Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WIP] Various fixes to dns kb from Crowdin #185

Merged
merged 3 commits into from
Feb 16, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docs/adguard-home/faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Suppose that you want AdGuard Home to block `somebadsite.com` but for some reaso

Most likely, you haven’t configured your device to use AdGuard Home as the default DNS server. To check if you’re using AdGuard Home as your default DNS server:

1. On Windows, open a Terminal window (*Start* → *Run* → `cmd.exe`). On other systems, open your Terminal application.
1. On Windows, open Command Line Interface (*Start* → *Run* → `cmd.exe`). On other systems, open your Terminal application.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Isn't cmd.exe called Command Prompt rather than Command Line Interface (which is a generic term also applicable to bash, PowerShell, etc)?
Thanks

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for noticing. We'll fix it.


1. Execute `nslookup example.org`. It will print something like this:

Expand Down Expand Up @@ -147,7 +147,7 @@ There is currently no way to set these parameters from the UI, so you’ll need

1. In the *DNS server configuration* section, select the *Custom IP* radio button in the *Blocking mode* selector and enter the IPv4 and IPv6 addresses of the server.

1. Click *Save.*
1. Click *Save*.

## How do I change dashboard interface’s address? {#webaddr}

Expand Down
18 changes: 9 additions & 9 deletions docs/adguard-home/getting-started.md
Original file line number Diff line number Diff line change
Expand Up @@ -168,23 +168,23 @@ This setup will automatically cover all devices connected to your home router, a

1. Open *Control Panel* from the Start menu or Windows search.

1. Go to *Network and Internet* and then to *Network and Sharing Center.*
1. Go to *Network and Internet* and then to *Network and Sharing Center*.

1. On the left side of the screen, find the *Change adapter settings* button and click it.

1. Select your active connection, right-click it and choose *Properties.*
1. Select your active connection, right-click it and choose *Properties*.

1. Find *Internet Protocol Version 4 (TCP/IPv4)* (or, for IPv6, *Internet Protocol Version 6 (TCP/IPv6)*) in the list, select it, and then click *Properties* again.

1. Choose *Use the following DNS server addresses* and enter your AdGuard Home server addresses.

### macOS

1. Click the Apple icon and go to *System Preferences.*
1. Click the Apple icon and go to *System Preferences*.

1. Click *Network.*
1. Click *Network*.

1. Select the first connection in your list and click *Advanced.*
1. Select the first connection in your list and click *Advanced*.

1. Select the DNS tab and enter your AdGuard Home server addresses.

Expand All @@ -196,19 +196,19 @@ Instructions for Android devices may differ depending on the OS version and the

:::

1. From the Android menu home screen, tap *Settings.*
1. From the Android menu home screen, tap *Settings*.

1. Tap *Wi-Fi* on the menu. The screen with all of the available networks will be displayed (it is impossible to set custom DNS for mobile connection).

1. Long press the network you’re connected to and tap *Modify Network.*
1. Long press the network you’re connected to and tap *Modify Network*.

1. On some devices, you may need to check the box for *Advanced* to see more settings. To adjust your Android DNS settings, you will need to change the IP settings from *DHCP* to *Static.*
1. On some devices, you may need to check the box for *Advanced* to see more settings. To adjust your Android DNS settings, you will need to change the IP settings from *DHCP* to *Static*.

1. Change set DNS 1 and DNS 2 values to your AdGuard Home server addresses.

### iOS

1. From the home screen, tap *Settings.*
1. From the home screen, tap *Settings*.

1. Select *Wi-Fi* from the left menu (it is impossible to configure DNS for mobile networks).

Expand Down
4 changes: 2 additions & 2 deletions docs/adguard-home/running-securely.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Setting up AdGuard Home securely
sidebar_position: 4
---

This page contains a list of additional recommendations to help ensure the security of your AdGuard home.
This page contains a list of additional recommendations to help ensure the security of your AdGuard Home.

## Choosing server addresses

Expand All @@ -17,7 +17,7 @@ The UI currently only allows you to select one interface, but you can actually s

If you intend to run AdGuard Home on **your computer only,** select the loopback device (also known as “localhost”). It is usually called `localhost`, `lo`, or something similar and has the address `127.0.0.1`.

If you plan to run AdGuard Home on a **router within a small isolated network,** select the locally-served interface. The names can vary, but they usually contain the words `wlan` or `wlp` and have an address starting with `192.168.`. You should probably also add the loopback address as well, if you want software on the router itself to use AdGuard Home too.
If you plan to run AdGuard Home on a **router within a small isolated network**, select the locally-served interface. The names can vary, but they usually contain the words `wlan` or `wlp` and have an address starting with `192.168.`. You should probably also add the loopback address as well, if you want software on the router itself to use AdGuard Home too.

If you intend to run AdGuard Home on a **publicly accessible server,** you’ll probably want to select the *All interfaces* option. Note that this may expose your server to DDoS attacks, so please read the sections on access settings and rate limiting below.

Expand Down
2 changes: 1 addition & 1 deletion docs/general/dns-filtering-syntax.md
Original file line number Diff line number Diff line change
Expand Up @@ -316,7 +316,7 @@ will result in a response with two `A` records.

Currently supported RR types with examples:

- `||4.3.2.1.in-addr.arpa^$dnsrewrite=NOERROR;PTR;example.net.` adds a `PTR`record for reverse DNS. Reverse DNS requests for `1.2.3.4` to the DNS server will result in `example.net`.
- `||4.3.2.1.in-addr.arpa^$dnsrewrite=NOERROR;PTR;example.net.` adds a `PTR` record for reverse DNS. Reverse DNS requests for `1.2.3.4` to the DNS server will result in `example.net`.

**NOTE:** the IP MUST be in reverse order. See [RFC 1035][rfc1035].

Expand Down
8 changes: 4 additions & 4 deletions docs/general/dns-filtering.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,19 +33,19 @@ DNS filtering can be broken down into two separate functions: to encrypt and rer

### DNS servers

There are thousands of DNS servers to choose from, and they are all unique in their properties and purposes. Most simply return the IP address of the requested domain, but some have additional functions: they block ad, tracking, adult domains and so on. Nowadays all major DNS servers employ one or more reliable encryption protocols: DNS-over-HTTPS, DNS-over-TLS. AdGuard also provides a [DNS service](https://adguard-dns.io/), and it was the world's first to offer the very new and promising [DNS-over-QUIC](https://adguard.com/blog/dns-over-quic.html) encryption protocol. AdGuard has different servers for different goals. This diagram illustrates how AdGuard blocking servers work:
There are thousands of DNS servers to choose from, and they are all unique in their properties and purposes. Most simply return the IP address of the requested domain, but some have additional functions: they block ad, tracking, adult domains and so on. Nowadays all major DNS servers employ one or more reliable encryption protocols: DNS-over-HTTPS, DNS-over-TLS. AdGuard also provides a [DNS service](https://adguard-dns.io/), and it was the world's first to offer the brand new and very promising [DNS-over-QUIC](https://adguard.com/blog/dns-over-quic.html) encryption protocol. AdGuard has different servers for different goals. This diagram illustrates how AdGuard blocking servers work:

![AdGuard DNS](https://cdn.adtidy.org/public/Adguard/kb/DNS_filtering/adguard_dns_en.jpg)

Other DNS providers may work differently, so learn more about them before committing to this or that DNS server. You can find the list of some of the most popular DNS providers in [this article](dns-providers.md). All AdGuard apps that support DNS functionality also have a list of DNS servers to choose from, or even allow to select any custom DNS server that you'd like.

### Local DNS blocklists

But by relying on DNS servers only to filter your DNS traffic you lose all flexibility. If the selected server blocks a domain, you can't access it. With AdGuard, you don't even need to configure any specific DNS server to filter DNS traffic. All AdGuard products let you employ DNS blocklists, be it simple hosts files or lists that use [more advanced syntax](dns-filtering-syntax.md). They work similarly to regular blocklists: when a DNS request matches one of the rules in the active filter list, it gets blocked. To be more precise, it gets rerouted to a "blackhole".
But by relying on DNS servers only to filter your DNS traffic you lose all flexibility. If the selected server blocks a domain, you can't access it. With AdGuard, you don't even need to configure any specific DNS server to filter DNS traffic. All AdGuard products let you employ DNS blocklists, be it simple hosts files or lists that use [more advanced syntax](dns-filtering-syntax.md). They work similarly to regular blocklists: when a DNS request matches one of the rules in the active filter list, it gets blocked. To be more precise, the DNS server gives a non-routable IP address for such a request.

:::tip

In AdGuard for iOS, first you have to enable *Advanced mode* in settings in order to get access to DNS blocking.
In AdGuard for iOS, first you have to enable *Advanced mode* in *Settings* in order to get access to DNS blocking.

:::

Expand All @@ -67,7 +67,7 @@ First of all, we have to mention that with AdGuard you don't have to choose. You

**Cons of DNS filtering:**

1. DNS filtering is "rough", meaning that it won't remove whitespaces that are left behind a blocked ad, or apply any sorts of cosmetic filtering. Many of the more complicated ads can't be blocked on DNS-level (or rather, they can, but only by blocking the entire domains which are being used for other purposes).
1. DNS filtering is "coarse", which means it doesn't remove whitespace left behind a blocked ad or apply any sorts of cosmetic filtering. Many of the more complicated ads can't be blocked on DNS-level (or rather, they can, but only by blocking the entire domains which are being used for other purposes).

![Example of difference](https://cdn.adtidy.org/public/Adguard/kb/DNS_filtering/dns_diff.jpg)
*An example of the difference between DNS filtering and network filtering*
Expand Down
10 changes: 5 additions & 5 deletions docs/general/dns-providers.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ These servers provide the Default features + Blocking adult websites + Safe sear

| Protocol | Address | |
|----------------|----------------------------------------------------|----------------|
| DNS, IPv4 | `94.140.14.15` and `94.140.15.16` | [Add to AdGuard](adguard:add_dns_server?address=94.140.14.15&name=AdGuard%20DNS), [Add to AdGuard VPN](adguardvpn:add_dns_server?address=94.140.14.15&name=AdGuard%20DNS) |
| DNS, IPv4 | `94.140.14.15` and `94.140.15.16` | [Add to AdGuard](adguard:add_dns_server?address=94.140.14.15&name=AdGuard%20DNS), [Add to AdGuard VPN](adguardvpn:add_dns_server?address=94.140.14.15&name=AdGuard%20DNS) |
| DNS, IPv6 | `2a10:50c0::bad1:ff` and `2a10:50c0::bad2:ff` | [Add to AdGuard](adguard:add_dns_server?address=2a10:50c0::bad1:ff&name=AdGuard%20DNS), [Add to AdGuard VPN](adguardvpn:add_dns_server?address=2a10:50c0::bad1:ff&name=AdGuard%20DNS) |
| DNS-over-HTTPS | `https://family.adguard-dns.com/dns-query` | [Add to AdGuard](adguard:add_dns_server?address=https://family.adguard-dns.com/dns-query&name=AdGuard%20DNS), [Add to AdGuard VPN](adguardvpn:add_dns_server?address=https://family.adguard-dns.com/dns-query&name=AdGuard%20DNS)
| DNS-over-TLS | `tls://family.adguard-dns.com` | [Add to AdGuard](adguard:add_dns_server?address=tls://family.adguard-dns.com&name=AdGuard%20DNS), [Add to AdGuard VPN](adguardvpn:add_dns_server?address=tls://family.adguard-dns.com&name=AdGuard%20DNS) |
Expand Down Expand Up @@ -461,7 +461,7 @@ These servers provide reliable and fast DNS lookups without blocking any specifi
| DNS, IPv4 | `156.154.70.1` and `156.154.71.1` | [Add to AdGuard](adguard:add_dns_server?address=156.154.70.1&name=), [Add to AdGuard VPN](adguardvpn:add_dns_server?address=156.154.70.1&name=) |
| DNS, IPv6 | `2610:a1:1018::1` and `2610:a1:1019::1` | [Add to AdGuard](adguard:add_dns_server?address=2610:a1:1018::1&name=), [Add to AdGuard VPN](adguardvpn:add_dns_server?address=2610:a1:1018::1&name=) |

#### Reliability & Performance 2*
#### Reliability & Performance 2

These servers provide reliable and fast DNS lookups without blocking any specific categories and also prevent redirecting NXDomain (non-existent domain) responses to landing pages.

Expand Down Expand Up @@ -517,7 +517,7 @@ These servers provide blocking unwanted and time-wasting content and also includ

### OpenBLD.net DNS

[OpenBLD.net DNS](https://openbld.net/) - Anycast/GeoDNS DNS-over-HTTPS, DNS-over-TLS resolvers with blocking: advertising, tracking, adware, malware, malicious activities and phishing companies, blocks ~1M domains. Can be has 24h/48h logs for DDoS/Flood mitigation attack.
[OpenBLD.net DNS](https://openbld.net/) - Anycast/GeoDNS DNS-over-HTTPS, DNS-over-TLS resolvers with blocking: advertising, tracking, adware, malware, malicious activities and phishing companies, blocks ~1M domains. Has 24h/48h logs for DDoS/Flood attack mitigation.

#### Adaptive Filtering (ADA)

Expand Down Expand Up @@ -761,7 +761,7 @@ In "Family" mode, Protected + blocking adult content.

### 114DNS

**114DNS** is a professional and high-reliability DNS service.
[114DNS](https://www.114dns.com) is a professional and high-reliability DNS service.

#### Normal

Expand Down Expand Up @@ -928,7 +928,7 @@ We won't be able to proper monitor their availability. **Use them at your own ri

[Arapurayil](https://dns.arapurayil.com) is a personal DNS service hosted in Mumbai, India.

Non-logging | Filters ads, trackers, phishing,etc | DNSSEC | QNAME Minimization | No EDNS Client Subnet.
Non-logging | Filters ads, trackers, phishing, etc. | DNSSEC | QNAME Minimization | No EDNS Client Subnet.

| Protocol | Address | |
|----------------|------------------------------------------------------------------|------------------|
Expand Down
12 changes: 6 additions & 6 deletions docs/intro.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,15 +16,15 @@ The default DNS server is usually provided by your ISP. This means that your ISP

:::

![Your device always uses some DNS server to obtain IP addresses of the domain name apps want to navigate to](https://cdn.adtidy.org/content/blog/articles/dns-cbs/scr1.png)
![Your device always uses a DNS server to obtain the IP addresses of the domains that are accessed by various apps, services, etc.](https://cdn.adtidy.org/content/blog/articles/dns-cbs/scr1.png)

There are also DNS servers that can block certain websites at DNS-level. How do they work? When your device sends a "bad" request, be it an ad or a tracker, a DNS server prevents the connection by responding with a non-routable IP address for a blocked domain.

## Why use DNS for content blocking

Absolutely everything is connected to the Internet these days, from TV to smart light bulbs, from mobile devices to smart auto. And where the Internet is, there are ads and trackers. In this case, a browser-based ad blocker has proven insufficient. To get a better protection, use DNS in combination with VPN and ad blocker.
Absolutely everything is connected to the Internet these days, from TV to smart light bulbs, from mobile devices to smart car. And where the Internet is, there are ads and trackers. In this case, a browser-based ad blocker has proven insufficient. To get a better protection, use DNS in combination with VPN and ad blocker.

Using DNS for content blocking has some advantages as well as obvious flaws. On the one hand, DNS has no blind spots since it observes all devices and not just the browsers. But, on the other hand, DNS blocking alone cannot provide cosmetic filtering.
Using DNS for content blocking has some advantages as well as obvious flaws. On the one hand, DNS is in the loop for queries from all devices and their apps. But, on the other hand, DNS blocking alone cannot provide cosmetic filtering.

## What is AdGuard DNS?

Expand All @@ -34,10 +34,10 @@ AdGuard DNS is one of the most privacy-oriented DNS services on the market. It s

About 75% of AdGuard DNS traffic is encrypted. This is actually what differentiates content-blocking DNS servers from others. If you take a look at CloudFlare or Quad9 stats, you’ll see that encrypted DNS is just a small share of all queries.

AdGuard DNS exists in two main forms: [public AdGuard DNS](public-dns/overview) and [private AdGuard DNS](private-dns/overview). None of these services require the installation of apps. They are easy to set up and use, and provide users with the minimum features necessary to block ads, trackers, malicious websites, and adult content (if required). There are no restrictions on what devices they can be used with.
AdGuard DNS exists in two main forms: [Public AdGuard DNS](public-dns/overview) and [Private AdGuard DNS](private-dns/overview). None of these services require the installation of apps. They are easy to set up and use, and provide users with the minimum features necessary to block ads, trackers, malicious websites, and adult content (if required). There are no restrictions on what devices they can be used with.

Despite so many similarities, private AdGuard DNS and public AdGuard DNS are two different services. Their main difference is that you can customize private AdGuard DNS, while public AdGuard DNS cannot.
Despite so many similarities, private AdGuard DNS and public AdGuard DNS are two different products. Their main difference is that you can customize Private AdGuard DNS, while Public AdGuard DNS cannot.

## DNS filtering module in AdGuard products

All major AdGuard products, including AdGuard VPN, have a **DNS filtering module** where you can select a DNS server by a provider you trust. Of course, AdGuard DNS Default, AdGuard DNS Non-filtering and AdGuard DNS Family Protection are on the list. Also, AdGuard apps allow users to [easily configure and use AdGuard DNS](https://adguard-dns.io/public-dns.html) — public or private.
All major AdGuard products, including AdGuard VPN, have a **DNS filtering module** where you can select a DNS server by a provider you trust. Of course, AdGuard DNS Default, AdGuard DNS Non-filtering and AdGuard DNS Family Protection are on the list. Also, AdGuard apps allow users to [easily configure and use AdGuard DNS](https://adguard-dns.io/public-dns.html) — Public or Private.
2 changes: 1 addition & 1 deletion docs/miscellaneous/take-screenshot.md
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ On some notebooks you have to hold *Fn* and then press *PrtScn* instead.

*Please note: PrtScn (Print Screen) button can be differently abbreviated on various keyboards — PrntScrn, PrtScn, PrtScr or PrtSc.*

Windows captures the entire screen and copies it to the (invisible) clipboard.
Windows captures the entire screen and copies it to the clipboard.

To take a screenshot of an active window, use the following combination:

Expand Down
2 changes: 1 addition & 1 deletion docs/private-dns/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -130,7 +130,7 @@ The *Blocklists* feature allows you to specify which domains you want to block a

### Security settings

Even if you're aware of all the tricks online scammers use, there's always a chance you'll accidentally click a malicious link. To protect yourself from such accidents, go to the *Security settings* section and check the boxes next to the options listed there.
Even if you're aware of all the tricks online scammers use, there's always a risk you'll accidentally click a malicious link. To protect yourself from such accidents, go to the *Security settings* section and check the boxes next to the options listed there.

The *Block malicious, phishing, and scam domains* feature will block domains found in the dedicated database. And the *Block newly registered domains* will block all domains registered less than 30 days ago, which are often considered risky for your online privacy.

Expand Down
Loading
Loading