* Free DNS Hosting + IPV4 rdns Management

I have domain in cloudns, with anycast dns, but location is on USA, but i want to know where will be the best place.

In times like this, I get rewarded for using money on DNS failover and live backup servers.

(Quote)

https://crt.sh/?q=24ba82659f808f6c5af1816857701bf970cf6ec5751357fea42ef8c4140a4caf

I assume there was a trivial DNS poisoning attack?

As for DNS it seems they have hardwired their own recursive resolvers in the "firewall" and hence, as long as you don't use another resolver it works fine.

* Free DNS Hosting + IPV4 rdns Management

(Quote)

must you use cloudflare dns? like mfs said, there are lots of better services out there (just search 'free dns' for a list). other services generate free non-SNI ssl like let's encrypt, for example cl

* 5 IP Addresses on Private VLAN with Reverse DNS

You are 100% right. If I change my DNS servers to 8.8.8.8/8.8.4.4 I can't browse on internet. By default my IPv4 setup is getting all automatically from Hetzner. Not using static IP and such.

So then maybe as @Falzo says, ICMP and DNS are allowed from Hetzner's network and so things are working.

(Quote)

say if @mykhen uses dhcp and therefore hetzner dns server it might be the reason for this to just work ;-)

Your rules (#6-#10) are allowing all incoming traffic and that's why things are working. If you change (any of rules 6-10) to drop instead of accept, you'll start to see problems (check if DNS works

Why DNS is working? I really don't know. You are the experts, not me.

I'm curious about one point though - so you're saying that browsing is working but you've not (based on the screenshot) allowed UDP port 53 (for DNS). So how come DNS is working?

The above will allow your machine to get answers to DNS queries from public dns servers (e.g. 8.8.8.8).

I don't know if it is a "stateful" firewall or not but as @Falzo points out, using the incoming rule with the ACK flag (actually it should be ACK+FIN+RST ie. except SYN flag) will ta