Tag Archives: public DNS list

How to stop DNS leakage while using a VPN

The DNS leakage problem explained

Whenever you type a domain name, your Internet browser contacts a DNS server and makes a DNS Query.

Most Virtual Private Network providers fail to mention that while your connexion is encrypted using a VPN there is a high chance that a DNS leak will occur and your ISP will still be able to see what you are doing over the internet.

The problem occurs primarily when routers and computers are set to use automatic DHCP, this can force name lookups to bypass the name server supplied by the active VPN connection and instead use the one supplied by your ISP which allows them to see the websites you visit.

DNS leak test

If you want to check if you suffer from DNS leakage, connect to your usual VPN/proxy and visit http://entropy.dns-oarc.net

After you click on Test my DNS you should ignore everything and look only on top of the page where it says DNS Resolver(s) tested.

Use a whois tool to resolve the IPs listed there and if your ISP name comes up, then you have a DNS leak.

Solving DNS leakage

The easiest way I have found to stop DNS leakage is by not using the ISP name servers and choose a free public DNS provider instead.

List of free public DNS providers:

Comodo public DNS

NS1: 8.26.56.26
NS2: 8.20.247.20

Google public DNS

NS1: 8.8.8.8
NS2: 8.8.4.4

OpenDNS public DNS

NS1: 208.67.222.222
NS2: 208.67.220.220

DNSAdvantadge public DNS

NS1: 156.154.70.1
NS2: 156.154.71.1

Instructions to change your computer DNS settings

Instructions to use Comodo public DNS

Instructions to use Google public DNS

Instructions to use OpenDNS public DNS

Instructions to use DNSAdvantadge public DNS

After you have done the change, carry out again the DNS leak test mentioned above. You should now see the DNS belonging to your new choosen provider.

Note: It looks as if Comodo Secure DNS and DNSAdvantadge are using the same network (UltraDNS).

DNS Nameserver speed test

Changing your DNS server can also increase or decrease the speed at which the websites are resolved, you can test your nameservers speed with the free utilities below:

NameBench (DNS benchmark utility)

GRC DNS Benchmark (No installation needed)