[Closed] keweonDNS - now with improved Certificate (iOS, Mac & Android)

Status
Not open for further replies.
Search This thread
By:
Advanced…
Cfibel

Cfibel

Senior Member
May 18, 2016
58
15
Hey, few apps since last update and some even before update are not working, mostly downloading function.
Microsoft Office - language downloading at the start
XDA Labs - downloading/updating apps
Google Drive - uploading/downloading files
also Instagram as others said before.
Thanks for advance :)
 
  • Like
Reactions: MrT69
G

GamaShani

Senior Member
Oct 26, 2017
187
88
Edmiri said:
Instagram not working.
Click to expand...
Click to collapse

After reading, I checked all the issues stated in the posts and all were working fine in my case.. :good:

Cfibel said:
Hey, few apps since last update and some even before update are not working, mostly downloading function.
Microsoft Office - language downloading at the start
XDA Labs - downloading/updating apps
Google Drive - uploading/downloading files
also Instagram as others said before.
Thanks for advance :)
Click to expand...
Click to collapse
 
D

demonoidmaster

Senior Member
Nov 19, 2015
1,035
331
MrT69 said:
I have seen this also this morning. Also on my test server.
graph.facebook.com needs to stay open because this breaks the function to the entire App.

At the moment I'm running Facebook within the Browser and the Messenger App is working. That's what I don't understand.
https://graph.facebook.com/ajax/tracking.php is collecting a lot of informations and it's just one of so many examples.

It's a pain to keep this open but I guess at the end I will have 2 different systems. One for Mobile and one for Desktop PCs.

This Pixel and Graph are connected to so many pages and even within YouTube. Not happy about this but I need to reopen this.

This hurts...
Click to expand...
Click to collapse
could have something to redirect any traffic that's meant to work right that would go through that link but have it pass through a fake version of it? Like page code injected intercept kinda thing, could work

---------- Post added at 06:44 AM ---------- Previous post was at 06:41 AM ----------

Has the issue with crunchyroll been resolved? Couldn't log in or watch anything, so i had switched back to my default DNS and been using that since then like a week or so ago

---------- Post added at 06:48 AM ---------- Previous post was at 06:44 AM ----------
knojap said:
So I only have to put in this adress as DNS Server and have to use the certificate and all is working?
What do you mean with only this 2 Servers?
There is 1 IP4 and 1 IP6. These are the two?
Click to expand...
Click to collapse
If you don't know the difference between ipv4 and ipv6 then either don't touch anything on your devices in case you screw up or just use the 0.0.0.0 one not the other
 
MrT69

MrT69

Senior Member
May 9, 2006
1,748
4,422
54
Königsbrunn
www.keweon.de
keweon Update


On Saturday, a database script accidentally wrote a whitelist table into the blacklist database. The backup was already overwritten as I have seen the problem and it was required to manually rebuld the Database from last week.

In summary a big sh*t happens and it was my fault.

The database is now cleaned and correction update is already in place. It will take a few minutes from now unti everything is working again.

There will be a second update again today but now the most of the problems should be fixed.

Sorry for this!!!
 
  • Like
Reactions: demonoidmaster, Timmmmaaahh!, jyoti.id and 13 others
MrT69

MrT69

Senior Member
May 9, 2006
1,748
4,422
54
Königsbrunn
www.keweon.de
It seems everything is working fine again. I just can say sorry again.

I have enabled a new function if something went wrong again. The entire database content will copy over to a 2nd database. This becomes automaticaly "previous_state" bevore the tables are overwritten.

If such an mistake happens again it's quite easy to revert back to state of yesterday.

The script itself was runing into an error because a MD5 download failed. After this it was parsing through blacklists and was reading one whitelist table as blacklist.
BigBang!
 
  • Like
Reactions: vatsal_chandan, Timmmmaaahh!, jyoti.id and 9 others
T

Tibiti

Senior Member
Sep 23, 2012
208
78
Cambridge
MrT69 said:
It seems everything is working fine again. I just can say sorry again.

I have enabled a new function if something went wrong again. The entire database content will copy over to a 2nd database. This becomes automaticaly "previous_state" bevore the tables are overwritten.

If such an mistake happens again it's quite easy to revert back to state of yesterday.

The script itself was runing into an error because a MD5 download failed. After this it was parsing through blacklists and was reading one whitelist table as blacklist.
BigBang!
Click to expand...
Click to collapse
I don't think for a second that you owe anyone an apology mate. Especially knowing how much effort and money you put in the project..
 
  • Like
Reactions: O l l i X, SkaboXD, MrT69 and 4 others
wkobaint

wkobaint

Senior Member
Feb 7, 2013
616
157
it is normal if sometime internet data connection got offline?
I can go online if I switch to airplane mode first.
I'm using magisk module btw.
 
MrT69

MrT69

Senior Member
May 9, 2006
1,748
4,422
54
Königsbrunn
www.keweon.de
wkobaint said:
it is normal if sometime internet data connection got offline?
I can go online if I switch to airplane mode first.
I'm using magisk module btw.
Click to expand...
Click to collapse

It might be that this is from Magisk Modul. I don't know it because I have non Rooted device. I'm using the DNS Changer App from Frostnerd.

I guess u can imagine that my Mobil is 24/7 with keweon. Oh what a surprise ? I have sometimes also troubles but this is related when I'm within Train and I have no connection by 3G or LTE. Then I need sometimes restart the App but it's almost related because me and being patient. It's not one of my favorite strengths. But from the DNS server there is no problem.

I'm running on keweon since 2013 and I never have had any problems with the server itself.

I can't remember who have had the same troubles. Someone in this thread have had almost the same troubles. After installing the Rom from scratch every problem was solved with Magisk. May be this will help.
 
MrT69

MrT69

Senior Member
May 9, 2006
1,748
4,422
54
Königsbrunn
www.keweon.de
DoH DNS Changer App - Pre Release


With kindly permission from Daniel (Frostnerd) the actuall and brand new DOH Sever App. This one contains no features (e.g. Start at Boot etc.) but it's complete re-coded.
As usual this App contains no ads, tracking, home calling or whatever. I would not recommend it if this would happens.

Ideas, complains and all helpful comments please direct to Daniel. There will be also a 'keweon Edition" within the next time which contains the keweon Servers by default. But this he can't upload to PlayStore.

THIS VERSION IS STABLE BUT PRE RELEASE. BATTERY CONSUMPTION IS LOWER THEN INTRA. BE SURPRISED.

Sorry Intra guy's, but Intra is too much Google.

THANKS A LOT TO DANIEL FOR THIS GREAT WORK!
 

Attachments

  • SmokeScreen-com.frostnerd.smokescreen-2-v1.0-Alpha.apk
    3.5 MB · Views: 323
Last edited:
  • Like
Reactions: hariharanM25, madfarts, methuselah and 14 others
Timmmmaaahh!

Timmmmaaahh!

Sr. Mod / Mod Cmte / Recognized Xmas Avatar Themer
Staff member
Sep 11, 2012
6,659
1
18,952
From From eh... Belgium!
OnePlus One
OnePlus 6T
MrT69 said:
...Ideas, complains and all helpful comments please direct to Daniel. There will be also a 'keweon Edition" within the next time which contains the keweon Servers by default. But this he can't upload to PlayStore.
Click to expand...
Click to collapse
Cool! Cheers.
So I just tag @frostnerd then?

I've set 176.9.62.58 as primary and 45.7.62.37 (Paris) as secondary and named it 'keweon'. I'm sensing the feeling I shouldn't enter IP addresses in there or do I?
It crashes a few seconds after tapping START and ends in this:
Code: 
12-13 22:18:54.335 E/SurfaceFlinger(  333): Failed to find layer (com.frostnerd.smokescreen/com.frostnerd.smokescreen.activity.MainActivity#0) in layer parent (no-parent).
12-13 22:18:54.348 I/WifiService(  703): getWifiEnabledState uid=10019
12-13 22:18:54.349 I/WifiService(  703): getConnectionInfo uid=10019
12-13 22:18:54.354 I/WifiService(  703): getWifiEnabledState uid=10019
12-13 22:18:54.357 I/WifiService(  703): getConnectionInfo uid=10019
12-13 22:18:54.358 I/WifiService(  703): getWifiEnabledState uid=10019
12-13 22:18:54.359 I/WifiService(  703): getConnectionInfo uid=10019
12-13 22:18:54.571 I/zygote  (  703): NativeAlloc concurrent copying GC freed 153034(8MB) AllocSpace objects, 200(9MB) LOS objects, 42% free, 23MB/40MB, paused 178us total 221.522ms
12-13 22:18:55.376 I/WifiService(  703): getWifiEnabledState uid=10019
12-13 22:18:55.379 I/WifiService(  703): getConnectionInfo uid=10019
12-13 22:18:55.383 I/WifiService(  703): getWifiEnabledState uid=10019
12-13 22:18:55.386 I/WifiService(  703): getConnectionInfo uid=10019
12-13 22:18:55.390 I/WifiService(  703): getWifiEnabledState uid=10019
12-13 22:18:55.392 I/WifiService(  703): getConnectionInfo uid=10019
12-13 22:18:55.517 D/NetworkStats(  703): Resolving plan for NetworkTemplate: matchRule=MOBILE_ALL, subscriberId=206300..., matchSubscriberIds=[206300...]
12-13 22:18:55.517 D/StatusBar( 2317): disable<e i a s b h r c s q >
12-13 22:18:55.520 D/NetworkStats(  703): Found active matching subId 2
12-13 22:18:55.524 D/NetworkStats(  703): Resolved to plan null
12-13 22:18:55.533 D/RecurrenceRule( 2317): Resolving using anchor 2018-12-13T22:18:55.533+01:00[Europe/Brussels]
12-13 22:18:55.533 D/RecurrenceRule( 2317): Cycle 22 from 2018-11-17T00:00+01:00[Europe/Brussels] to 2018-12-17T00:00+01:00[Europe/Brussels]
12-13 22:18:55.558 W/Adreno-EGL( 2317): <qeglDrvAPI_eglGetConfigAttrib:607>: EGL_BAD_ATTRIBUTE
12-13 22:18:55.560 D/vndksupport( 2317): Loading /vendor/lib/hw/gralloc.msm8974.so from current namespace instead of sphal namespace.
12-13 22:18:55.577 W/ContentService(  703): Observer android.database.IContentObserver$Stub$Proxy@9003254 is already registered.
12-13 22:18:55.593 D/StatusBar( 2317): disable<e i a s b h r c s q >
12-13 22:18:55.657 D/NetworkStats(  703): Resolving plan for NetworkTemplate: matchRule=MOBILE_ALL, subscriberId=206300..., matchSubscriberIds=[206300...]
12-13 22:18:55.660 D/NetworkStats(  703): Found active matching subId 2
12-13 22:18:55.666 D/NetworkStats(  703): Resolved to plan null
12-13 22:18:55.672 D/RecurrenceRule( 2317): Resolving using anchor 2018-12-13T22:18:55.672+01:00[Europe/Brussels]
12-13 22:18:55.672 D/RecurrenceRule( 2317): Cycle 22 from 2018-11-17T00:00+01:00[Europe/Brussels] to 2018-12-17T00:00+01:00[Europe/Brussels]
12-13 22:18:55.757 D/NetworkStats(  703): Resolving plan for NetworkTemplate: matchRule=MOBILE_ALL, subscriberId=206300..., matchSubscriberIds=[206300...]
12-13 22:18:55.759 D/NetworkStats(  703): Found active matching subId 2
12-13 22:18:55.765 D/NetworkStats(  703): Resolved to plan null
12-13 22:18:55.773 D/RecurrenceRule( 2317): Resolving using anchor 2018-12-13T22:18:55.773+01:00[Europe/Brussels]
12-13 22:18:55.775 D/RecurrenceRule( 2317): Cycle 22 from 2018-11-17T00:00+01:00[Europe/Brussels] to 2018-12-17T00:00+01:00[Europe/Brussels]
12-13 22:18:55.794 D/NetworkStats(  703): Resolving plan for NetworkTemplate: matchRule=MOBILE_ALL, subscriberId=206300..., matchSubscriberIds=[206300...]
12-13 22:18:55.797 D/NetworkStats(  703): Found active matching subId 2
12-13 22:18:55.802 D/NetworkStats(  703): Resolved to plan null
12-13 22:18:55.809 D/RecurrenceRule( 2317): Resolving using anchor 2018-12-13T22:18:55.809+01:00[Europe/Brussels]
12-13 22:18:55.810 D/RecurrenceRule( 2317): Cycle 22 from 2018-11-17T00:00+01:00[Europe/Brussels] to 2018-12-17T00:00+01:00[Europe/Brussels]
12-13 22:18:55.823 D/NetworkStats(  703): Resolving plan for NetworkTemplate: matchRule=MOBILE_ALL, subscriberId=206300..., matchSubscriberIds=[206300...]
12-13 22:18:55.825 D/NetworkStats(  703): Found active matching subId 2
12-13 22:18:55.829 D/NetworkStats(  703): Resolved to plan null
12-13 22:18:55.836 D/RecurrenceRule( 2317): Resolving using anchor 2018-12-13T22:18:55.836+01:00[Europe/Brussels]
12-13 22:18:55.837 D/RecurrenceRule( 2317): Cycle 22 from 2018-11-17T00:00+01:00[Europe/Brussels] to 2018-12-17T00:00+01:00[Europe/Brussels]
12-13 22:18:55.850 D/NetworkStats(  703): Resolving plan for NetworkTemplate: matchRule=MOBILE_ALL, subscriberId=206300..., matchSubscriberIds=[206300...]
12-13 22:18:55.851 D/NetworkStats(  703): Found active matching subId 2
12-13 22:18:55.856 D/NetworkStats(  703): Resolved to plan null
12-13 22:18:55.864 D/RecurrenceRule( 2317): Resolving using anchor 2018-12-13T22:18:55.864+01:00[Europe/Brussels]
12-13 22:18:55.864 D/RecurrenceRule( 2317): Cycle 22 from 2018-11-17T00:00+01:00[Europe/Brussels] to 2018-12-17T00:00+01:00[Europe/Brussels]
12-13 22:18:55.921 I/WifiService(  703): getWifiEnabledState uid=10019
12-13 22:18:55.922 I/WifiService(  703): getConnectionInfo uid=10019
12-13 22:18:55.923 I/WifiService(  703): getWifiEnabledState uid=10019
12-13 22:18:55.924 I/WifiService(  703): getConnectionInfo uid=10019
12-13 22:18:56.721 D/NetworkStats(  703): Resolving plan for NetworkTemplate: matchRule=MOBILE_ALL, subscriberId=206300..., matchSubscriberIds=[206300...]
12-13 22:18:56.723 D/NetworkStats(  703): Found active matching subId 2
12-13 22:18:56.728 D/NetworkStats(  703): Resolved to plan null
12-13 22:18:56.738 D/RecurrenceRule( 2317): Resolving using anchor 2018-12-13T22:18:56.737+01:00[Europe/Brussels]
12-13 22:18:56.738 D/RecurrenceRule( 2317): Cycle 22 from 2018-11-17T00:00+01:00[Europe/Brussels] to 2018-12-17T00:00+01:00[Europe/Brussels]
12-13 22:18:56.759 D/StatusBar( 2317): disable<e i a s b h r c s q >
12-13 22:18:56.824 D/StatusBar( 2317): disable<e i a s b h r c s q >
12-13 22:18:56.825 W/Bitmap  ( 2317): Called hasAlpha() on a recycle()'d bitmap! This is undefined behavior!
12-13 22:18:56.865 W/Adreno-EGL( 2317): <qeglDrvAPI_eglGetConfigAttrib:607>: EGL_BAD_ATTRIBUTE
12-13 22:18:56.866 D/vndksupport( 2317): Loading /vendor/lib/hw/gralloc.msm8974.so from current namespace instead of sphal namespace.
12-13 22:18:56.872 I/ActivityManager(  703): Killing 31300:com.frostnerd.smokescreen/u0a223 (adj 100): crash
12-13 22:18:56.878 W/zygote  (  703): kill(-31300, 9) failed: No such process
12-13 22:18:56.886 E/NotificationService(  703): Suppressing notification from package by user request.
12-13 22:18:56.893 W/InputEventReceiver(  703): Attempted to finish an input event but the input event receiver has already been disposed.
12-13 22:18:56.906 W/ActivityManager(  703): setHasOverlayUi called on unknown pid: 31300
12-13 22:18:56.921 W/zygote  (  703): kill(-31300, 9) failed: No such process
12-13 22:18:56.929 D/NetlinkEvent(  291): Unknown ifindex 27 in RTM_DELADDR
12-13 22:18:56.945 D/Vpn     (  703): setting state=DISCONNECTED, reason=agentDisconnect
12-13 22:18:56.945 D/ConnectivityService(  703): NetworkAgentInfo [VPN () - 176] EVENT_NETWORK_INFO_CHANGED, going from CONNECTED to DISCONNECTED
12-13 22:18:56.945 D/VPN     (  703): NetworkAgent: NetworkAgent channel lost
12-13 22:18:56.945 D/ConnectivityService(  703): NetworkAgentInfo [VPN () - 176] got DISCONNECTED, was satisfying 1
12-13 22:18:56.964 W/zygote  (  703): kill(-31300, 9) failed: No such process
12-13 22:18:56.974 W/AppOps  (  703): Finishing op nesting under-run: uid 1000 pkg android code 24 time=0 duration=0 nesting=0
12-13 22:18:57.008 W/zygote  (  703): kill(-31300, 9) failed: No such process
12-13 22:18:57.008 I/zygote  (  703): Successfully killed process cgroup uid 10223 pid 31300 in 130ms
Full log attached. Default server seems to be running fine. Really liking the "XY queries this far" in the notification! Though "this far" should be "so far". I already have 28 but didn't even do anything yet ^_^
 

Attachments

  • 2018-12-13-22-18-38.txt
    33.1 KB · Views: 8
  • Like
Reactions: AntonVermeulen
C

Ch4t4r

Senior Member
Oct 28, 2017
51
92
Timmmmaaahh said:
Of course, the https link. Thanks =) seems to work now...
Click to expand...
Click to collapse

Yeah, I'm Ch4t4r on XDA and telegram :good:

Both IP addresses and URLs are allowed, but the IP-address for sec.keweon.center isn't bound to the interface. The app itself is still in Alpha and will receive updates over the next few weeks - albeit the version which can be downloaded here won't receive automatic updates of course.

If you want to join the alpha program send me a PM on XDA or Telegram - for that I need the e-mail you are using for Google, sadly I have to add everyone to the closed alpha by hand.
This offer is for everyone of course ;)

Timmmmaaahh said:
Full log attached. Default server seems to be running fine. Really liking the "XY queries this far" in the notification! Though "this far" should be "so far". I already have 28 but didn't even do anything yet ^_^
Click to expand...
Click to collapse
Also, fixed :) My girlfriend had 1000 queries after a few minutes without using her phone... loads of stuff in the background
 
Last edited:
  • Like
Reactions: hariharanM25, madfarts, Timmmmaaahh! and 6 others
MrT69

MrT69

Senior Member
May 9, 2006
1,748
4,422
54
Königsbrunn
www.keweon.de
Like every year especially for Christmas:

Especially at Christmas, spam and fake mails have no end to point to any webshops with unbelievable prices, products and damn well made rip-offs. As every year, I also point out that this lands directly on the keweon blacklist.

List of fraudulent online shops

This site is unfortunately the only website I know that performs the appropriate tests and publishes information about it. This list of "fraudulent online shops" will become 1:1 part of the blacklist.

If you have other or further sources, I am always open for such informations.
 
  • Like
Reactions: hariharanM25, O l l i X, madfarts and 3 others
Status
Not open for further replies.

Similar threads

Snoop05
[OFFICIAL][TOOL][WINDOWS] ADB, Fastboot and Drivers - 15 seconds ADB Installer v1.4.3
Replies
2K
Views
7M
abdulkareem786
abdulkareem786
fivefour
OUTDATED - [MOD] CrossBreeder - Lag-/Entropy+/DNS+/Tether+/Ads-/Censors-/.bit support!!
Replies
7K
Views
2M
fivefour
fivefour
shimp208
[TOOL]Minimal ADB and Fastboot [2-9-18]
Replies
982
Views
5M
sinommo
sinommo
B
[UTIL][WIN][MT65xx] MTK Droid Root & Tools | MediaTek Android Smartphone
Replies
2K
Views
3M
A
allyalla
BSDgeek_Jake
  • Poll
MoaAB: Mother of All AD-BLOCKING > BLOCKS ADware Malware Spyware Bloatware Ransomware
Replies
5K
Views
2M
J
jonatansuarez

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 248
    MrT69
    MrT69
    Please read this first! ​


    The entire system is build up for demonstration and should show a new way to protect against Internet and Online threats. It should demonstrate that it is possible within the Internet to protect user, devices and there data.

    The entire System is a pure & 100% DNS filter system without the usage of any kind of proxy. My goal is it to proof security is possible without using any kind of proxy.

    A lot of sites using HTTPS communications within the Internet and therefore I offer a special self signed Root Certificate which block any existing domain on the blacklist with a valid HTTPS connection. Different sites using broken HTTPS Traffic to detect Adblock technologies and some sites might require the keweon Root Certificate. All HTTPS connections are only used to prevent browser and application errors within your Operation Systems.

    From the technical point of few a root certificate and just a DNS server is never a threat for any users or any kind of data. The entire system is protected within various ways to prevent data stealing from users and devices.

    For actual reasons and because of many discussions I want to inform you about threat possibilities:


    1. DNS Server which are not DNS Server and they act as (transparent) Proxy are able to redirect the entire user traffic for Data Analysis or Data stealing.​


    2. DNS Server which are not DNS Server and they act as (transparent) Proxy can easily redirect traffic to a Web Server and infect your system with this kind of online threats:

    Botnets, Cryptoware, Fake Software, Malware, Miningware, Online Worms, Phishing, Ransomware, Remote Keyloggers, Rogue Security Software, Spyware, Trojans and Virus.

    This kind of infections are possible via HTTP (via 80 or any other port) or HTTPS (via 443 or any other port) with or without a valid SSL Certificate. A single Let'sEncrypt can easily support this kind of Online Threats.​


    3. DNS Server which are not DNS Server and they act as (transparent) Proxy can use all methods of attacks in Point 2 to act as Botnet or Cache Server to spread this kind of attacks by a simple HTTP infection and download additional payload via HTTP (via 80 or any other port) or HTTPS (via 443 or any other port) with a single Let'sEncrypt certificate.
    ​


    4. DNS Server which are not DNS Server and they act as (transparent) Proxy can use a self signed root certificate to steal passwords and logins when you install this. The keweon Root Certificate is designed to protect users and against HTTPS errors which will happens because of filter or blocking HTTPS traffic. When a keweonDNS Server is setup as a (transparent) Proxy it is possible to redirect the entire user traffic and get user login and passwords which is generally known as "MITM ATTACK".


    Please take note that the usage of a Root Certificate from someone you don't know can cause serious problems when the Server is build up to target user. With a MITM Attack it is possible to get data, passwords and logon credentials.​


    5. The entire keweonDNS Project is build and invented to protect users, there Data and its protecting against almost all Online threats. Various fuses are build into the entire environments many times.
    ​

    6. The keweon Servers do not any kind of Data collection. This is one of my core visions. Why I should build up a system which prevent data collection system and then I will do it by myself? There is also NO (!) Data Collection even on Servers OS Level.​


    The entire keweonDNS System runs public with global access since 2014. At this point let me say thanks a lot to all users for there trust into me and the entire keweonDNS solution.


    Thanks a lot to each single user!!





    keweonShield.png

    ​




    **************************************************************

    Business inquires: Please see contact information section below.

    ***************************************************************


    **************************************************************

    Keweon quick start.
    Read the available servers and certificate sections now if you already know what you are doing. New users please skip to the "About Keweon" section below and return to the DNS and Certificate sections later:

    **************************************************************


    **************************************************************

    Available DNS servers (choose one primary and one secondary):

    Main Servers:
    IP: 176.9.62.58
    IP: 176.9.62.62

    or

    IPv6: 2a01:4f8:150:8023::58
    IPv6: 2a01:4f8:150:8023::62
    Click to expand...
    Click to collapse


    Update November 28, 2018:

    If you have installed the root certificate, I recommend that you use these two servers. This servers can be used without certificate but a lot of sites will not porpper work.

    IPv4: 213.239.207.143
    IPv6: 2a01:4f8:a0:8487::143

    IPv4: 107.191.55.215
    IPv6: 2001:19f0:6401:175d::215
    Click to expand...
    Click to collapse

    These servers have special blocklist entries which blocks things such as graph.facebook.com, pixel.facebook.com, all amazon-adsystem.com domains and all the things which are normaly not possible to block without any impact to apps, websites and other things. Also, this blocks special domains for YouTube which prevents data transmission to them.

    **************************************************************

    Available Server List for keweon Privacy & Security
    (Server Edition keweonDNS v.6.80.280.LL)

    Australia / Sidney: (vServer)
    k1ns-au-001.keweon.center
    45.76.125.130
    2001:19f0:5801:b45::130

    France / Paris: (vServer)
    k1ns-fr-001.keweon.center
    45.77.62.37
    2001:19f0:6801:95e::37

    Germany / Frankfurt (vServer)
    k1ns-de-001.keweon.center
    104.207.131.11
    2001:19f0:6c01:61f::11

    India / Bangalore (vServer)
    k1ns-in-001.keweon.center
    IPv4: 139.59.33.236
    IPv6: 2400:6180:100:d0::30d:5001

    Japan / Tokio (vServer)
    k1ns-jp-001.keweon.center
    45.77.25.72
    2001:19f0:7001:22a8::72

    Netherland / Amsterdam (vServer)
    k1ns-nl-001.keweon.center
    45.77.138.206
    2001:19f0:5001:d8d::206

    Singapore / Singapore: (vServer)
    k1ns-sp-001.keweon.center
    45.76.151.221
    2001:19f0:4400:4f31::221

    UK / London (vServer)
    k1ns-lon-001.keweon.center
    45.32.183.39
    2001:19f0:7402:a61::39

    USA / Dallas (vServer)
    k1ns-tx-001.keweon.center
    45.76.57.41
    2001:19f0:6401:9ed::41

    USA / New Jersey (vServer)
    k1ns-ny-001.keweon.center
    45.77.144.132
    2001:19f0:5:2962::132

    USA / Silicon Valley (vServer)
    k1ns-sv-001.keweon.center
    45.32.140.26
    2001:19f0:ac01:639::26
    **************************************************************


    **************************************************************
    Keweon Root certificate (not required, but will suppress certificate errors):

    http://pki.keweon.center

    For Windows Systeme (MSI File) The certificate is working for IE, Edge and Chrome Browser.
    >> CLICK HERE <<

    MSI within a ZIP file:
    >> CLICK HERE <<

    For Android and iOS devices, also for Firefox and Mozilla Browser:
    >> CLICK HERE <<

    Certificate within a ZIP file:
    >> CLICK HERE <<

    For Admins to use it within Active Directory as REG file:
    >> CLICK HERE <<

    REG within a ZIP file:
    >> CLICK HERE <<

    If you want to have a "AllInOne Package" use this link please:
    >> CLICK HERE <<


    (End of Quick Start section)

    **************************************************************


    **************************************************************
    About Keweon:

    Keweon comes from the German words "KEine WErbung ONline"--translated to English it means "no advertising online."

    Keweon is more than a generic adblock system. Keweon does:

     Advertising Blocking
     Adware Protection
     App Protection
     Bandwidth Protection for Mobile Phones
     Botnets Protection
     Cryptoware Protection
     Fake Online Shop Filter
     Fake Software Protection
     Malware Protection
     Miningware Protection
     Online Worms Protection
     Pharming Protection
     Phishing Protection
     Popup Blocker
     Privacy Protection
     Ransomware Protection
     Remote Keyloggers Protection
     Rogue Security Software Protection
     Spoofing Protection
     Spyware Protection
     Tracing Protection
     Tracking Protection
     Trojan Protection
     Virus Protection
     and a lot of other things

    Things Keweon does not do or does not have:
     Acceptible advertising exceptions
     A Malware or virus scanner
     Data collection

    Keweon will:
     Save bandwidth. Ads are blocked, not just hidden.

    **************************************************************


    **************************************************************

    Basic instructions:

    1. Take the DNS Servers
    2. Install the keweon Adblock Root Certificate (recommended, not required)
    3. Change your Internet Router or your Mobile Device to use the servers
    4. Reboot (Router and PC)

    **************************************************************


    **************************************************************

    Trusted apps for changing DNS on your device:

    - Android: https://play.google.com/store/apps/details?id=com.frostnerd.dnschanger

    - iOS/Apple: https://itunes.apple.com/us/app/dns-override-set-dns-for-wi-fi-and-cellular/id1060830093

    - Chrome OS: Click on wifi icon, click on Network, scroll to Name Servers, and input DNS entries.

    - Chrome browser help: https://www.xda-developers.com/fix-dns-ad-blocker-chrome/

    **************************************************************


    **************************************************************
    FAQ:

    1) Does my traffic runs trough the keweon System?

    Not even one byte from you or your device will flow through my servers. Also the same with HTTPS things. Take a sniffer or wireshark or NirSoft Network Suites and you will be surprised. All HTTPS Ads traffic will be terminated with "0" bytes which will show to you that there is no sniffing or spying from my side.

    2) Here are some questions from Telegram users which might be interesting for you.

    http://downloads.keweon.center/keweon/keweon_questionnaire.pdf


    3) If you have questions - please ask!
    **************************************************************


    **************************************************************

    Contact information:

    If you want to send blacklists (things that should be blocked) please send them to: blackli.wovqusywx173aog9@u.box.com

    If you want to send whitelists (things that shouldn't be blocked) please send them to: whiteli.g2o05glywjqt8zfy@u.box.com

    If you open a Website and this site looks kind of strange because of missing CSS & other things, then take the URL, copy to TXT and send this TXT to: site-error@keweon.center

    Developer email: torsten.jahnke@keweon.com (If you are a Company and if you want to test and use keweonDNS within a business environment I can offer you a faster connection within EMEA.
    This is only possible if you have a public static IP Address. Dynamic Addresses are currently not possible for security reasons.)

    **************************************************************


    **************************************************************

    New license terms because of the EU DSGVO/GDRP (25.05.2018):

    Business and Corporate usage is not allowed without my written permission.
    The usage of keweon within a private and personal environment and all released and public available files of the entire keweon System are subject of the License right of the WTFPL license.

    Excluded from this license are all server technologies, the SSL technologies and in addition all source codes which personally belongs to me.

    **************************************************************
    View
    52
    MrT69
    MrT69
    How to use keweon?

    It's very easy:

    1. Take the DNS Servers
    2. Install the keweon Adblock Root Certificate ( <<< THIS IS ONLY A RECOMMENDATION)
    3. Change your Internet Router or your Mobile Device to it
    4. Reboot (Router and PC)
    5. Done! That's it.
    6. See the Internet within a never seen way

    In the meantime the keweon AdBlock Root Certificate has more than 4 Millions global downloads. This certificate is not required but for a few websites it is mandatory.
    This certificate will only surpress the certificate errors. Not all of them because I'm still working on this.

    On iOS Devices just open Safari. With Android use the default Browser and go to http://pki.keweon.center and after 3 sec. the download of the certificate will start. JUST THE DOWNLOAD!! You need to install it by yourself. More facts about the keweon Root Certificate will comming soon on the website.


    Test the DNS Servers within this List and choose the one which is the fastest for you:

    https://xdaforums.com/android/software-hacking/keweon-privacy-online-security-t3681139#6


    How to use it on Android devices:

    Use an App of your choice or use this. I also use this app and from my point of view this is the worldwide best App to change the DNS settings on Android devices. No Root Access is required. The developer is from Germany and I have had a good contact to him. The app is free of charge and also free of advertising. The source code for this app is also available on GitHub. If you have troubles with it or want to have additonal features than contact the developer. He would be happy about every feedback.

    https://play.google.com/store/apps/details?id=com.frostnerd.dnschanger


    How to use it on iOS/Apple devices:

    All my iOS Tester using this App. If you have a better one or you are able to translate the Android App to XCode - your welcome.

    https://itunes.apple.com/us/app/dns-override-set-dns-for-wi-fi-and-cellular/id1060830093


    You are using Chrome and the DNS thing is not working? (thanks a lot @NamitNayan for this info)

    Google wants to prevent Adblocking via DNS. Therefore they have enabled an experimental Switch by default to prevent DNS blocking.
    Take a look at here if it's not working >>> HERE <<< and fix the problem within seconds.

    View
    50
    MrT69
    MrT69
    keweonDNS & installation Information

    ALL keweonDNS Servers:

    Version: DoT Server - DNS over TLS (updated 03/21/2019)
    Used Certificate: Let'sEncrypt Certificate
    Server Address: dot.asecdns.com
    Port: 853 & 443
    IP Addresses:
    dot.asecdns.com (159.69.48.240 - HETTNER RZ Falkenstein)
    dot.asecdns.com (116.203.117.199 - HETTNER RZ Nuernberg)
    dot.asecdns.com (95.216.192.253 - HETTNER RZ Helsinki)
    dot.asecdns.com (2a01:4f8:1c17:6e44::240 - HETTNER RZ Falkenstein)
    dot.asecdns.com (2a01:4f8:c2c:491::199 - HETTNER RZ Nuernberg)
    dot.asecdns.com (2a01:4f9:c010:3071::253 - HETTNER RZ Helsinki)

    Version: DoH Server - DNS over HTTPS (updated 03/21/2019)
    Used Certificate: Let'sEncrypt Certificate
    Server Address: doh.asecdns.com/nebulo
    Port: 443
    IP Addresses:
    doh.asecdns.com (159.69.49.250 - HETTNER RZ Falkenstein)
    doh.asecdns.com (116.203.126.207 - HETTNER RZ Nuernberg)
    doh.asecdns.com (95.216.165.29 - HETTNER RZ Helsinki)
    doh.asecdns.com (2a01:4f8:1c17:6fc7::250 - HETTNER RZ Falkenstein)
    doh.asecdns.com (2a01:4f8:c2c:e25::207 - HETTNER RZ Nuernberg)
    doh.asecdns.com (2a01:4f9:c010:1cbd::29 - HETTNER RZ Helsinki)


    Version: keweonDNS v.6.80.280.LL (updated 03/21/2019)

    Australia / Sidney: (vServer)
    k1ns-au-001.keweon.center
    45.76.125.130
    2001:19f0:5801:b45::130

    France / Paris: (vServer)
    k1ns-fr-001.keweon.center
    45.77.62.37
    2001:19f0:6801:95e::37

    Germany / Frankfurt (vServer)
    k1ns-de-001.keweon.center
    104.207.131.11
    2001:19f0:6c01:61f::11

    India / Bangalore (vServer)
    k1ns-in-001.keweon.center
    IPv4: 139.59.33.236
    IPv6: 2400:6180:100:d0::30d:5001

    Japan / Tokio (vServer)
    k1ns-jp-001.keweon.center
    45.77.25.72
    2001:19f0:7001:22a8::72

    Netherland / Amsterdam (vServer)
    k1ns-nl-001.keweon.center
    45.77.138.206
    2001:19f0:5001:d8d::206

    Singapore / Singapore: (vServer)
    k1ns-sp-001.keweon.center
    45.76.151.221
    2001:19f0:4400:4f31::221

    UK / London (vServer)
    k1ns-lon-001.keweon.center
    45.32.183.39
    2001:19f0:7402:a61::39

    USA / Dallas (vServer)
    k1ns-tx-001.keweon.center
    45.76.57.41
    2001:19f0:6401:9ed::41

    USA / New Jersey (vServer)
    k1ns-ny-001.keweon.center
    45.77.144.132
    2001:19f0:5:2962::132

    USA / Silicon Valley (vServer)
    k1ns-sv-001.keweon.center
    45.32.140.26
    2001:19f0:ac01:639::26

    Physical Instance:

    Germany / Falkenstein
    k1-de-058-fsn.keweon.center (Physical)
    176.9.62.58
    2a01:4f8:150:8023::58
    and
    176.9.62.62
    2a01:4f8:150:8023::62

    DNS Server to use with keweon Adblock Root Certificate:
    This Servers block in addition:
    - pixel.facebook.com
    - Amazon data collection and advertising
    - more things which are normally not possible will coming soon step by step

    Germany / Nuernberg
    k1-de-143-nbg.keweon.center (Physical)
    213.239.207.143
    2a01:4f8:a0:8487::143

    USA / Dallas - Texas
    k1-ns2-us02.keweon.center (vServer)
    107.191.55.215
    2001:19f0:6401:175d::215

    (Updated at 21. March 2019)
    View
    44
    MrT69
    MrT69
    Technical Details

    Public available DNS:

    Take a look at this thread:
    https://xdaforums.com/showpost.php?p=73985083&postcount=6

    Background System:

    The current system needs 42 Server (!) in the Background that everything is working.
    Actually the entire infrastructure is hosted on 5 different providers.

    How does it work?

    The entire System works with several Servers. Ubuntu, FreeBSD 11 and my own build Operation System based on UNIX is installed. The entire developement and all source codes are not public available. There is more than 14 yrs of work inside.


    Current Blacklist size:

    39.585.224 Domains (export to TXT)
    Current Virus/Ransomware Blacklist size:
    18.853.587 Domains (export to TXT)


    Current Blacklist contains:

    Tracker, Malware, Spyware, Adware, Advertising, Poison Websites Fake Software (Adobe Flash Updates which is in real Malware/Virus) & a few false/positive Sites.
    To cover all HTTPS errors because a lot of Advertising Vendors display and spread this crap via https to the world I have created the keweon Root Certificate. Allmost every Malware and Spyware will be installed via HTTPS. The Root Certificate is only responsible to suppress all https error messages for all this Advertising and poison things.


    Which Systems are working and acting with keweon?

    The keweon System is tested on almost every Operation System and Devices (iOS, Android, Xbox, Playstation, Samsung TV, etc... ) It's currently running within 3 companies because I know the Admins there. You can use it within you private environment but please DO NOT USE it within a Business environment.


    Why I can't use it within a Business environment?

    There are 2 reasons for it.

    1. I want that the entire system becomes free for private and personal usage and I already have requests from Companies and even from the Public Sector that they are interested about to use the System. As long as there are too many error within the System I don't have the option to sell this as an Business solution. That's the deal.

    2. Private for free, Business needs to license it. Of cause, the current system needs to be a bigger and stable system..


    Does my traffic runs trough the keweon System?

    Not even one byte from you or your device will flows through my servers. Also the same with the HTTPS things. Take a sniffer or wireshark or NirSoft Network Suites and you will be surprised. All HTTPS Ads traffic will be terminated with "0" bytes which will show to you that there is no sniffing or spying from my side.
    It would not make any sense that I drop all this crap traffic, blame to the advertising Industrie and I do exactly this things which I want to prevent?
    Btw... This fact was also the problem why I have had no success with investors. They want that I enable data sniffing or user sniffing but I would rather throw away the entire system & developement than doing what they want.

    View
    39
    MrT69
    MrT69
    I need your help and support

    1. Support me with Black and White lists

    It’s veryimportant to know that keweonDNS will NEVER (!) do a censorship of the Internet. If you want to have i.e. Facebook blocked via HOSTS file, it’s up to you. But this will never be done via keweonDNS. I have other plans with porn and violence but this is a stage with keweon kidsafe which is currently far, far away.

    IMPORTANT:

    Any list you want to send to me has to be send as an attachment within an EMail. I will give you a short example for this.

    If you have a Raspberry PI and you have a real cute blacklist than copy all the addresses (or URL’s) into a TXT file and send it to me via mail. The same with some important whitelists. Don't care about the size.

    Don’t copy the addresses or URL's into Subject or Body of this Mail because this will never arrive. I don’t want to track and check all the mails and for security reasons only attachments will be processed. Please make sure you only send ZIP files that contains the TXT file or send native TXT files. Everything else will be dropped for security reasons. Don’t care about double entries and it doesn’t matters if you send the same TXT file 5 or 10 times again and again.

    Websites which contains errors or Whitelist needs to be processed within the same way. Send the TXT or ZiP – that’s it.

    If you want to send blacklists please send them to: blackli.wovqusywx173aog9@u.box.com

    If you want to send whitelists please send them to: whiteli.g2o05glywjqt8zfy@u.box.com


    2. Support me with false/positive on keweonDNS

    If you open a Site and this site stay blank than copy the URL into a TXT file and send it to me. You do not need to collect them. If you send me 50 or 100 Mails and each of them contains only 1 link or address this doesn't matters.

    If you want to send URL’s or Links which are blocked and should be not blocked then send them to: whiteli.g2o05glywjqt8zfy@u.box.com

    If you open a Website and this site looks some kind of strange because of missing CSS & other pretty Website things than take the URL, copy to TXT and send this TXT to: site-error@keweon.center


    3. Router Compatibility:

    With a lot of SOHO Router it is possible to change the IPv6 and IPv4 default DNS Server Address. But there are are also a lot of Router outside where this is not possible.
    If you can provide some instructions and screenshots within a PDF I will release this on the Webpage. I have the experience that the AVM FritzBox sometimes will work and sometimes not. That is related to the fact that the Provider support IPv6 and you are only able to change the IPv4 DNS Server Address. With the tiny tool "FBEDITOR" it should be possible to change also the default IPv6 DNS Server Address on AVM Boxes.

    German Telekom Router are also a peace of crap. There you can change nothing except the Password and the WLAN key. The work arround by selecting "Different Provider" (anderer Anbieter) where you can set manualy the DNS Server will not work.

    Unfortunately I only have CISCO, LINKSYS and ASUS Hardware running with i.e. DD-WRT. I appreciate if you can help me with creating instructions how to change DNS v4 & v6 settings on your Home/SOHO/Wireless Router. No rush on this because all this instructions will be released on the Website.


    Million thanks in advance!
    View

New posts