this post was submitted on 11 Nov 2026

122 points (99.2% liked)

Privacy

privacy@lemmy.ml

52,025 readers

4,840 active

639 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 7 years ago

moderators

Yayannick@lemmy.ml

ranok@sopuli.xyz

Warning: NextDNS causes major DNS leak (lemmy.dbzer0.com)

submitted 1 day ago by ScoffingLizard@lemmy.dbzer0.com to c/privacy@lemmy.ml

41 comments fedilink hide all child comments

It apprears that NextDNS has removed No Google, No Facebook, and other blocklist without notifying users. One person said the NSA blocklist was also down. The company had made no responses to complaints on the community server when I checked earlier. Crickets...

I noticed Android and Linux being unable to access the app and web interface to confirm connections, starting some time on November 4th. I was able to switch DNS providers on Android and switch back, after which NextDNS seemed to work. On Linux however, systemd confirmed it was enabled but it went right to google's webpage with no block.

If you're on NextDNS, go check your domain filters ASAP. I switched to RethinkDNS, and it's been decent so far. What is everyones preferred solution?

you are viewing a single comment's thread
view the rest of the comments

[–] ohshit604@lemmy.halstead.host 34 points 1 day ago* (last edited 1 day ago) (4 children)

What is everyones preferred solution?

hideshow 4 child comments

[–] ScoffingLizard@lemmy.dbzer0.com [S] 8 points 1 day ago (3 children)

Bet your ass I will now!

parent

hideshow 3 child comments

[–] ohshit604@lemmy.halstead.host 8 points 1 day ago*

Best practice is to host 2 PiHole instances, if 1 DNS sinkhole fails you can fallback to another one (Primary & Secondary DNS Server) that way you don’t lose internet access.

Certainly read and try to interpret the documents as best as you can, I suggest going the Docker Compose route for hosting as it’s quite straight forward and a great tool to learn if you want to selfhost other software, fiddle around with 1 DNS sinkhole before you jump head first into getting the second one up though.

parent

[–] wltr@discuss.tchncs.de 4 points 1 day ago* (last edited 1 day ago)

FYI it works on anything. I hosted it on a Raspberry Pi 1B (the very first one, it’s slow shite), and now I host it on an Orange Pi Zero. It’s not as slow, but it’s not too powerful either. Both devices are plenty for this project.

Recently, someone hosted it on a ESP32 or something. Not giving the link, simply because I don’t know which one is the genuine one. I use the project for close to a decade and it’s just works, mostly.

parent

[–] irotsoma@piefed.blahaj.zone 1 point 10 hours ago*

Also for Android devices I find Rethink in DNS only mode with locally downloaded block lists works pretty well and is pretty private. Only issue is it takes your VPN slot, though it itself can connect to a WireGuard VPN as well, but if you need to enable and disable VPNs for various circumstances or need other types of VPNs that require nonstandard protocols or software to connect to then it becomes a pain. But this when when you leave your network DNS behind, you still have some protection and it's all done locally.

parent