another method for home ip acquisition is to have a script[bash] upload [curl] it to your vps when it changes. no need for dns or ddns. the script can also email[msmtp] it to u. on vps a script[bash]

(Quote)

(Quote)

(Quote)

Generally, DDoS attacks in most cases are amplification ones - as you can see, DNS is the most popular method. As you can see at wiki, DNS DDoS attack method has amplification factor of up to 179, whi

Note: I prefer not use any vps provider with a GMBH trademark. I really had bad experience with their support. iFog, Hetzner, and couple more. They just don't care about the customer. No, I'm not doin

Last time we used it was like 2 years ago and we had to verify the domain (DNS), as well as the email address. Maybe they changed it.

You might have at one point, I forget, but now you just need to verify once per domain at the DNS level (you can also do it the per email way as well though).

on OpenWRT dnsmasq will do the job

We use acme.sh + DNS challenge plugin.

Adguard is not an authoritative dns server. Yes it can filter some crap but its still a recursive server. You gotta pair it with bind or unbound that xafr icann root zone and acted as authoritative to

0.0% 1 1.5 1.5 1.5 1.5 0.0 8.|-- dns.google 0.0% 1 0.8 0.8 0.8 0.8 0.0router $ sudo nft -t -a -i # setup DNATnft> add table inet natexamplenft> add

I can vouch for AdGuardHome because I use it myself. The dns-over-https/tls feature is easy to set up, so you can even use it on your employees' phones as a private dns setting. AdGuardHome also has a

The best solution has been mentioned quite a few times. Get a domain at a provider that allows DNS challenges (API or modules for webservers or tools that will do it for you, like traefik or certbot).

After applying your Pi-hole/Adguard blocking rules, requests are still (unless cached) forwarded to the upstream DNS server(s) you need to specify, i.e. OpenDNS or Quad9 so I’d question the client’s b

(Quote)

Thanks for the advice, but in this case a firewall is not an option. Just a protection DNS service to act as one more layer of security.

If done correctly a half decent Hardware Firewall can stop most and if not all attacks from being an issue, I would consider looking into this before even doing anything with DNS, for example look int

Their antivirus did not work on that situation. So, I suggested him to setup on their company router, a DNS service that can provide an additional layer of security like OpenDNS or Quad9.

domain into a public name and use split horizen DNS server