Thabks for this info. I will check it and putt it on the white list this evening.
If you ever see an error report it immediately.
?
- Status
Thabks for this info. I will check it and putt it on the white list this evening.
If you ever see an error report it immediately.
?
As far as I can see it's working on my test server. I have created the "keweon" account and it seems it's working on my test server.
Upload is scheduled and let me know if it's working again. Update is at 7 PM GMT +1 (GERMAN TIME) active.
Thanks a lot!
Last edited:
Note
FOR ACTUAL REASONS - DNSMASQ within the right way
I have seen that a view people has wrong configured the DD-WRT Router. I also have seen within the Internet almost EVERY (!) manual is wrong about the change of external DNS Server on DD-WRT.
WHY?
Almost every manual will show you that you need to change the DNS Server within the DNS Scope Options. TOTALY WRONG!
When you are using this settings than you assign the client the public DNS Server IP Address. The entire caching which will be done from your SOHO Router is lost with this Scope settings. And the Router DNS caching will cause more performance and speed within the Internet. DNS change on DHCP Scope settings is not the best idea.
Set up your router within this way:
Now change to your favorite DNS Server on DD-WRT within this way if you don't want to use your ISP default DNS. This settings are also valid if you choose Google or Cloudlflare DNS Server. Even with the latest Version of DD-WRT you can't use DNSv6 settings within DNSMASQ. Don't ask me why.
If you are using DNSv6 on DD-WRT it would be helpfull if someone of you can provide the right settings based on all this info. To set the right settings for IPv4 please change to this settings:
Copy and paste this settings into the field "Additional DNSMasq Options" and reboot your DD-WRT Router. The settings below using CloudflareDNS. Any recommendations or additional settings are welcome.
Hope you enjoy this!
FOR ACTUAL REASONS - DNSMASQ within the right way
I have seen that a view people has wrong configured the DD-WRT Router. I also have seen within the Internet almost EVERY (!) manual is wrong about the change of external DNS Server on DD-WRT.
WHY?
Almost every manual will show you that you need to change the DNS Server within the DNS Scope Options. TOTALY WRONG!
When you are using this settings than you assign the client the public DNS Server IP Address. The entire caching which will be done from your SOHO Router is lost with this Scope settings. And the Router DNS caching will cause more performance and speed within the Internet. DNS change on DHCP Scope settings is not the best idea.
Set up your router within this way:
Now change to your favorite DNS Server on DD-WRT within this way if you don't want to use your ISP default DNS. This settings are also valid if you choose Google or Cloudlflare DNS Server. Even with the latest Version of DD-WRT you can't use DNSv6 settings within DNSMASQ. Don't ask me why.
If you are using DNSv6 on DD-WRT it would be helpfull if someone of you can provide the right settings based on all this info. To set the right settings for IPv4 please change to this settings:
Copy and paste this settings into the field "Additional DNSMasq Options" and reboot your DD-WRT Router. The settings below using CloudflareDNS. Any recommendations or additional settings are welcome.
Hope you enjoy this!
Last edited:
EDIT:
Fixed the values above because this was copy & paste from my test System.
The former values are not helpfull for other DNSMASQ installations.
Fixed the values above because this was copy & paste from my test System.
The former values are not helpfull for other DNSMASQ installations.
keweonDNS - Server Update
After I received a tiny donation I'm now able to order 2 physical Servers. Each of them will cost 130,- EUR per Month.
Both servers are located in Germany and have a 2 GBit Interent connect. The order process should be done tomorrow and I guess during the next week you are able to access them.
I want to have a test how fast it is and I hope I can keep the servers Online when they are done. Let's see and wait.
Stay tuned!!
Edit:
The Servers are Online and they are damn powerfull. 2 x 1265 Xeon on each server should be good enough. At the moment I feel as like as a kid at Christmas. I hope that HETZNER DATACENTER is world wide useable.
After I received a tiny donation I'm now able to order 2 physical Servers. Each of them will cost 130,- EUR per Month.
Both servers are located in Germany and have a 2 GBit Interent connect. The order process should be done tomorrow and I guess during the next week you are able to access them.
I want to have a test how fast it is and I hope I can keep the servers Online when they are done. Let's see and wait.
Stay tuned!!
Edit:
The Servers are Online and they are damn powerfull. 2 x 1265 Xeon on each server should be good enough. At the moment I feel as like as a kid at Christmas. I hope that HETZNER DATACENTER is world wide useable.
Last edited:
I don’t want to sound like an idiot but, i have read every post in this thread. I for the life of me cant figure things out.
I have a few problems.
One i cant find the website www.keweon.com and the links keep leading me back to the beginnings of this thread when i click it. I have however installed the ca cert.
The second is maybe not a problem but more of a "I dont know what i am doing" situation. I have a dns changer for my droid (override dns (for root)). I put in the dns of choice from the server list and apply. I see all went well and ads are blocked but, when i do a dns leak test it still shows my tmobile dns, And my isp is still the same (maybe its not suppose to even change). Some in site on this would be great.
Sorry for the noobie questions and thank you in advance for the hard work you have committed to this project.
I have a few problems.
One i cant find the website www.keweon.com and the links keep leading me back to the beginnings of this thread when i click it. I have however installed the ca cert.
The second is maybe not a problem but more of a "I dont know what i am doing" situation. I have a dns changer for my droid (override dns (for root)). I put in the dns of choice from the server list and apply. I see all went well and ads are blocked but, when i do a dns leak test it still shows my tmobile dns, And my isp is still the same (maybe its not suppose to even change). Some in site on this would be great.
Sorry for the noobie questions and thank you in advance for the hard work you have committed to this project.
Hi!
First at all - there are never "idiots questions"
Every problem on your side will help to make a better instruciton when everythings is live.CERTIFICATE
I guess you know what happens when you are using hosts files and visit HTTPS sites. You will get stupid error messages. To surpess all this nag messages you will need the certificate for this.
To get this certificate just visit this URL:
http://pki.keweon.center
and the download will aprears after 3 seconds. JUST THE DOWNLOAD! The installation needs to be done from the user.
On Android devices for some reasons you need to set a Device PIN bevore you are able to install the certificate. Don't know who have had this idea at Google but this guy should be fired asap.
On Apple do it with Safari. Double click the download and a few steps later it's done.
Here is a good instruction Website from GFI >> CLICK HERE << to do it in different operation systems.
THE WEBSITE
The website is still not ready. I will wait until the 25th of May - the official Date for the activation of the GDPR (EU General Data Protection Regulation). I'm pretty sure that this will become a big surprise for all of you.
That's the reason why everything is currently pointed to this thread.
STILL ADS
Thanks to Google and Apple that they have removed for some unknown reasons the options to change the default DNS Servers on the devices. It might be that this have something to do that Android is from Google and also that Google has paid round about 1 billion US-Dollar to Apple that they are still the default "search engine". But I also could be wrong.
I don't know which DNS changer u are using but I'm pretty sure that you need also to change your DNSv6 settings.
With this App:
https://play.google.com/store/apps/details?id=com.frostnerd.dnschanger
you easily can enable the v6 option. Change also the v6 DNS Servers and everything is fine.
ADDITIONAL THINGS
If you ever have any problems - than feel so free and ask. There are never stupid questions.
Hope you enjoy it and if something is not working as it should than ask.
Last edited:
keweon Update - SERVER IS ONLINE
Now the new server is online and the very best at the beginning:
The virtual crap has as respond time from round about 46 ms. It's OK.
The physical server has a speed of 3 ms. (Compared by kloth.net) - AND THIS IS SO F*CKING DAMN FAST!!!
This is exactly this what I want to show to all of you. If you are using this server you will see that the speed of you internet will dramatically change.
It's still a damn slow server although this Baby has 2 Intel SSD inside. The load of the entire Database is compared to the virtual devices round about 3 Minutes slower than on the virtual thing. It's not an HP Server. With them I have incredible experience.
I have done an Update on YouTube advertising. It's still not 100% working but now you can decide if you want to see or have the Advertising. I limit the Ads and if you see advertising than you can decide to watch it and support your Music or just click it again and the Advertising is gone.
I only have experience here in Germany. No Idea what's about other countries.
LIMITATIONS:
1. DNSSEC is not working. I have the problem that the MY root DNS Server will have to less power. DNSSEC will cause a lot of more requests. The entire infrastucture is unfortunately not based on a flat rate. The server also have not the power to manage this game. Sorry.
2. ANY requests are still blocked. I don't have the money for a real cute firewall. That's the reason why this is not possible.
3. SECURITY is as same as strong as you already know it. I can't size this down.
Good example is the latest story. 4 hours after the Installation of this server some guys from China running a brute force attack against this server. Only the OS was installed!! Can't belive this. For security reasons I reinstalled everything again via KVM to make sure that there is no backdoor inside.
4. I hope I have done everything what is required make this server powerfull, fast and secure.
5. It's not 2 server, it's only ONE with 2 nics. I can have this server now 4 months instead of 2 months. It's an expensive toy but I hope I can keep it.
6. This server has no reboot schedule it's running 24/7
7. Now it's your turn. Enjoy it and let me know how is the speed.
8. IMPORTANT: And no more Network Outage. This Server is located within the DATACENTER of HETZNER (Germany). My rootDNS Server have had in 3 years not even ONE (!) outage.
EDIT:
SORRY FOR THE INTERUPITON 2 HOURS AGO!
It was also required to reboot the Root Servers because I have done an Upgrade on the kernel. I don't know exactly how many users are currently connected but based on the facts of the traffic it seems it's a lot of them. This causes timeouts because there was too much traffic. I made some changes and I set the limit to more users which is double than bevore. If the servers really run in troubels again - I'm damn proud on everything
EDIT - AGAIN:
The entire System is upgraded. Extended the user limit to 50 Million. Should be good enough now and this should working for the next few weeks.
I don't log anything and because of this please send me a short notice when something is not working.
I'm using my own server for testing and optimize filtering. When something went wrong on the System - it's up to you to tell this to me.
Hope you enjoy this
Now the new server is online and the very best at the beginning:
The virtual crap has as respond time from round about 46 ms. It's OK.
The physical server has a speed of 3 ms. (Compared by kloth.net) - AND THIS IS SO F*CKING DAMN FAST!!!
This is exactly this what I want to show to all of you. If you are using this server you will see that the speed of you internet will dramatically change.
It's still a damn slow server although this Baby has 2 Intel SSD inside. The load of the entire Database is compared to the virtual devices round about 3 Minutes slower than on the virtual thing. It's not an HP Server. With them I have incredible experience.
I have done an Update on YouTube advertising. It's still not 100% working but now you can decide if you want to see or have the Advertising. I limit the Ads and if you see advertising than you can decide to watch it and support your Music or just click it again and the Advertising is gone.
I only have experience here in Germany. No Idea what's about other countries.
LIMITATIONS:
1. DNSSEC is not working. I have the problem that the MY root DNS Server will have to less power. DNSSEC will cause a lot of more requests. The entire infrastucture is unfortunately not based on a flat rate. The server also have not the power to manage this game. Sorry.
2. ANY requests are still blocked. I don't have the money for a real cute firewall. That's the reason why this is not possible.
3. SECURITY is as same as strong as you already know it. I can't size this down.
Good example is the latest story. 4 hours after the Installation of this server some guys from China running a brute force attack against this server. Only the OS was installed!! Can't belive this. For security reasons I reinstalled everything again via KVM to make sure that there is no backdoor inside.
4. I hope I have done everything what is required make this server powerfull, fast and secure.
5. It's not 2 server, it's only ONE with 2 nics. I can have this server now 4 months instead of 2 months. It's an expensive toy but I hope I can keep it.
6. This server has no reboot schedule it's running 24/7
7. Now it's your turn. Enjoy it and let me know how is the speed.
8. IMPORTANT: And no more Network Outage. This Server is located within the DATACENTER of HETZNER (Germany). My rootDNS Server have had in 3 years not even ONE (!) outage.
IP: 176.9.62.58
IP: 176.9.62.62
IPv6: 2a01:4f8:150:8023::58
IPv6: 2a01:4f8:150:8023::62
IP: 176.9.62.62
IPv6: 2a01:4f8:150:8023::58
IPv6: 2a01:4f8:150:8023::62
I recommend to use this server as PRIMARY DNS and one of the others as SECONDARY DNS Server.
EDIT:
SORRY FOR THE INTERUPITON 2 HOURS AGO!
It was also required to reboot the Root Servers because I have done an Upgrade on the kernel. I don't know exactly how many users are currently connected but based on the facts of the traffic it seems it's a lot of them. This causes timeouts because there was too much traffic. I made some changes and I set the limit to more users which is double than bevore. If the servers really run in troubels again - I'm damn proud on everything
EDIT - AGAIN:
The entire System is upgraded. Extended the user limit to 50 Million. Should be good enough now and this should working for the next few weeks.
I don't log anything and because of this please send me a short notice when something is not working.
I'm using my own server for testing and optimize filtering. When something went wrong on the System - it's up to you to tell this to me.
Hope you enjoy this
Last edited:
This is only for the reason if you want to use only this server. Using the same address as second IP Adress causes troubles e.g when you are using this within Windows.
Than this would make sense.
The second DNS is almost not working within most operation systems. The second one only acts if the entire Primary server is switched off. Even this will cause that you have set 2 different servers and your Internet is offline.
Change your primary DNS server to 10.0.0.1 (not working privat IP Adress) and the second DNS to 1.1.1.1 (Cloudflare) and test it. You will see you will stay offline on so many OS Systems.
Than this would make sense.
The second DNS is almost not working within most operation systems. The second one only acts if the entire Primary server is switched off. Even this will cause that you have set 2 different servers and your Internet is offline.
Change your primary DNS server to 10.0.0.1 (not working privat IP Adress) and the second DNS to 1.1.1.1 (Cloudflare) and test it. You will see you will stay offline on so many OS Systems.
why still no connection bro? or is it only me? any servers i take.
edit: for months this happens the other day and today with the keweon module bro. used the app but yes its working. taking the primary dns using dns changer.
Last edited:
I'm connected to the new server. It's working.
Which server you are using?
Which server you are using?
tried amsterdam or london bro. just only my two favorite servers. and yes got no connection on them. tried also japan but same result. now im using Primary Dns with Dns Changer app mentioned in the OP. Its just that servers from the modules
tried amsterdam or london bro. just only my two favorite servers. and yes got no connection on them. tried also japan but same result. now im using Primary Dns with Dns Changer app mentioned in the OP. Its just that servers from the modules
Oh. It seems the module is broken.
The firewall can't be the reason because than the DNS CHANGER APP would be also blocked.
No clue about Magisk.
i think not bro. no update in magisk now. its just a script. been using it for months now. just tonight its stop i mean no internet connection.
I don't know if you are alone with this. Would be helpful if you asking other users.
sent blacklist.txt to you bro. check it out. is ad.fly blocked by default on Primary Dns? some sites link this one on ther uploaded file
sent blacklist.txt to you bro. check it out. is ad.fly blocked by default on Primary Dns? some sites link this one on ther uploaded file
It's not me. Even GoogleDNS don't know this address anymore.
Uhhh...?!?!
Attachments
Last edited:
need to change to default dns for me to pass ad.fly
anyways i kind bare with it.- Status
Similar threads
Top Liked Posts
-
There are no posts matching your filters.
-
248Please read this first!
The entire system is build up for demonstration and should show a new way to protect against Internet and Online threats. It should demonstrate that it is possible within the Internet to protect user, devices and there data.
The entire System is a pure & 100% DNS filter system without the usage of any kind of proxy. My goal is it to proof security is possible without using any kind of proxy.
A lot of sites using HTTPS communications within the Internet and therefore I offer a special self signed Root Certificate which block any existing domain on the blacklist with a valid HTTPS connection. Different sites using broken HTTPS Traffic to detect Adblock technologies and some sites might require the keweon Root Certificate. All HTTPS connections are only used to prevent browser and application errors within your Operation Systems.
From the technical point of few a root certificate and just a DNS server is never a threat for any users or any kind of data. The entire system is protected within various ways to prevent data stealing from users and devices.
For actual reasons and because of many discussions I want to inform you about threat possibilities:
1. DNS Server which are not DNS Server and they act as (transparent) Proxy are able to redirect the entire user traffic for Data Analysis or Data stealing.
2. DNS Server which are not DNS Server and they act as (transparent) Proxy can easily redirect traffic to a Web Server and infect your system with this kind of online threats:
Botnets, Cryptoware, Fake Software, Malware, Miningware, Online Worms, Phishing, Ransomware, Remote Keyloggers, Rogue Security Software, Spyware, Trojans and Virus.
This kind of infections are possible via HTTP (via 80 or any other port) or HTTPS (via 443 or any other port) with or without a valid SSL Certificate. A single Let'sEncrypt can easily support this kind of Online Threats.
3. DNS Server which are not DNS Server and they act as (transparent) Proxy can use all methods of attacks in Point 2 to act as Botnet or Cache Server to spread this kind of attacks by a simple HTTP infection and download additional payload via HTTP (via 80 or any other port) or HTTPS (via 443 or any other port) with a single Let'sEncrypt certificate.
4. DNS Server which are not DNS Server and they act as (transparent) Proxy can use a self signed root certificate to steal passwords and logins when you install this. The keweon Root Certificate is designed to protect users and against HTTPS errors which will happens because of filter or blocking HTTPS traffic. When a keweonDNS Server is setup as a (transparent) Proxy it is possible to redirect the entire user traffic and get user login and passwords which is generally known as "MITM ATTACK".
Please take note that the usage of a Root Certificate from someone you don't know can cause serious problems when the Server is build up to target user. With a MITM Attack it is possible to get data, passwords and logon credentials.
5. The entire keweonDNS Project is build and invented to protect users, there Data and its protecting against almost all Online threats. Various fuses are build into the entire environments many times.
6. The keweon Servers do not any kind of Data collection. This is one of my core visions. Why I should build up a system which prevent data collection system and then I will do it by myself? There is also NO (!) Data Collection even on Servers OS Level.
The entire keweonDNS System runs public with global access since 2014. At this point let me say thanks a lot to all users for there trust into me and the entire keweonDNS solution.
Thanks a lot to each single user!!
**************************************************************
Business inquires: Please see contact information section below.
***************************************************************
**************************************************************
Keweon quick start.
Read the available servers and certificate sections now if you already know what you are doing. New users please skip to the "About Keweon" section below and return to the DNS and Certificate sections later:
**************************************************************
**************************************************************
Available DNS servers (choose one primary and one secondary):
Main Servers:
Update November 28, 2018:
If you have installed the root certificate, I recommend that you use these two servers. This servers can be used without certificate but a lot of sites will not porpper work.
These servers have special blocklist entries which blocks things such as graph.facebook.com, pixel.facebook.com, all amazon-adsystem.com domains and all the things which are normaly not possible to block without any impact to apps, websites and other things. Also, this blocks special domains for YouTube which prevents data transmission to them.
**************************************************************
Available Server List for keweon Privacy & Security
(Server Edition keweonDNS v.6.80.280.LL)
Australia / Sidney: (vServer)
k1ns-au-001.keweon.center
45.76.125.130
2001:19f0:5801:b45::130
France / Paris: (vServer)
k1ns-fr-001.keweon.center
45.77.62.37
2001:19f0:6801:95e::37
Germany / Frankfurt (vServer)
k1ns-de-001.keweon.center
104.207.131.11
2001:19f0:6c01:61f::11
India / Bangalore (vServer)
k1ns-in-001.keweon.center
IPv4: 139.59.33.236
IPv6: 2400:6180:100:d0::30d:5001
Japan / Tokio (vServer)
k1ns-jp-001.keweon.center
45.77.25.72
2001:19f0:7001:22a8::72
Netherland / Amsterdam (vServer)
k1ns-nl-001.keweon.center
45.77.138.206
2001:19f0:5001:d8d::206
Singapore / Singapore: (vServer)
k1ns-sp-001.keweon.center
45.76.151.221
2001:19f0:4400:4f31::221
UK / London (vServer)
k1ns-lon-001.keweon.center
45.32.183.39
2001:19f0:7402:a61::39
USA / Dallas (vServer)
k1ns-tx-001.keweon.center
45.76.57.41
2001:19f0:6401:9ed::41
USA / New Jersey (vServer)
k1ns-ny-001.keweon.center
45.77.144.132
2001:19f0:5:2962::132
USA / Silicon Valley (vServer)
k1ns-sv-001.keweon.center
45.32.140.26
2001:19f0:ac01:639::26
**************************************************************
**************************************************************
Keweon Root certificate (not required, but will suppress certificate errors):
http://pki.keweon.center
For Windows Systeme (MSI File) The certificate is working for IE, Edge and Chrome Browser.
>> CLICK HERE <<
MSI within a ZIP file:
>> CLICK HERE <<
For Android and iOS devices, also for Firefox and Mozilla Browser:
>> CLICK HERE <<
Certificate within a ZIP file:
>> CLICK HERE <<
For Admins to use it within Active Directory as REG file:
>> CLICK HERE <<
REG within a ZIP file:
>> CLICK HERE <<
If you want to have a "AllInOne Package" use this link please:
>> CLICK HERE <<
(End of Quick Start section)
**************************************************************
**************************************************************
About Keweon:
Keweon comes from the German words "KEine WErbung ONline"--translated to English it means "no advertising online."
Keweon is more than a generic adblock system. Keweon does:
Advertising Blocking
Adware Protection
App Protection
Bandwidth Protection for Mobile Phones
Botnets Protection
Cryptoware Protection
Fake Online Shop Filter
Fake Software Protection
Malware Protection
Miningware Protection
Online Worms Protection
Pharming Protection
Phishing Protection
Popup Blocker
Privacy Protection
Ransomware Protection
Remote Keyloggers Protection
Rogue Security Software Protection
Spoofing Protection
Spyware Protection
Tracing Protection
Tracking Protection
Trojan Protection
Virus Protection
and a lot of other things
Things Keweon does not do or does not have:
Acceptible advertising exceptions
A Malware or virus scanner
Data collection
Keweon will:
Save bandwidth. Ads are blocked, not just hidden.
**************************************************************
**************************************************************
Basic instructions:
1. Take the DNS Servers
2. Install the keweon Adblock Root Certificate (recommended, not required)
3. Change your Internet Router or your Mobile Device to use the servers
4. Reboot (Router and PC)
**************************************************************
**************************************************************
Trusted apps for changing DNS on your device:
- Android: https://play.google.com/store/apps/details?id=com.frostnerd.dnschanger
- iOS/Apple: https://itunes.apple.com/us/app/dns-override-set-dns-for-wi-fi-and-cellular/id1060830093
- Chrome OS: Click on wifi icon, click on Network, scroll to Name Servers, and input DNS entries.
- Chrome browser help: https://www.xda-developers.com/fix-dns-ad-blocker-chrome/
**************************************************************
**************************************************************
FAQ:
1) Does my traffic runs trough the keweon System?
Not even one byte from you or your device will flow through my servers. Also the same with HTTPS things. Take a sniffer or wireshark or NirSoft Network Suites and you will be surprised. All HTTPS Ads traffic will be terminated with "0" bytes which will show to you that there is no sniffing or spying from my side.
2) Here are some questions from Telegram users which might be interesting for you.
http://downloads.keweon.center/keweon/keweon_questionnaire.pdf
3) If you have questions - please ask!
**************************************************************
**************************************************************
Contact information:
If you want to send blacklists (things that should be blocked) please send them to: blackli.wovqusywx173aog9@u.box.com
If you want to send whitelists (things that shouldn't be blocked) please send them to: whiteli.g2o05glywjqt8zfy@u.box.com
If you open a Website and this site looks kind of strange because of missing CSS & other things, then take the URL, copy to TXT and send this TXT to: site-error@keweon.center
Developer email: torsten.jahnke@keweon.com (If you are a Company and if you want to test and use keweonDNS within a business environment I can offer you a faster connection within EMEA.
This is only possible if you have a public static IP Address. Dynamic Addresses are currently not possible for security reasons.)
**************************************************************
**************************************************************
New license terms because of the EU DSGVO/GDRP (25.05.2018):
Business and Corporate usage is not allowed without my written permission.
The usage of keweon within a private and personal environment and all released and public available files of the entire keweon System are subject of the License right of the WTFPL license.
Excluded from this license are all server technologies, the SSL technologies and in addition all source codes which personally belongs to me.
**************************************************************
52How to use keweon?
It's very easy:
1. Take the DNS Servers
2. Install the keweon Adblock Root Certificate ( <<< THIS IS ONLY A RECOMMENDATION)
3. Change your Internet Router or your Mobile Device to it
4. Reboot (Router and PC)
5. Done! That's it.
6. See the Internet within a never seen way
In the meantime the keweon AdBlock Root Certificate has more than 4 Millions global downloads. This certificate is not required but for a few websites it is mandatory.
This certificate will only surpress the certificate errors. Not all of them because I'm still working on this.
On iOS Devices just open Safari. With Android use the default Browser and go to http://pki.keweon.center and after 3 sec. the download of the certificate will start. JUST THE DOWNLOAD!! You need to install it by yourself. More facts about the keweon Root Certificate will comming soon on the website.
Test the DNS Servers within this List and choose the one which is the fastest for you:
https://xdaforums.com/android/software-hacking/keweon-privacy-online-security-t3681139#6
How to use it on Android devices:
Use an App of your choice or use this. I also use this app and from my point of view this is the worldwide best App to change the DNS settings on Android devices. No Root Access is required. The developer is from Germany and I have had a good contact to him. The app is free of charge and also free of advertising. The source code for this app is also available on GitHub. If you have troubles with it or want to have additonal features than contact the developer. He would be happy about every feedback.
https://play.google.com/store/apps/details?id=com.frostnerd.dnschanger
How to use it on iOS/Apple devices:
All my iOS Tester using this App. If you have a better one or you are able to translate the Android App to XCode - your welcome.
https://itunes.apple.com/us/app/dns-override-set-dns-for-wi-fi-and-cellular/id1060830093
You are using Chrome and the DNS thing is not working? (thanks a lot @NamitNayan for this info)
Google wants to prevent Adblocking via DNS. Therefore they have enabled an experimental Switch by default to prevent DNS blocking.
Take a look at here if it's not working >>> HERE <<< and fix the problem within seconds.
50keweonDNS & installation Information
ALL keweonDNS Servers:
Version: DoT Server - DNS over TLS (updated 03/21/2019)
Used Certificate: Let'sEncrypt Certificate
Server Address: dot.asecdns.com
Port: 853 & 443
IP Addresses:
dot.asecdns.com (159.69.48.240 - HETTNER RZ Falkenstein)
dot.asecdns.com (116.203.117.199 - HETTNER RZ Nuernberg)
dot.asecdns.com (95.216.192.253 - HETTNER RZ Helsinki)
dot.asecdns.com (2a01:4f8:1c17:6e44::240 - HETTNER RZ Falkenstein)
dot.asecdns.com (2a01:4f8:c2c:491::199 - HETTNER RZ Nuernberg)
dot.asecdns.com (2a01:4f9:c010:3071::253 - HETTNER RZ Helsinki)
Version: DoH Server - DNS over HTTPS (updated 03/21/2019)
Used Certificate: Let'sEncrypt Certificate
Server Address: doh.asecdns.com/nebulo
Port: 443
IP Addresses:
doh.asecdns.com (159.69.49.250 - HETTNER RZ Falkenstein)
doh.asecdns.com (116.203.126.207 - HETTNER RZ Nuernberg)
doh.asecdns.com (95.216.165.29 - HETTNER RZ Helsinki)
doh.asecdns.com (2a01:4f8:1c17:6fc7::250 - HETTNER RZ Falkenstein)
doh.asecdns.com (2a01:4f8:c2c:e25::207 - HETTNER RZ Nuernberg)
doh.asecdns.com (2a01:4f9:c010:1cbd::29 - HETTNER RZ Helsinki)
Version: keweonDNS v.6.80.280.LL (updated 03/21/2019)
Australia / Sidney: (vServer)
k1ns-au-001.keweon.center
45.76.125.130
2001:19f0:5801:b45::130
France / Paris: (vServer)
k1ns-fr-001.keweon.center
45.77.62.37
2001:19f0:6801:95e::37
Germany / Frankfurt (vServer)
k1ns-de-001.keweon.center
104.207.131.11
2001:19f0:6c01:61f::11
India / Bangalore (vServer)
k1ns-in-001.keweon.center
IPv4: 139.59.33.236
IPv6: 2400:6180:100:d0::30d:5001
Japan / Tokio (vServer)
k1ns-jp-001.keweon.center
45.77.25.72
2001:19f0:7001:22a8::72
Netherland / Amsterdam (vServer)
k1ns-nl-001.keweon.center
45.77.138.206
2001:19f0:5001:d8d::206
Singapore / Singapore: (vServer)
k1ns-sp-001.keweon.center
45.76.151.221
2001:19f0:4400:4f31::221
UK / London (vServer)
k1ns-lon-001.keweon.center
45.32.183.39
2001:19f0:7402:a61::39
USA / Dallas (vServer)
k1ns-tx-001.keweon.center
45.76.57.41
2001:19f0:6401:9ed::41
USA / New Jersey (vServer)
k1ns-ny-001.keweon.center
45.77.144.132
2001:19f0:5:2962::132
USA / Silicon Valley (vServer)
k1ns-sv-001.keweon.center
45.32.140.26
2001:19f0:ac01:639::26
Physical Instance:
Germany / Falkenstein
k1-de-058-fsn.keweon.center (Physical)
176.9.62.58
2a01:4f8:150:8023::58
and
176.9.62.62
2a01:4f8:150:8023::62
DNS Server to use with keweon Adblock Root Certificate:
This Servers block in addition:
- pixel.facebook.com
- Amazon data collection and advertising
- more things which are normally not possible will coming soon step by step
Germany / Nuernberg
k1-de-143-nbg.keweon.center (Physical)
213.239.207.143
2a01:4f8:a0:8487::143
USA / Dallas - Texas
k1-ns2-us02.keweon.center (vServer)
107.191.55.215
2001:19f0:6401:175d::215
(Updated at 21. March 2019)44Technical Details
Public available DNS:
Take a look at this thread:
https://xdaforums.com/showpost.php?p=73985083&postcount=6
Background System:
The current system needs 42 Server (!) in the Background that everything is working.
Actually the entire infrastructure is hosted on 5 different providers.
How does it work?
The entire System works with several Servers. Ubuntu, FreeBSD 11 and my own build Operation System based on UNIX is installed. The entire developement and all source codes are not public available. There is more than 14 yrs of work inside.
Current Blacklist size:
39.585.224 Domains (export to TXT)
Current Virus/Ransomware Blacklist size:
18.853.587 Domains (export to TXT)
Current Blacklist contains:
Tracker, Malware, Spyware, Adware, Advertising, Poison Websites Fake Software (Adobe Flash Updates which is in real Malware/Virus) & a few false/positive Sites.
To cover all HTTPS errors because a lot of Advertising Vendors display and spread this crap via https to the world I have created the keweon Root Certificate. Allmost every Malware and Spyware will be installed via HTTPS. The Root Certificate is only responsible to suppress all https error messages for all this Advertising and poison things.
Which Systems are working and acting with keweon?
The keweon System is tested on almost every Operation System and Devices (iOS, Android, Xbox, Playstation, Samsung TV, etc... ) It's currently running within 3 companies because I know the Admins there. You can use it within you private environment but please DO NOT USE it within a Business environment.
Why I can't use it within a Business environment?
There are 2 reasons for it.
1. I want that the entire system becomes free for private and personal usage and I already have requests from Companies and even from the Public Sector that they are interested about to use the System. As long as there are too many error within the System I don't have the option to sell this as an Business solution. That's the deal.
2. Private for free, Business needs to license it. Of cause, the current system needs to be a bigger and stable system..
Does my traffic runs trough the keweon System?
Not even one byte from you or your device will flows through my servers. Also the same with the HTTPS things. Take a sniffer or wireshark or NirSoft Network Suites and you will be surprised. All HTTPS Ads traffic will be terminated with "0" bytes which will show to you that there is no sniffing or spying from my side.
It would not make any sense that I drop all this crap traffic, blame to the advertising Industrie and I do exactly this things which I want to prevent?
Btw... This fact was also the problem why I have had no success with investors. They want that I enable data sniffing or user sniffing but I would rather throw away the entire system & developement than doing what they want.
39I need your help and support
1. Support me with Black and White lists
It’s veryimportant to know that keweonDNS will NEVER (!) do a censorship of the Internet. If you want to have i.e. Facebook blocked via HOSTS file, it’s up to you. But this will never be done via keweonDNS. I have other plans with porn and violence but this is a stage with keweon kidsafe which is currently far, far away.
IMPORTANT:
Any list you want to send to me has to be send as an attachment within an EMail. I will give you a short example for this.
If you have a Raspberry PI and you have a real cute blacklist than copy all the addresses (or URL’s) into a TXT file and send it to me via mail. The same with some important whitelists. Don't care about the size.
Don’t copy the addresses or URL's into Subject or Body of this Mail because this will never arrive. I don’t want to track and check all the mails and for security reasons only attachments will be processed. Please make sure you only send ZIP files that contains the TXT file or send native TXT files. Everything else will be dropped for security reasons. Don’t care about double entries and it doesn’t matters if you send the same TXT file 5 or 10 times again and again.
Websites which contains errors or Whitelist needs to be processed within the same way. Send the TXT or ZiP – that’s it.
If you want to send blacklists please send them to: blackli.wovqusywx173aog9@u.box.com
If you want to send whitelists please send them to: whiteli.g2o05glywjqt8zfy@u.box.com
2. Support me with false/positive on keweonDNS
If you open a Site and this site stay blank than copy the URL into a TXT file and send it to me. You do not need to collect them. If you send me 50 or 100 Mails and each of them contains only 1 link or address this doesn't matters.
If you want to send URL’s or Links which are blocked and should be not blocked then send them to: whiteli.g2o05glywjqt8zfy@u.box.com
If you open a Website and this site looks some kind of strange because of missing CSS & other pretty Website things than take the URL, copy to TXT and send this TXT to: site-error@keweon.center
3. Router Compatibility:
With a lot of SOHO Router it is possible to change the IPv6 and IPv4 default DNS Server Address. But there are are also a lot of Router outside where this is not possible.
If you can provide some instructions and screenshots within a PDF I will release this on the Webpage. I have the experience that the AVM FritzBox sometimes will work and sometimes not. That is related to the fact that the Provider support IPv6 and you are only able to change the IPv4 DNS Server Address. With the tiny tool "FBEDITOR" it should be possible to change also the default IPv6 DNS Server Address on AVM Boxes.
German Telekom Router are also a peace of crap. There you can change nothing except the Password and the WLAN key. The work arround by selecting "Different Provider" (anderer Anbieter) where you can set manualy the DNS Server will not work.
Unfortunately I only have CISCO, LINKSYS and ASUS Hardware running with i.e. DD-WRT. I appreciate if you can help me with creating instructions how to change DNS v4 & v6 settings on your Home/SOHO/Wireless Router. No rush on this because all this instructions will be released on the Website.
Million thanks in advance!
