Home WI-FI DNS Settings Hijacked to use Google Servers (Fire HD 10 2019) - Fire HD 8 and HD 10 General

I did a DNS Leaktest (https://www.dnsleaktest.com) and found my home WI-FI settings on my tablet were using Google's DNS servers for some reason. Not the ones set up in the router.
Thanks to this thread: https://forum.xda-developers.com/hd8-hd10/general/root-required-manually-optimize-wifi-t3824977
Using a slightly different method than the OP in that thread, I am using the DNS server's I choose.
Cheers!

Do an extended test, you may find it can still get to 8.8.8.8, as it adds it as a 3rd DNS entry when doing the wifi advanced setup.

Is it possible to remove the Google DNS Entry completely without root?

starmagoo said:
Is it possible to remove the Google DNS Entry completely without root?
Click to expand...
Click to collapse
I haven't found a way. I used a workaround instead. I block all known major DNS addresses in my router, pretty much making sure only my assigned pi-hole is used for queries. You could also block all outgoing traffic for port 53 except for your designated DNS resolver. Only issues here are that an app that uses hardcoded ip addresses or unknown DNS addresses can slip through. Also, with DNS over HTTPS, this is going to get a lot harder to manage. Firefox already enables this in the browser, letting all sorts of ads and possible malicous content through any filters that have been setup.

Related

[Q] How to route all traffic from a single app via a proxy server?

There's a single app on my S3 which I'd like to configure so it accesses the Internet only via a certain SOCKS5 proxy server (while all other apps continue to access the Internet directly.)
I've tried ProxyDroid which allows setting a proxy on a per-app basis, but it has some serious downsides and overheads, so I'm looking for a different solution.
How can I set up, without a dedicated app such as ProxyDroid, all traffic from a specific app to go through the proxy?
From browsing through the ProxyDroid source code, I imagine one option would be to modify the iptables directly from the terminal as root. What would be the command for that? As it seems to require some uid of the app, how would I find out that uid?
Also, it would be great if the solution to this can be constructed in a way that can be used via a DroidWall custom script.
Many thanks.

Need an something to block IP from apps

I guess I'm looking for a proxy or something to block my IP. No mischief involved here, just looking for a tad more security while online.
I would like it to do my whole connection. Not just my browser or certain apps.
I'd need it for android.
If I get you right, what you need is a tool to filter certain IP adresses or hostnames. Otherwise I have no clue what you mean by
mroneeyedboh said:
I guess I'm looking for a proxy or something to block my IP.
Click to expand...
Click to collapse
Without root you could try NoRoot Firewall, that sets up a local VPN service and allows you to filter all outgoing connections. Additionally you can enable global rules that block given destinations for the whole Droid.
Moreover, SRT AppGuard can do the same (and also disabling permissions), due it logs all connections and you can easily allow or disallow targets.

[Q] Non-Root - Primary and Secondary DNS

Is it possible, without root, to set DNS according to the rules below?
What I’m trying to do is make it look to Google first (8.8.4.4) and then to the local internal DNS if it doesn't find an answer. I tried using the DNSet Pro app to do this and it doesn't work. I set primary to 8.8.4.4 and secondary to the internal server IP. My phone can’t ping anything on the internal network with the settings set this way. These settings work on my PC. The developer said that if the primary works, it will only ever look there, and never to secondary. Is this possible in android or is that just how android DNS lookups work?

Private DNS Settings

There are three settings, Off, Automatic, and Private DNS provider hostname
I assume Off means the ISP DNS will be used? But exactly are the other settings. Do they use DoT? And what server is automatic. I have searched, but all I find is it is a setting that should be used, but no explanation of each setting. Thanks.
I believe "automatic" uses Google`s DNS, but I'm not really sure why this setting is called the way it is - what is actually automated. This feature is poorly documented and there are no definitive answers.
If you want to use a private DNS, then the only logical option is to use the last option, where you specify the hostname of the private DNS.
Given the ambiguity, I would not trust the "Automatic" option.
en2tri said:
I believe "automatic" uses Google`s DNS, but I'm not really sure why this setting is called the way it is - what is actually automated. This feature is poorly documented and there are no definitive answers.
If you want to use a private DNS, then the only logical option is to use the last option, where you specify the hostname of the private DNS.
Given the ambiguity, I would not trust the "Automatic" option.
Click to expand...
Click to collapse
So using the private DNS setting, is TLS being used?
Yes. Either DNS over TLS (DoT) or DNS over HTTPS (DoH), depending on what's available.

How to route entire traffic over VPN or Proxy on Android?

Hello!
I am using a Sony Tablet with android 6.0 on it. It's fully rooted!
Now I would like to know whether it is possible to transfer the entire data of all apps but also of the system (e.g. time synchronization, system update, etc.) via a VPN and/or proxy, if the data transfer runs over the mobile network (NOT Wlan)?
What options are there?
Do I need apps and which apps are suitable for VPN and proxies (e.g. socks)
... currently I'm using a firewall (AFWall+) - it's a wonderful app that blocks everything I type into it including system apps and services, etc. Nothing gets through. I also need something that is deeply integrated into the system for VPN and proxy.
Hope you could help me with this.
best regards,
Xperia
Try to use TOR Proxy App and VPN you can create yourself or use any good app like Avast.
Use proxydroid, if your base vpn app has the oprion to use transproxy
RizkiMaulana said:
Use proxydroid, if your base vpn app has the oprion to use transproxy
Click to expand...
Click to collapse
I've used ProxyDroid on old phones but it doesn't seem to work on new tablets that I have. Any other recommendations for a global proxy app?
Maybe you can check out kernel side VPN like Wireguard. If your kernel support it, you can install it to kernel as LKM. All things must go through this interface.
utilizedwill said:
Maybe you can check out kernel side VPN like Wireguard. If your kernel support it, you can install it to kernel as LKM. All things must go through this interface.
Click to expand...
Click to collapse
I found an apk called Kitsunebi that seems to work.
To route all traffic over VPN or Proxy on Android, you can follow these general steps:
Install a VPN or Proxy app: You will need to download and install a VPN or proxy app on your device. There are many options available on the Google Play Store, such as ExpressVPN, NordVPN, CyberGhost, and Orbot for proxies.
Configure the VPN or Proxy: Once you have installed the app, you will need to configure it to route all traffic through the VPN or proxy server. This may involve entering server addresses, usernames, and passwords, depending on the app.
Enable the VPN or Proxy: Once you have configured the VPN or proxy, you will need to enable it to start routing all traffic. Some apps may allow you to enable this feature directly from the app, while others may require you to go to the device's settings menu to enable it.
Verify the VPN or Proxy is working: To make sure that all traffic is being routed through the VPN or proxy, you can visit a website like whatismyip.com to check your IP address. If the VPN or proxy is working correctly, your IP address should be that of the VPN or proxy server, rather than your actual IP address.
Note that some apps or services may not work properly when using a VPN or proxy, and you may need to adjust the app's settings or disable the VPN or proxy for certain apps. Additionally, deeply integrating a VPN or proxy into the system may require more advanced configuration, such as modifying system files or installing custom ROMs, which can be risky and should be done with caution.

Categories

Resources