mirror of https://framagit.org/kyodev/kyopages.git
137 lines
3.2 KiB
Markdown
137 lines
3.2 KiB
Markdown
|
# DNS Publics
|
||
|
|
|
||
|
|
## OpenNic
|
||
|
|
|
||
|
|
OpenNic est un groupe de volontaires proposant:
|
||
|
|
|
||
|
|
* des domaines de premier niveau (TLD) alternatifs, en dehors du monopole de l'ICANN (.dyn, .geek, .gopher, .indy, .libre, .oss, .parody, .pirate),
|
||
|
|
* une gouvernance démocratique
|
||
|
|
* un réseau de serveurs DNS pour ces domaines alternatifs interconnecté avec le réseau ICANN,
|
||
|
|
* des serveurs DNS non censurants, non indiscrets (pas de logs), parfois avec whitelist et cryptdns
|
||
|
|
|
||
|
|
Liens:
|
||
|
|
|
||
|
|
* [OpenNic Project](https://www.opennicproject.org/)
|
||
|
|
* [DNS sur android rooté](https://play.google.com/store/apps/details?id=uk.co.mytechie.setDNS)
|
||
|
|
* [wiki openNic](http://wiki.opennic.org/doku.php)
|
||
|
|
* moteurs de recherche:
|
||
|
|
* [grep.geek](http://grep.geek/)
|
||
|
|
* [bithunt.bit](http://bithunt.bit/)
|
||
|
|
```shell
|
||
|
|
# fr
|
||
|
|
# ns10.fr.dns.opennic.glue
|
||
|
|
nameserver 87.98.175.85
|
||
|
|
#2001:41d0:2:73d4::100
|
||
|
|
|
||
|
|
# ns12.fr.dns.opennic.glue
|
||
|
|
nameserver 5.135.183.146
|
||
|
|
|
||
|
|
# ns2.als.fr.dns.opennic.glue
|
||
|
|
nameserver 51.255.48.78
|
||
|
|
|
||
|
|
# ns1.aqu.fr.dns.opennic.glue
|
||
|
|
nameserver 88.175.188.50
|
||
|
|
|
||
|
|
# ns2.nor.fr.dns.opennic.glue1
|
||
|
|
nameserver 51.80.147.153
|
||
|
|
# nameserver 2001:41d0:52:f00::413
|
||
|
|
|
||
|
|
# ns5.nor.fr.dns.opennic.glue
|
||
|
|
nameserver 188.165.200.156
|
||
|
|
|
||
|
|
# ns6.nor.fr.dns.opennic.glue
|
||
|
|
nameserver 37.187.16.17
|
||
|
|
# nameserver 2001:41d0:a:1011::1
|
||
|
|
|
||
|
|
# ns7.nor.fr.dns.opennic.glue
|
||
|
|
nameserver 178.32.196.201
|
||
|
|
# nameserver 2a06:e881:1503:111::1
|
||
|
|
|
||
|
|
# ns13.fr.dns.opennic.glue
|
||
|
|
nameserver 2001:41d0:8:be92::1
|
||
|
|
|
||
|
|
# de
|
||
|
|
nameserver 5.9.49.12
|
||
|
|
# nl
|
||
|
|
nameserver 52.174.55.168
|
||
|
|
#gb
|
||
|
|
nameserver 85.159.213.210
|
||
|
|
#it
|
||
|
|
nameserver 193.183.98.154
|
||
|
|
```
|
||
|
|
|
||
|
|
[liste des serveurs](https://servers.opennicproject.org/) avec leurs caractéristiques (cryptDns, voir CA, DE)
|
||
|
|
|
||
|
|
### vérifier que le trafic Dns n'est pas intercepté par le Fai:
|
||
|
|
|
||
|
|
#### réponse normale
|
||
|
|
|
||
|
|
```shell
|
||
|
|
dig SOA . @106.186.17.181 -p 5353 +short
|
||
|
|
```
|
||
|
|
```text
|
||
|
|
ns0.opennic.glue. hostmaster.opennic.glue. 2017031906 1800 900 604800 3600
|
||
|
|
```
|
||
|
|
**serveur OpenNic visible**, pas de traces apparentes de Dns hijacking
|
||
|
|
|
||
|
|
#### problème
|
||
|
|
|
||
|
|
```shell
|
||
|
|
dig SOA . @106.186.17.181 +short
|
||
|
|
```
|
||
|
|
```text
|
||
|
|
a.root-servers.net. nstld.verisign-grs.com. 2015080300 1800 900 604800 86400
|
||
|
|
```
|
||
|
|
**/!\** a.root-servers.net n'est **pas un serveur OpenNic**
|
||
|
|
|
||
|
|
tester autre port des serveurs OpenNic
|
||
|
|
|
||
|
|
```shell
|
||
|
|
dig SOA . @106.186.17.181 -p 5353 +short
|
||
|
|
```
|
||
|
|
```text
|
||
|
|
ns0.opennic.glue. hostmaster.opennic.glue. 2017031906 1800 900 604800 3600
|
||
|
|
```
|
||
|
|
bonne réponse, utiliser ce **port alternatif**
|
||
|
|
|
||
|
|
|
||
|
|
## FDN
|
||
|
|
|
||
|
|
Associatif, non censuré, non indiscret https://www.fdn.fr/actions/dns/
|
||
|
|
```shell
|
||
|
|
#ns0.fdn.fr
|
||
|
|
nameserver 80.67.169.12
|
||
|
|
#ns1.fdn.fr
|
||
|
|
nameserver 80.67.169.40
|
||
|
|
# IPv6
|
||
|
|
# nameserver 2001:910:800::12
|
||
|
|
# nameserver 2001:910:800::40
|
||
|
|
```
|
||
|
|
|
||
|
|
## Google DNS
|
||
|
|
|
||
|
|
pour mémoire
|
||
|
|
```shell
|
||
|
|
8.8.8.8, 8.8.4.4
|
||
|
|
2001:4860:4860::8888, 2001:4860:4860::8844
|
||
|
|
```
|
||
|
|
|
||
|
|
## DNS FAI
|
||
|
|
|
||
|
|
notes pour mémoire historique, ces serveurs peuvent être censeurs, menteurs et pas toujours d'un bonne fiabilité
|
||
|
|
```
|
||
|
|
aliceBox 212.27.40.240 212.27.40.241 (vérifié)
|
||
|
|
BT 194.158.122.10 194.158.122.15 (vérifié)
|
||
|
|
free 212.27.40.240 212.27.40.241 (vérifié)
|
||
|
|
nerim 195.5.209.150 194.79.128.150 (vérifié)
|
||
|
|
orange 80.10.246.2 80.10.246.129 (vérifié)
|
||
|
|
ovh 91.121.161.184 188.165.197.144 (vérifié)
|
||
|
|
sfr 109.0.66.10 109.0.66.20 (?)
|
||
|
|
numericable (?)
|
||
|
|
```
|
||
|
|
|
||
|
|
## a voir
|
||
|
|
|
||
|
|
* /etc/resolv.conf
|
||
|
|
* man resolv.conf
|