke ii-appsKwimeko enjalo, iChrome ye-Android ikuvumela ukuba ulungiselele i-DNS ekhuselekileyo (i-DoH) ngqo kwisiphequluli, ngaphandle kokuchukumisa useto lwabucala lwe-DNS yenkqubo.

Inkqubo eqhelekileyo kwi-Chrome yile:

1. vula imenyu Cwangcisa.
2. Yiya Ubumfihlo nokhuseleko.
3. Ngenisa ukhetho Sebenzisa i-DNS ekhuselekileyo.
4. Khetha "Khetha omnye umboneleli" okanye intsimi efanayo.
5. Faka i-URL ye-DoH yenkonzo yokucoca (umzekelo, i-AdGuard okanye i-NextDNS HTTPS endpoint).

Kwimeko ye-AdGuard, i-Chrome ifuna I-URL ethile ehambelana ne-DoH (Igama lomenzi olisebenzisela i-DoT alanelanga.) Ukuba wenza impazamo kuphawu, isikhangeli sinokungayinaki indlela olucwangcisiweyo ngayo okanye sinike iimpazamo ezingaqhelekanga xa kusonjululwa iidomeni.

Kubalulekile ukuqaphela ukuba xa iChrome ine-DNS yayo ekhuselekileyo elungiselelweyo, Loo lungiselelo luza kuqala kunolungiselelo lwenkqubo kwizicelo ezenziwe sisikhangeli.Umzekelo, ukuba kwi-Android usebenzisa i-DNS ekwavimba umxholo wabantu abadala, kodwa kwi-Chrome ukhetha enye ehluza iintengiso kuphela, unokukwazi ukufikelela kumxholo wabantu abadala kwisiphequluli ngelixa ezinye ii-apps zisahluzwa.

Ii-block email trackers: i-DNS + izandiso ezithile

Ukucoca i-DNS kunceda kakhulu ekumiseni abalandeleli be-imeyile, kodwa ngokwako Ayisoloko imisa zonke ii-pixels zokulandelela kunye nezikripthi ezifakwe kwiiplatifomu ze-webmailYiyo loo nto kucetyiswa kakhulu ukuba uyidibanise nezandiso zesikhangeli ezizinikeleyo xa ufikelela kwi-imeyile kwiPC okanye kwisixhobo se-Android usebenzisa izikhangeli ezihambelanayo.

Phakathi kwezona zongezo ziluncedo kakhulu vimba abalandeleli be-imeyile ukuma:

• uBlock Origin / uBlock Origin LiteI-AdGuard sisixhobo sokuthintela iintengiso esaziwayo nesihluza uninzi lwezixhobo zokulandelela ezifumaneka kwi-webmail. Ungayonyusa ukusebenza kwayo ngokuvula uluhlu olufana noKhuseleko lokulandelela i-AdGuard. Ifumaneka kwiChrome, Firefox, kunye neebrowsers eziphuma kwezinye; inguqulelo yeLite iyahambelana nemiqathango emitsha yolwandiso (iManifest V3).
• I-Trocker: ulwandiso lwasimahla noluvulelekileyo olusebenza neGmail, iOutlook, iYahoo kunye nezinye iinkonzo zewebhu. Ibona ii-pixels zokulandelela, izithintele, kwaye ikuxelele ukuba zingaphi kwi-imeyile nganye., kuphawula ngo-"T" imiyalezo equka ii-trackers.
• I-imeyile kaGoogleYenzelwe abasebenzisi beGmail kwisiphequluli, esi sixhobo sibonisa imiyalezo equlethe ii-trackers ezine-icon yeliso kwaye sibonise ukuba sesiphi isixhobo sokulandelela esisetyenziswayo. Yonke into icutshungulwa kwindawo, kwaye ikhowudi yayo ibanjwe kwiGitHub, ukuqinisekisa ukuba akukho nto ibonakalayo.
• IPixelBlockYenzelwe iGmail kwiibrowsers ezisekelwe kwiChromium (iChrome, iEdge, iBrave, njl.njl.). Ivala ii-pixels zokulandelela kwaye ibonise uphawu lwamehlo abomvu xa iphazamisa. Ayifuni lungiselelo kodwa ilinganiselwe kuloo ndawo ithile.

Ukongeza kwizandiso, kuyacetyiswa ukuba kusetyenziswe ezinye Imikhwa esisiseko yokunciphisa ukulandelwa kweposiMusa ukuvula imiyalezo evela kubathumeli abakrokrelayo, kuphephe ukucofa kwiikhonkco ezikrokrelayo, sebenzisa ii-previews ezingalayishi imifanekiso yangaphandle, hlala ucoca iileta zeendaba ezingafunekiyo, kwaye, xa kunokwenzeka, sebenzisa Ii-imeyile zexeshana zobhaliso kunye nokukhushulwa okuthile.

Ukuba wabelana ngezixhobo okanye iiakhawunti namalungu osapho, kubalulekile nokuba cacisa ukuba yintoni ecwangcisiweyo kunye nesizathu.ukuze kungabikho mntu uvala ngempazamo ukhuseleko okanye athumele ii-imeyile ezirhanelekayo ezinokuba nezilandeleli kunye namakhonkco anobungozi.

Ii-apps zokucoca i-DNS kwi-Android: i-personalDNSfilter, i-AdGuard, i-RethinkDNS

Ukongeza kwi-DNS yabucala yenkqubo, abantu abaninzi bakhetha ukuyisebenzisa ii-apps ze-Android ezizinikeleyo ezisebenza njengesihluzi se-DNS sendawoEnye yezona zinto zinomdla kakhulu yi-personalDNSfilter, esebenza njenge-firewall ye-DNS elula enenkxaso kwiiseva ezifihliweyo.

i-personalDNSfilter idibaniswa nesisombululo se-DNS sesixhobo kwaye ivimba ukufikelela kwiidomeyini ezifakwe kuludwe lwezihluzi (i-malware, i-phishing, ii-trackers, iintengiso, njl.njl.). Sisisombululo sasekuhlaleni ngokupheleleyo: ukucoca kwenziwa kwisixhobo sakho esiphathwayo kwaye, ngokutsho kwabaphuhlisi baso, Akukho datha okanye izibalo ezithunyelwa kumbhali we-app, nto leyo enciphisa indawo engaphezulu evezwayo.

Phakathi kweempawu zayo ezibalaseleyo zezi:

• Isebenza njenge Isihluzi se-DNS kwi-Android ngaphandle kokufikelela kwiingcambu kwiinguqulelo 4.2 nangaphezulu.
• Ikuvumela ukuba ukhethe nayiphi na iseva ye-DNS ethembekileyo njengephezulu, kuquka izisombululo ezifihliweyo kusetyenziswa i-DoH (DNS-over-HTTPS) kunye ne-DoT (DNS-over-TLS).
• Inokwenziwa ngendlela local kwifowuni okanye njengeseva ye-DNS ephakathi kwinethiwekhi yasekhaya.
• Kubandakanya i- ukuloga ngexesha langempela kwazo zonke izicelo ze-DNS, iluncedo kakhulu ekuboneni ukuba zeziphi iidomeyini iiapps zakho ezichukumisa "ngasemva kwemifanekiso".
• Ine- uluntu olusebenzayo kwiTelegram ukuze ufumane inkxaso kunye noluhlu lokucoca (itshaneli t.me/pDNSf).

Kukho izinto ezithile ekufuneka ziqwalaselwe: i-personalDNSfilter Asiyo-VPN yokwenyaniKe ngoko, ayifihli idilesi yakho ye-IP okanye indawo yakho. Uluhlu olumhlophe lwe-app lusebenza kuphela kwimo yokucoca efana ne-VPN, kungekhona kwimo yeengcambu, kwaye, njengakwizihluzi ezininzi ze-DNS, Ayinakuthintela iintengiso ezinikezelwa kwidomeyini efanayo nomxholo oyintloko., njengabaninzi kwiYouTube okanye kwiFacebook.

Ii-apps ezifana I-AdGuard ye-Androidezidibanisa ukuvimba kwe-DNS kunye nokucoca okunzulu (HTTP/HTTPS) kunye ne-firewall. Inguqulelo yamva nje, i-AdGuard v4.4, umzekelo, iphucula ukhetho lwe-firewall lwe Thulisa izaziso zonxibelelwano ezicaphukisayo nge-app nganye kwaye yongeza inkxaso yokucoca uqhagamshelo lwe-DoH ngexesha langempela, ukuze ikwazi ukukhawulela kwaye ihluze i-DNS efihliweyo esetyenziswa sisikhangeli ngaphandle kokonakalisa ukhuseleko.

I-RethinkDNS, yona, isebenza njenge Iproksi ye-DNS efihliweyo ithatha indawo ye-Android VPNNangona kunjalo, ikuvumela ukuba uqhubeke usebenzisa i-VPN efana ne-WireGuard okanye izixhobo ezifana ne-Orbot ngokuzicwangcisa njenge-proxy okanye ngokusebenzisa useto oluthile. Lukhetho oluhle kwabo bafuna isihluzi se-DNS esiguquguqukayo kakhulu esihambelana neenkonzo ezininzi zelifu.

Seta i-DNS yakho yasekuhlaleni: i-Pi-hole, i-AdGuard Home kunye ne-Technitium

Ukuba ufuna ulawulo oluphezulu kwaye ungaxhomekeki kumaqela esithathu, unokuhlala unakho Misela iseva ye-DNS yokucoca kwinethiwekhi yakhoNge-miniPC, i-NAS, okanye i-Raspberry Pi (xa uhlahlo lwabiwo-mali lwakho lukuvumela), ungakha inkqubo ephakathi ethintela iintengiso, ii-trackers, kunye ne-malware kuzo zonke izixhobo zakho: iifowuni ze-Android, iikhompyutha, ii-Smart TV, ii-consoles, njl.

Ezona ndlela zidumileyo kweli candelo zezi:

• I-Pi-hole: ingqalabutho yokuthintela iintengiso kwinqanaba lenethiwekhi kwiindawo zasekhaya. Isebenza njenge-DNS ephindaphindayo, ngaphambi kokuba isombulule, Isebenzisa uluhlu lweebhloko kwizigidi zeedomeyini zentengiso kunye nokulandelela.Nasiphi na isixhobo esisebenzisa iPi-hole njenge-DNS yaso sikhuselekile ngaphandle kokufaka nantoni na kuso.
• Ikhaya le-AdGuardIsisombululo esivulelekileyo esigxile ekuthinteleni iintengiso, ii-trackers, kunye nomxholo ongafanelekanga, kunye ne-interface elula yewebhu kunye neeprofayili ezifanelekileyo kusapho. Ilungele kakhulu amakhaya kunye neenethiwekhi ezincinci.
• Iseva ye-DNS yeTechnitiumIhamba inyathelo eliya phambili ngokunikela imisebenzi ephindaphindayo nenegunya Ikwakuvumela ukuba uvale iintengiso kunye nee-trackers, udale ii-domains zangaphakathi ze-LAN yakho, uxhase i-DoH, i-DoT kunye ne-DoQ, udibanise i-DNSSEC kwaye ubonise izibalo ezineenkcukacha zexesha langempela.

Kwimeko yeTechnitium, kulula kakhulu ukuyisebenzisa ngeDocker, ukuveza iiports zeDNS zakudala (53 TCP/UDP) kunye neeports zeweb console. Ukusuka apho ungenza njalo. Sebenzisa uluhlu oluhlukeneyo lokuvimba, lungisa ukuba zeziphi iinethiwekhi ezinokusebenzisa iseva, vula ukubethela kwe-DNS, kwaye uhlole izibalo zesixhobo ngasinye.

Inzuzo enkulu yokuba ne-DNS yakho kukuba Uhluza ulubeka kwindawo enyeUyilungisa i-router ukuze isebenzise iseva yakho ye-DNS yasekuhlaleni, kwaye zonke izixhobo ezikwinethiwekhi ziya kusebenzisa i-DNS yazo kuyo. Ukuba ufuna ukulungisa imithetho, ukuvula i-domain ethile, okanye ukongeza isihluzo se-imeyile crawlers, uyenza kube kanye, kwaye ichaphazela yonke indlu.

I-DNS ephindaphindayo kunye ne-authoritative: kutheni kubalulekile xa usakha isihluzi sakho

Xa kuxoxwa ngokuseta i-DNS yasekuhlaleni, kubalulekile ukuqonda umahluko phakathi iiseva eziphindaphindayo nezinegunyakuba izisombululo ezininzi zanamhlanje, ezifana neTechnitium, zidibanisa zombini ezi misebenzi.

Iseva ye-DNS ephindaphindayo isebenza njenge umlamli ofuna impendulo naphi na apho ifuneka khonaUkuba ifowuni yakho icela "i-email.example.com" kwaye ayinayo idilesi ye-IP egciniweyo, iya kubuza ezinye iiseva (ingcambu, i-TLD, iseva yedomeyini enegunya) ide ifumane impendulo echanekileyo, eyibuyiselayo ize iyigcine.

Kwelinye icala, iseva enegunya yileyo ine "inyaniso esemthethweni" malunga nendawo ethileIgcina iirekhodi zaloo domain (A, MX, CNAME, njl.njl.) kwaye iphendula imibuzo evela kwabanye abasombululi abafuna ukwazi ukuba iphi loo nkonzo.

I-Pi-hole kunye ne-AdGuard Home, kwimeko yasekhaya, ziziphatha njenge izihluzi eziphindaphindayoBafumana isicelo kwisixhobo sakho, bajonge ukuba idomeyini ikuluhlu lwabo lweebhloko, kwaye ukuba akunjalo, baqhubeka ngokuphindaphindiweyo. Ukuba kunjalo, bayayitshintsha okanye bayayikhanyela impendulo ukuthintela uqhagamshelo.

I-Technitium DNS idibanisa zombini iindima, ngoko ke inokuba iphinda-phinda kwi-Intanethi kwiindawo zangaphandle kwaye inegunya lamagama angaphakathi kwinethiwekhi yakho (umzekelo, i-nas.home, i-server.lan). Oku kukuvumela ukuba usebenzise isoftware efanayo ukulawula iinkonzo ozisingathayo ngelixa ngaxeshanye uhluza ii-trackers, iintengiso, kunye ne-malware kuyo yonke indawo yakho.

Ezinye izisombululo zokucoca i-DNS ezijolise kumashishini nakwiintsapho

Ukongeza kwiinkonzo esele zikhankanyiwe, kukho inkqubo yonke ye-ecosystem Amaqonga okucoca i-DNS ajolise ngakumbi kumashishini, amaziko emfundo, okanye kwiinethiwekhi zikawonke-wonkenangona uninzi lunokuqhelana namakhaya afuna ulawulo olucokisekileyo.

Ezinye imizekelo:

• I-TitanHQ (iWebTitan): isisombululo esisekelwe kwilifu esineendidi ezichazwe kwangaphambili, ukhuseleko oluchasene ne-malware, ukuhlanganiswa kwe-Active Directory kunye nedeshibhodi yengxelo yexesha langempela, efanelekileyo kwii-SME.
• UkucocaIbonelela ngezihluzi ezenzelwe iintsapho, izikolo, kunye nemibutho emincinci, ngenkxaso yendalo ye-DoH, i-DoT, kunye ne-DNSCrypt, kunye nokukhetha ukungafaki idatha okanye ukunciphisa ukugcinwa kwayo.
• Cloudflare Gateway: Inguqulelo ye-DNS yeshishini le-Cloudflare enemigaqo-nkqubo ephucukileyo, ukucoca i-HTTP(S), inkxaso ye-SAML/OIDC, kunye nolawulo oluphezulu olusekelwe kwindawo, isixhobo, okanye amaqela abasebenzisi.
• Umjikelezo81: Iphakheji yokhuseleko lwe-cyber kunye nokucoca i-DNS njengenxalenye yesisombululo esibanzi (i-VPN yenkampani, ii-tunnels zabucala, ukuthintela ukulahleka kwedatha, njl.njl.).
• UkhuselekoIbonelela ngeendidi ezingama-66 zokucoca, ukhuseleko lokulwa nobuqhetseba kunye nokukhusela i-malware, inkxaso ye-DoH/DoT, kunye neemodeli zelayisenisi eziguquguqukayo zasekhaya, kushishino, kwi-WiFi kawonkewonke, nakwimfundo.
• OpenDNS (Cisco)I-Cisco inikezela ngenkonzo yasimahla, yakudala yokusetyenziswa komntu, kunye neeprofayili ezifana neFamily Shield (ukuvimba abantu abadala ngokuzenzekelayo) kunye ne-Home (inokulungiselelwa ngakumbi). Kumashishini, i-Cisco inikezela nge-Umbrella, equka ezinye iileya ezininzi zokhuseleko.
• DNSFilter: iqonga elinenethiwekhi yehlabathi yeeseva, i-malware kunye nokufunyanwa kwe-phishing okwenziwa ngexesha langempela, ukuhlanganiswa kwe-Active Directory, kunye nabathengi beWindows, macOS, iOS, Android, kunye neChrome.

Nangona ezi zisombululo zinokubonakala zinzima kakhulu kwifowuni enye ye-Android, Oku kunengqiqo kakhulu ukuba ufuna ukucoca okufanayo kusetyenziswe kwiiPC, iiSmart TV, nakwezinye izixhobo. ngaphandle kokuhamba nganye nganye. Ngokumisela i-router ngenye yezi nkonzo, lonke ithrafikhi ye-DNS kwinethiwekhi yakho iya kudlula kwimigaqo-nkqubo yayo.

Iingenelo kunye nemida yokuvimba i-DNS kwi-Android

Ukuvula isihluzo se-DNS sendawo kwi-Android kunika iingenelo ezininzi ezicacileyo. Okokuqala, Inciphisa kakhulu intengiso ephazamisayo kunye nabalandeleli. kwiiwebhusayithi, ii-imeyile, kunye nee-apps ezixhomekeke kwiidomeyini zangaphandle ukuze zikhonze iintengiso kunye nee-pixels. Ikwabonelela ngomaleko owongezelelweyo wokhuseleko nxamnye neewebhusayithi ezinobungozi, i-phishing, kunye ne-malware ezivinjwa zizisombululo ezikhethekileyo ngokungagqibekanga.

Okwesibini, sisisombululo ikhanya kakhulu kwaye iyabonakalaAyifuni ukufikelela kwiingcambu, ayikhuphi ibhetri njengezinye iiVPN ezihlala zihleli, kwaye ilungiselelwe kube kanye ukuba ichaphazele yonke inkqubo. Ngokuphathelele ubumfihlo, ukusebenzisa i-DoH, i-DoT, okanye i-DoQ kuthintela nabani na olawula inethiwekhi ukuba angayiboni yonke imibuzo yakho ye-DNS kumbhalo ocacileyo.

Nangona kunjalo, ukuvimba i-DNS kunemida yako. Iintengiso kunye nee-trackers zikhonzwa zivela kwidomeyini efanayo nomxholo oyintloko (njengenxalenye yee-apps ezininzi ezivaliweyo, iinethiwekhi zentlalo, okanye iiplatifomu zevidiyo) azinakuhluzwa rhoqo ngaphandle kokuphazamisa ukusebenza. Kwezi meko, kusabalulekile ukusebenzisa ii-blockers zenqanaba lesikhangeli okanye ii-apps ezizinikeleyo ezifana ne-AdGuard ye-Android, kunye nezandiso ezichasene nokulandelela kwi-imeyile.

Inkalo yokuziphatha kufuneka ithathelwe ingqalelo: Iinkonzo ezininzi zasimahla zixhaswa yintengiso.Isigqibo sakho sokuyivimba sisemthethweni ngokupheleleyo, kodwa ukuba kukho iiwebhusayithi okanye abadali obaxabisa ngokwenene, kunokuba luncedo ukuxhasa iinguqulelo ezihlawulelwayo, ezingenazintengiso okanye ubuncinci ukongeza ezinye izinto ezingaqhelekanga kuluhlu lwakho lwebhloko.

Ngenxa yazo zonke ezi zinto zingentla, kuyacaca ukuba ukudlala ngezicwangciso ze-DNS ze-Android kunye nenethiwekhi yakho yenye yezona ndlela zisebenzayo nezilula zoku Nciphisa izixhobo zokulandelela ii-imeyile, nciphisa iintengiso kwii-apps, uphucule ukhuseleko, kwaye ufumane ulawulo lwezinto ezingenayo neziphumayo kwizixhobo zakho.Nokuba usebenzisa inkonzo yelifu okanye ugqiba ekubeni usete isihluzo sakho se-DNS sendawo esinezibalo kunye nemithetho eyenzelwe wena. Yabelana ngolu lwazi kwaye uncede abanye abasebenzisi bafunde ngalo mbandela.