They have unfiltered DNS and DNS that blocks advertisement, adult and malware content, in total 5 different DNS servers
unfiltered
protective
child (protective + child)
noads (protective + noads)
child-noads (protective + child + noads)
The idea is that when Mr. Trump is in the Office, EU needs not only own army but independent public DNS service too. Well known public DNS services are operated by US companies… One exception is Quad9 - 9.9.9.9 - based in Switzerland.
Unfiltered DNS:
IP address:
86.54.11.100
86.54.11.200
IPv6:
2a13:1001::86:54:11:100
2a13:1001::86:54:11:200
DNS over HTTPS:
unfiltered.joindns4.eu/dns-query
DNS over TLS:
unfiltered.joindns4.eu
DNS with malware protection:
IP address:
86.54.11.1
86.54.11.201
IPv6:
2a13:1001::86:54:11:1
2a13:1001::86:54:11:201
DNS over HTTPS:
protective.joindns4.eu/dns-query
DNS over TLS:
protective.joindns4.eu
More options are good, especially for the EU, so they do not have to rely on American companies. Heck, Americans could use this if they wanted to, but with slower response times due to physical distance. I like that there are several options, including one without filtering. I hope it turns out to be a good thing for the community at large.
My system uses the DNS4EU server(s) exclusively since a week now, without problems. I can’t judge about the quality of the protective version, because on my IPFire system the RPZ mechanism is running.
I’ve added the provider to the DoT list in the wiki.
DNS4EU has free/public and “professional” version. It seems that “pro” version has better protection than free/public version. After several experiments I prefer to use Quad9 DNS, it has better protection, transparency and no-log policy…
A hint, just scan your scam email folder and try several domains used by scammers and check what is blocked by DNS4EU and by Quad9…
You can check what is blocked by DNS4EU but registration/account is required.
Quad9 has public interface to check for blocked domains, no registration is required
EU4DNS was build with EU grants but there is a plan that this service will be financially independent and that is a reason why they have “professional” version that aims to telco, governments, etc…
unfiltered DNS configuration is there but it is kept in a secret (it was documented in IPfire list of public DNS servers)
Documentation could be better.
There is no check what is blocked. It is not clear what is blocked in the first configuration and what is difference between the first and the second configuration…
Interesting feature is that hardened DNS filters new domains for 30 days
hardened DNS filters well known DDNS (dynamic domains).