Advanced search results
Better search
Select: Post content
Keywords: ControlD
Posted by:
Search forums: All forums
Results count: 173
Select: Post content
Keywords: ControlD
Posted by:
Search forums: All forums
Results count: 173
-
- 312 Posts - FernandoF...from Control-D, the IP Addresses for their DoT servers should be: Primary endpoints for Secure DNS protocols (DoH, DOT, Doq) are: freedns.controld.com 76.76.2.11 76.76.10.11 2606:1a40::11 2606:1a40:1::11 On the other hand, somewhat contrasting to what is seen above, the following screenshot... -
- 703 Posts - dave14305Already reported and fixed for the final release. https://github.com/RMerl/asuswrt-merlin.ng/commit/23bc753f62d9d7e41208a04830656d6223e3fc1b -
- 703 Posts - TreadlerThe Controld DNS DoT presets for some IPv4 servers are giving an IPv6 suggestion. -
- 24 Posts - Treadler...find any dns using the DoT/dnsmasq of the router to have very high latency. A new page load can take up to 10+ seconds easily. (Cloudflare, Controld, Quad9 all alike in this regard). Stock or Merlin firmware, no different in this regard. A stubby issue possibly? Meanwhile, using an Apple...
-
- 24 Posts - FernandoF@EmeraldDeer, according to these instructions from Control-D, the DoT servers for their free service are 76.76.2.11 and 76.76.10.11, unlike what is seen in your previous screenshot. Although I suspect that's not the case, I wonder if that may have any impact to the DNS-rebind attack messages...
-
- 24 Posts - EmeraldDeerI am not a paying customer with an account. I am using one of the free standard profiles which are not configurable. It appears the default blocked query response is NXDOMAIN from /opt/var/log/dnsmasq.log. However, the Control D documentation says that the default response is 0.0.0.0, so I... -
- 24 Posts - dave14305Depends on the Block Response configured in the Control-D portal. https://docs.controld.com/docs/blocked-query-response
-
- 703 Posts - RMerlinInsert a rule at the top of DNSFILTER_DOT table that will RETURN, i.e.: iptables -I DNSFILTER_DOT -j RETURN -
- 24 Posts - bbungeThat Asus router guide has some age to it. Lots has changed with the Asus firmware since that was written. Control D is supposed to have an add-on for Merlin firmware but I suspect it is not current. As for Quad9, I used to have issues with it when my ISP routed the Anycast address for Quad9 to... -
J- 24 Posts - Justinh...me too many failures, so I'm trying other services.) Something from 2022 says that Control D free doesn't support rebind attacks ... Interesting info from Ctrl D, saying to turn off all the options (in the context of a paid account, I believe) https://docs.controld.com/docs/asus-router-setup
-
R- 703 Posts - rungSimplest way would be to add you phone to the DNS Director's client list with a setting of "No Redirection"
-
L- 703 Posts - Linuxer...related, but is there a way to "tell" DNS Director not to block port 853? I delegate DoT/DoH blocking to an external DNS block list through ControlD but at the same time I'd like to use ControlD DoT on my Android phone (and DNS Director blocks it). In short, I'd like to have DNS Director...
-
C- 314 Posts - ctrld_logfella👋️ Heya, Control D QA here. I successfully upgraded my GT-AX6000 to 3006.102.4_alpha2 this morning - but I've not tested with the new Guest Network stuff... If you want to walk on the wild side -- you can run our dev release by running ctrld upgrade dev -vv. We just merged some changes to how...
-
- 314 Posts - maghuroThanks, now I made further tests and discovered the culprit was ControlD daemon (as I have DNS director off). I'll report to them. And regarding GN scheduling? I scheduled to turn on on the weekend, but on week days some bands still keep on and usable. -
- 314 Posts - maghuro...for guest networks. If "default" is chosen, clients don't have internet access. Manually choosing a DNS provider solves the issue. Also - controld doesn't catch guest wifi clients (maybe because guest wifi changes), but this is related to controld daemon, I think. Edit: to anyone using...
-
- 175 Posts - TreadlerYou bewdy! Fixed my Apple Mail problem. Looking at you Controld dns……..:mad: EDIT: Adguard DNS was the fix for me. EDIT 2: Ignore the above, Apple Mail app still giving me grief.
-
- 8 Posts - ZastoffControld is similar to nextdns i think. Did some posts for parental control scenario to set up cronjobs to switch dns servers in dns-director. Guess this can be used for this also if wanted/needed to switch between adguard nextdns & controld -
- 9 Posts - laracroftonlineI’m using them too they are amazing -
D- 9 Posts - danlat1415Use a DNS service like ControlD - where you can set individual video services to different settings. You can then redirect all YouTube traffic on your router through Albania so you get no adverts. You can also set other video services such as Netflix, Amazon, BBC etc to different countries (all...
-
L- 7 Posts - LinuxerNextdns can also be used with ctrld program, by ControlD. You may want to check if that works better for you: https://github.com/Control-D-Inc/ctrld/wiki/NextDNS-Mode
-
N- 35 Posts - Nehaxak...unfortunately. So while I wanted AdGuard only implemented for a Guest network (hosting mostly iOT devices/similar), and then adding ControlD DOT DNS servers for everything else, in reality everything on both the normal and VLAN guest network just went through the list of DOT servers listed...
-
N- 156 Posts - Nehaxak...unfortunately. So while I wanted AdGuard only implemented for a Guest network (hosting mostly iOT devices/similar), and then adding ControlD DOT DNS servers for everything else, in reality everything on both the normal and VLAN guest network just went through the list of DOT servers listed...
-
W- 7 Posts - walterwhite...locations you’ve recommended and ran the script. But when you run the script it states: Install path /usr/local/bin Failed to configure service on router error=checkhomedir: could not install service outside /mnt/bitdefender Surely this is an issue with the controld script? Thanks Voxel!!!!
-
- 7 Posts - VoxelIn QuickStart.txt from where scripts named rc.user will be called automatically when RBR is loaded. That is, if there is a script /mnt/ntgr/rc.user or /mnt/bitdefender/rc.user then it will be called automatically when you reload your RBR. No need to call them manually from ssh. Somewhere in... -
W- 7 Posts - walterwhite...with name: rc.user. I.e.”” I’ve logged into ssh as root all good. It appears it even accepts me making a new directory /mnt/bitdefender/controld/* as requested in controld GitHub. But I can’t move to the location or even to /mmt/bitdefender to run the script. SSH is one area I’m not an...
-
- 7 Posts - VoxelYou can try using /mnt/ntgr or /mnt/bitdefender (internal nand) instead of external usb stick. Or mount an external network disk From QuickStart.txt . . . 12. Custom script to run (for Orbi v2 owners, units w/o USB port). You can create you own script to execute it after every reboot. Script...
-
W- 7 Posts - walterwhiteHi guys Great forum! I’ve had RBR50/RBS v2 for 4 years. I’m considering flashing voxel for the first time. I’m a big ControlD fan and have it running secure dns on my Apple TV 4K. I’m keen on running this directly on the router. I can see this can be done on the v1 version by formatting an...
-
- 10 Posts - laracroftonlineI block ads by routing youtube through russia for the moment due to the war going on they suspended adsense there. For this i use Controld DNS
-
- 8 Posts - kuki68ster...add some blocklists like OISD or Hagezis and block ads in your home network... You can also, use a dns adblocker service like NextDNS, ControlD, Adguard DNS, on the smarthphone (best case for ederly users) or the router (https dns option)...You can setup both options for best results... The... -
- 43 Posts - bluzfanmr1I found ControlD to be the fastest service when I was located in an area with higher latencies. Also, when a couple of issues popped up, they were quick to respond and worked diligently to fix it. It was refreshing to get that level of personal service, even for the free services. -
-
L- 3 Posts - loveleeyoungae...issues are connected. 4. A quick google search shows that the domains for Apple Internet Private Relay are blocked by default in Pi-hole, ControlD DNS service, and has its own block switch on Blocked Services page of AGH. 5. I've tried some manual steps, and AGH has been responding faster...
-
- 43 Posts - maghuroI can relate with that. Most of people I know which use controld, says the same thing.
-
T- 43 Posts - tnpapa...than Control D. My ISP is the fastest but they don't meet my prime requirement, Encrypted DNS. I like Cloudflare but they have very limited filtering options. That left me with NextDNS or ControlD. So for now its NextDNS, even though I paid for year of ControlD service before I gave up using...
-
- 43 Posts - yegorCan you provide a traceroute to dns.controld.com, 1.1.1.1 and 8.8.8.8? When it comes to global average latency, Control D is in the top 3: https://www.dnsperf.com/#!dns-resolvers (YMMV)
-
- 43 Posts - bluzfanmr1ControlD worked really well for me when I lived in a city of 90k that was somewhat of a dns island if you will. Always had the fastest scores. Now that I'm back in a major metro area there is a lot more competition. @GT-AX6000:/tmp/mnt/asususb/syno.dnsperftest# cat dnstest.sh.sorted.log Provider...
-
- 43 Posts - yegorSmoker here, likely the one that responded to the OP. As someone else said already, DOT doesn't work on quite a few networks in many countries due to a bespoke port that it uses. If it works on your network, and you prefer "native" method, by all means use stock Merlin. The performance...
-
N- 3 Posts - nastoyka...the same issue just create file named .curlrc and write --insecure to it. place this file to /home/root/ full path must be /home/root/.curlrc and now both commands should work flawlesly sh -c "$(curl -sL https://nextdns.io/install)" and sh -c 'sh -c "$(curl -sL https://api.controld.com/dl)"'
-
E- 6 Posts - ELInFienI've been running NextDNS, but wanted to switch to ControlD for lower latency/more I just upgraded from ac68u to ax88u to have quad core CPU and 1GB of RAM to run Diversion, other entware modules, but now you're telling me not to because NextDNS/ControlD is doing a better job? :)
-
- 33 Posts - balr0g...in the US when using DOH/DOT DNS, and getting video buffering at 1440p. enabling EDNS/ECS fixed that by grabbing it locally. Am using controld+nextdns (Quad9 too, but having issues few days ago.) both obey the custom ip address for EDNS. A slight note, for nextdns free public resolvers... -
- 33 Posts - balr0gThank you! Thought i was the only one having issues with Quad9 routing DNS traffic to khazagstan. Have transferred to nextdns + controld (I'm in canada), and my latency now is even less at 30ms versus quad9 in chicago which is around 150ms.
-
- 33 Posts - kuki68sterHave you tried the controld option?
-
- 436 Posts - MushroomSoup...mappings using nvram. Since then (past 4+ hours), I haven't encountered any more internet drops. For additional context, I'm using DoT with ControlD, but I doubt it's related to the problem. My guess is the dirty upgrade might have caused some underlying issue, and the hard reset cleared it... -
R- 436 Posts - Ryu ConnorI can't confirm that DoT is fully broken, but I can confirm that after a dirty upgrade that iCloud Relay has broken. Prevent client auto DoH must now be set to No, instead of Auto. If this is a bug in DNSMasq, so be it. I'll have to either revert or wait until the next release, but if this...
-
R- 33 Posts - Ranger802004I 2nd this
-
P- 436 Posts - PalivWhat is the WAN dns set to? When I had issues with DoT dropping in the past it’s when the router couldn’t get a dns resolution after a connection hiccup.
-
- 33 Posts - kuki68sterHi there, For these cases I end up using controld, it works usually well enough for me… Check the pics… I am in Angola, i setup controld, and I was able to access the site (before I tried, and it was blocked)… In the case you want to use the script, first check that your VPN is not...
-
J- 436 Posts - jeton7608...settings to check which one of them was wrong. Dot + DNSSEC = × Dot = x DNSSEC = x DNS without DOT or DNSSEC= ✓ I also tried with ControlD and Cloudflare, even ISP DNS servers and still same result. Dot is broken for me in this version. UPDATE: DoT now works but with Opportunistic mode...
-
T- 43 Posts - tnpapaYes, I understand anycast. I feel we are drifting off topic though. I ran several DNS tests today using Gibson Research and WhatRoute apps. ControlD for me is the slowest by a wide margin. (bad routing) ATT is the fastest (6ms) The other major public DNS providers all come in about the same...
-
T- 43 Posts - tnpapaSame thing I noticed. Even though ControlD is only 25ms ping away, page loads seem slow and do stall sometimes. Cloudflare and OpenDNS are much much faster but they don't support ECS and my streaming apps and my Channels DVR system really work much better when routed to the proper CDN.
-
- 43 Posts - TreadlerFWIW, both Controld & Quad9 are 1600+ km from me. I’ve used Controld in both DoH + DoT modes, no difference here in apparent speed/stability. Quad9 ‘feels’ much quicker/snappier to me, works well. I think your issue might be Controld, rather than the encryption used?
-
- 43 Posts - dave14305DoT is easy to identify and block by network operators due to its unique port 853/tcp. DoH blends in with other HTTPS traffic. However, I would not race to install a bloated app written in Go on an embedded device (e.g. NextDNS, AGH, ControlD).
-
T- 43 Posts - tnpapaI have been testing ControlD DNS with encryption. I have been entering the server settings directly into the Merlin interface for DOT. Results have been unstable. One of the developers at ControlD says I should use DOH by installing their daemon onto the router. Their reasoning for wanting me...
-
P- 13 Posts - PlakHmm I am using DOT with nextdns and have had zero issues honestly. I know for me these settings have to be turned to NO: No issues ever since I set it up day one. Just wanted to throw my 2 cents. I even setup controld for testing using DOT and had zero issues.
-
- 11 Posts - vlordHow does redirecting through Albania help? Can you provide some more details? -
- 11 Posts - laracroftonlineHow i block ads nowadays is buying the controldns subscription and redirecting the traffic from youtube through albania.
-
- 48 Posts - balr0g...it. Thanks. Yes... Testing AGH for a couple of days with blocklist rules of 150k+ instead of 400k+. And using upstream DNS pointing to free controld/nextdns with hagezi pro, it's working surprisingly well. I hear you. researching further, i came across a shell script Adblock Lean from...
-
- 15 Posts - Tech9ControlD in particular is not needed for this. -
- 15 Posts - laracroftonlineIf you want to block ads on youtube get controldns full plan and redirect the traffic to albania they don't have adsense program so also no ads on youtube.
-
- 43 Posts - colourofsoundRight, got it. Using ps | grep ctrld I found the /jffs/controld folder, which I rm'd recursively, and rebooted. Now, netstat gives me admin@DSL-AX82U-4B38:/tmp/home/root# netstat -nlp | grep :53 tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 5167/dnsmasq tcp... -
- 43 Posts - colourofsoundnslookup assets.penny-arcade.com 76.76.2.2 Server: p2.freedns.controld.com Address: 76.76.2.2 Non-authoritative answer: Name: assets.penny-arcade.com Addresses: 2606:4700:3030::6815:40df 2606:4700:3036::ac43:9c27 172.67.156.39 104.21.64.223 nslookup...
-
C- 43 Posts - ColinTaylorYou're using a different DNS server. Try 76.76.2.2
-
- 43 Posts - colourofsoundInterestingly I don't get that result on my work PC nslookup assets.penny-arcade.com 76.76.2.1 Server: p1.freedns.controld.com Address: 76.76.2.1 Non-authoritative answer: Name: assets.penny-arcade.com Addresses: 2606:4700:3030::6815:40df 2606:4700:3036::ac43:9c27...
-
C- 43 Posts - ColinTaylor...I note that your first DoT server is blocking assets.penny-arcade.com. C:\>nslookup assets.penny-arcade.com 76.76.2.2 Server: p2.freedns.controld.com Address: 76.76.2.2 Non-authoritative answer: Name: assets.penny-arcade.com Addresses: :: 0.0.0.0 P.S. Your firmware is over...
-
- 5 Posts - dave14305Since I had no idea what the hell you were talking about (no context provided in your post), I went and found the documentation you were looking for. https://docs.controld.com/docs/custom-rules
-
H- 5 Posts - HarryMuscleI use ControlD for my DNS servers which return 0.0.0.0 for blocked domains so I've added the following to my dnsmasq configuration via the dnsmasq.conf.add file: bogus-nxdomain=0.0.0.0 however, for some reason I keep getting the following messages in my logs every few seconds: Nov 15 15:03:33...
-
- 145 Posts - Viktor JaepYou're not the first one to ask. 😉 At the moment, the script can only monitor and fix one connection at a time. I do have plans in the works to build a new script that will monitor up to 5 different VPN connections. It's still in the works/design phase. Keep your eye out! -
- 145 Posts - kuki68ster...so I can access Netflix from US and BBC from England, but would love to configure your script to maintain the two connections… I used ControlD before, but in my neck of the woods, the buffering I get is a downer…. Furthermore, I think vpnmgr was capable of doing that, but it has been years...
-
D- 18 Posts - DocUmibozuI was discussing about the adblock feature not the dns-proxy feature. Are you using control.d as your default DNS server to resolve italian addresses? Are you using the adblock feature? IMHO the problems with timvision are a clear proof of the unreliability of the resolver....
-
M- 18 Posts - MikiiUpdate: I have been using controlD for quite a while and I have to say I am pretty happy with it. I mostly use their policy based routing service to watch USA and UK stream TV from Italy and it works pretty well. With their activity log you can usually easily fix any service that is not...
-
M- 693 Posts - maxbraketorqueNo problems for me.
-
R- 693 Posts - RogerSCI've had no problems in the three weeks or so that I've been using this firmware version with DoT. Using Clouldflare, the 1.1.1.2/1.0.0.2 servers, and it's working well for me. Haven't used Control-D, but NextDNS also worked well for me.
-
S- 693 Posts - sebmack...again. Everything works fine on legacy DNS. Wondering what's causing this. I notice there's a change in the config since Control-D wrote their instructions here: https://kb.controld.com/tutorials/asus - you can't tell your router not to automatically connect anymore. Any tips or hints...
-
S- 693 Posts - sebmack...router. I upgraded, then loaded an old config file to bring it all back. I installed YazDHCP, and roughly the same time I switched to using ControlD DNS service with DNS over TLS. I've got an RT-AX88U, an RT-AC56U and two mini wifi units in an AI Mesh. I also had to upgrade the RT-AC56U...
-
S- 693 Posts - sebmackTried to upgrade. Reset my RT-AX88U to default settings without an upgrade (perhaps due to the ControlD applet I'd installed on the JFFS). Got it going and then found my AI Mesh RT-AC58U wasn't working but looked like it was so all the IoT stuff in the house was failing and I couldn't see why...
-
- 12 Posts - drinkingbirdFor standard DNS, just use DNS Filter/DNS Director and set it to "router" for all clients. Anything going out via port 53 will be intercepted invisibly and redirected to the DNS you have configured on the router's WAN page. It will *look* to the client like the response is coming from google... -
D- 12 Posts - DuxI'm blocking content on specific clients by setting DNS Director to "Router" & using Diversion filters. Some apps on these devices are hardcoded to use Google DNS. I'm trying to determine if the following is the best way to prevent these devices from using DNS to bypass my router's DNS &...
-
- 18 Posts - L&LDYes, when you go out, searching, for an entity that will 'do things for you', eventually (or in controld's case, right away, in some countries...) they will control you more than you asked for. At a price. To me, this 'hidden' cost is unacceptable. Let alone the censoring they are capable of... -
P- 18 Posts - PalivFYI ControlD is run by the same people as WindscribeVPN. Some like them some don’t.
-
A- 18 Posts - ajp2k14I have mine setup so all my own personal devices (mostly Apple) use a secure dns profile on the device, the rest go through the ctrld proxy on the router which handles the guest wifi as well. You can set the client to send different subnets to their own resolvers on controld.
-
M- 18 Posts - MikiiWell I can definitively see your point. For me it is a matter of having things working, especially a smart DNS system to watch USA and UK TV (I am in Italy). I have low technical capabilities and a little time, and managing everything on the router proved to be quite complex and time-wasting for me.
-
A- 18 Posts - ajp2k14They (ControlD) have a dns client compatible with Merlin, works reasonably well. A new beta is coming perhaps next week with more features.
-
- 18 Posts - ZastoffFor regular DNS or with DNS over TLS https://kb.controld.com/tutorials/asus For DoH (DNS over HTTPS) I made a guide Post in thread 'dnscrypt installer for asuswrt' https://www.snbforums.com/threads/dnscrypt-installer-for-asuswrt.36071/post-546493
-
- 18 Posts - L&LDThe point of having my own router is for me to have control over my network. Controld isn't that. This is not something I would ever use or recommend myself. With every feature they offer, I would question what they're getting in return (beyond the $$ cost).
-
M- 18 Posts - MikiiHas anyone tried the controld.com smartDNS commercial service? I am currently testing it and I would like to exchange ideas, impressions and configuration tips for the Merlin users. I particularly like the logging option so far. They allow you to monitor and fix connection to specific TV...
-
D- 11 Posts - DocUmibozuDon't know in other country, but here in Italy control.d has a huge amount of false positive (filters many legittimate sites).
-
- 11 Posts - jtp10181Nice, they actually have a specific Ads + Malware, or you can pick your options below. They have a great offering, going to have to keep that handy as well. Will have to benchmark their malware as my upstream and see how it stacks up against my current selections. You can even do the OISD -... -
A- 11 Posts - ajp2k14ControlD has free options you could try... https://controld.com/free-dns?
-
- 12 Posts - yegor...a sample config file to demonstrate what you can do with it. [upstream.0] bootstrap_ip = "76.76.2.11" endpoint = "https://freedns.controld.com/p1" name = "Control D - Anti-Malware" timeout = 2000 type = "doh" [upstream.1] endpoint = "100.100.100.100" name =...
-
- 16 Posts - drinkingbirdThe point is a malware creator can use a shared hosting site/domain that is not 100% malicious. It happens all the time and DOES bypass DNS filtering because the main domain is not flagged as malicious. That's what I was saying. Another example is them hosting malware on some site that is...
-
D- 16 Posts - deckerthx I'll just have to trust that it is doing something effective
-
P- 16 Posts - Paliv...anything under that domain if the site is deemed malicious. A DNS lookup doesn’t skip the main subdomain because you went to a specific page. Also, some DNS blocking will block the entire IP if known to be malicious (ControlD). This can cause false positives if the IP is shared by multiple sites.
-
- 12 Posts - Tech9...disable DNS Director, use DNS Server 1 to your RPi, DNS Server 2 your router's IP and set in WAN the same RPi address as DNS Server 1 and ControlD as DNS Server 2. You may see some queries coming from the router's IP, but it will fail back to Control D after 2 steps - once in LAN and once in...
-
M- 12 Posts - mnozahyI figured it out In the DHCP server, I used the router IP (192.168.1.1) Then I added the following commands in dnsmasq.conf.add no-resolv strict-order # NOTE: List servers in reverse order below (bottom is highest priority) server=192.168.1.160 # PIHOLE server=76.76.2.32 # ControlD
-
M- 12 Posts - mnozahy...on Merlin . Here's my setup: AC68U as the main router. Raspberry Pi with a static IP address (192.168.1.160). My objective is to use ControlD DNS as a backup to my Raspberry Pi, in case the micro SD card fails. However, I'm encountering difficulties with the switching functionality...
-
- 40 Posts - yegorHmmm, interesting. Can you email me your config file to yegor@controld.com, what physical device you ran this on, and approx. query volume you were sending? Edit: I think we may have identified an issue. When default gateway changes, and changes back to the original one, the issue occurs. It...
-
H- 3 Posts - HarryMuscleYup, it's on ControlD's end. Since they filter stuff (like ads, etc) it can mess with DNSSec apparently ... I'm guessing a subdomain of the domains that weren't resolving was blocked (probably cause it's used to display ads) and that caused the main domains to not pass the DNSSec signature check.
-
- 3 Posts - bbungeDNSSEC is working well with well established upstream resolver. Most likely the ControlD resolver. Your best bet is to use something other than one with gimmicks.
-
H- 3 Posts - HarryMuscleI'm setting up my RT-AX86U router to use ControlD DNS servers. Everything is working great, but I noticed two domains that wouldn't resolve (theweathernetwork.com and aqueon.com) even though I'm not filtering anything. After a bit of troubleshooting, it turns out this is somehow because of...
-
- 5 Posts - kuki68sterDid the trick, after disabling dns director i can acess the internet with nextdns.... Is there a configuration, with the dns director activated, that i can set up my router? Thanks for the help
