HaGeZi DNS: Free, Non-Commercial EU Public DNS Servers

[hagezi]

I am excited to share the HaGeZi DNS project, offering free, non-commercial EU public DNS resolvers designed to enhance your online privacy and security at no cost.

I have chosen a balanced blocking level approach for most users of HaGeZi DNS, ensuring strong privacy while minimizing unnecessary restrictions. To complement this, I rely on the widely used dnsbunker.org DNS servers from xRuffKez @DNSBunker, which offer a more aggressive blocking level for enhanced protection.

This combination allows users to benefit from a well-rounded DNS filtering experience: the HaGeZi DNS provides effective privacy with minimal interference, while dnsbunker.org adds an aggressive layer of blocking for those who need or prefer stricter filtering. This layered setup helps cover a broad spectrum of security and usability preferences.

Details: https://github.com/hagezi/dns-servers

A special thank you to xRuffKez @DNSBunker (dnsbunker.org) for his invaluable support with the block lists and expert help setting up the DNS servers. Thank you, Patrick!

Happy Blocking,
Gerd

[DantesNoWar]

Hi, what's the difference with Quad9?
And where will be the upcoming servers be housed?
I see only Germany and Finland for now.

[hagezi]

I don't know if the question is really serious, but I only operate private DNS servers that I make publicly available for free.

[DantesNoWar]

I'm dead serious, I'm new to the project and just want more info.
DNS located in foreign countries perform bad, that's why I asked if there will be more servers.
Quad9 offers a capillar DNS server distribution around Europe, its performance and stability are reported on DNS-perf, and it's the most similar non-profit DNS to your project. That's why I asked for differences.

[Marko-98]

@DantesNoWar Yeah... no. Servers cost money, Gerd does this voluntarily. If you need a service with better server coverage, take a look at AdGuard Home, ControlD or NextDNS.

[DantesNoWar]

Ok, I get it. For now I'll stick with mine. But it's great that more independent DNS services are coming to life.
Thanks for the info @Marko-98

[vdias]

What domains are the ones for firefox and google? I'm using a private adguard home installation and liked to apply same settings...

Special domain handling:
Blocked Mozilla Firefox canary domain, answered with NXDOMAIN - prevents Mozilla Firefox from automatically switching to DNS-over-HTTPS in its settings.
Blocked Google Chrome preflight mode for prefetching, answered with NXDOMAIN - applies DNS filtering to resources preloaded via Chrome’s private prefetch proxy.
Allowed access to Apple iCloud Private Relay - supports macOS and iOS Mail Privacy Protection and Safari Tracking Prevention.

[DNSBunker]

@vdias

||use-application-dns.net^$dnsrewrite=NXDOMAIN;;
||dns-tunnel-check.googlezip.net^$dnsrewrite=NXDOMAIN;;

[vdias]

thanks!

But it is quite weird... i have no request on my side to both domains... and i'm a firefox and edge user on multiple devices...

[hagezi]

By request, we now also offer a DNS server that blocks malware and similar threats without blocking ads and tracking.

Location	Protocols	Endpoint/URL	Apple Config	Recommended for
Germany, Nuremberg	DoH/DoH3	https://ctif.hagezi.org/dns-query		AT, BA, BE, BG, CH, CZ, DE, DK, ES, FR, GB, GR, HR, HU, IE, IT, LU, MD, MK, MT, NL, PL, PT, RO, RS, SI, SK, TR, UA
	DoT/QUIC	ctif.hagezi.org
	Do53	162.55.58.40 2a01:4f8:1c19:6c19::1

Blocklist	Link	Blocks
HaGeZi TIF (Threat Intelligence Feeds)	Link	Phishing, Malware, Scam, Fake, Cryptojacking
xRuffKez CTI (Cyber Threat Intelligence)	Link	Phishing, Malware, other dangerous domains (live-updated)

Expected IP addresses:

• 162.55.58.40 - 2a01:4f8:1c19:6c19::1 (ptr: ctif.hagezi.org) - Hetzner Online GmbH - Nürnberg, Bavaria, DE

The following Unbound instance is used as a fallback - no additional filtering:

• 159.69.155.94 - 2a01:4f8:1c1c:d363::1 (ptr: wurzn.hagezi.org) - Hetzner Online GmbH - Nürnberg, Bavaria, DE