The Internet, like everything, is a combination of good and evil: there are normal and honest websites and others that instead try to sneak into computer data or to install something harmful (virus) without saying anything. We have seen, in several articles, that you can surf the internet safely with some plugins for browser protection and how to avoid clicking dangerous links and suspicious sites like Italia-programs.
In this post we see another type of protection, that through DNS, or the system of interpretation of site names.
This time there is nothing to install, you just have to change the network parameters by setting the secure ones of specialized companies as DNS servers instead of those provided by the provider.
1) The most famous service that provides free DNS for safe internet access is OpenDNS, famous and mentioned several times in the past.
the servers are at addresses 208.67.222.222 and 208.67.220.220 which must be set for the network connection used to navigate.
After switching to OpenDNS, you may notice that the internet loads faster because the time taken to resolve URLs is less than standard DNS.
OpenDNS uses one of the best anti-phishing solutions called PhishTank, an updated list to which all users can add sites to be blocked.
It also prevents access to sites with malware and prevents the computer from becoming part of botnets, pc networks used by hackers to launch attacks.
After setting the DNS servers with those of OpenDNS, every time you try to visit an infected site, access is blocked beforehand.
You don't need to install any additional software or hardware to use OpenDNS or even register unless you want "parental control", provided by a free "Parental Control" service.
You can then access the OpenDNS.com page and register an account to have the ability to set filters for internet browsing in order, for example, to prevent the browser from opening adult sites or with violent images.
2) Comodo SecureDNS is the best alternative to OpenDNS and is completely free (OpenDNS instead has malware control only with a paid subscription).
Also in this case there is nothing to install and just change the DNS server of the connection by setting as primary and secondary: 8.26.56.26 and 8.20.247.20 .
Comodo SecureDNS protects browsing by identifying malicious websites and staying safe against phishing (see what it means in the guide to online security against hackers, phishing and cyber criminals)
It also provides options for controlling what children can visit with a family supervision service. (in this case you need to register on the DNS.com site).
3) You can also set Google DNS (8.8.8.8) safe and fast, less effective from the point of view of privacy (because Google controls everything), but excellent for overcoming restrictions and censorship of sites in various countries.
4) From CloudFlare comes one of the most protected DNS servers from the point of view of privacy, using the server 1.1.1.1 as the primary DNS and 1.0.0.1 as the secondary DNS.
This way even the internet provider cannot know which sites we visit from our computer.
You can also set up Cloudflare DNS on Android and iPhone thanks to its app
5) A new DNS service called Quad 9 was launched by a number of IT organizations (including IBM) in 2017 as a secure DNS to protect the internet.
The address is only a primary DNS: 9.9.9.9 .
In a specific guide it is explained how to quickly set up DNS on PC, Mac and router while, in another article we saw a program to find faster DNS.
The synthetic procedure for Windows 7 is: Control panel -> Network connection center -> Change card settings -> right click on the network card used to connect to the internet -> internet protocol TCP / IPv4 -> Properties -> "Use the following DNS server addresses " and type primary and secondary DNS manually.
If desired, DNS can also be set on the router, from the configuration panel (but it is more inconvenient).
You may wonder what is the difference between an antivirus or a plugin that blocks the dangerous website and solutions like Comodo SecureDNS and Open DNS which, in fact, do the same thing.
In the first case, a connection is established with the site and when the page starts to load, the data passes through the antivirus which blocks any malware if detected.
In the case of DNS instead the malware is detected as soon as you click or write an address on the browser so the computer will have no chance to interact with the malicious website.
For this reason, using a trusted DNS service such as Comodo SecureDNS or OpenDNS would be better.
Even if it has already been explained, I still briefly repeat that a DNS Server is nothing more than a computer to which your PC connects every time you open a website, to find out what it means and where you can find google.it or navigaweb. net.
You can deepen the DNS discussion and theory in the articles:
- DNS control and protection to increase internet security;
- Protect children, family and ourselves from the dangers of the internet.
