r/ControlD

DNSSEC fails & bad resolution

DNSSEC fails & bad resolution

I noticed my home Internet connection was being a bit flaky and chalked it down to a ControlD block list having a false positive or two.

I turned off all the block lists and it made no difference, I disabled the profiles (all of them) and it made not difference.

I then switched my router and broadband to 1.1.1.1 and if you ignore the deluge of ads, everything started to work.

I did a quick check on https://dnscheck.tools and it came back per the screenshot, with DNSSEC failure.

Has anyone else experienced either the symptoms or the (possible) DNSSEC cause?

u/Beanz7890 — 12 days ago

Control D DoT: DNS has Datacamp as ISP on https://www.dnsleaktest.com

UPDATE: apparently they use Datacamp servers! I'll leave this post up for future references.

I'm using Opnsense's Unbound DNS to get DNS Over TLS with p2.freedns.controld.com (76.76.2.11 and 76.76.10.11).

When i use dnsleaktest.com, it sometimes one server has Control D as an ISP and it ALWAYS shows one ISP as Datacamp.

Datacamp mostly used by Proton VPN. I am testing without a vpn on.

Is my DNS data being redirected to a malicious server?

edit: when i disable Unbound DNS, my ISP's DNS server is used 100% of the time.

u/XxTriviumxX — 13 days ago

I am trying to set up control-d doh on a mikrotik router.

The mikrotik router will fetch any url but dns.controld.com. Its giving errors every so often because of this. Why would only the control-d url not fetch? Thank you for your help.

reddit.com
u/grepes8 — 13 days ago