It says " network has no access, private DNS server could not he accessed"

    • [deleted]

    • Post #11
    • Edited

    E24 What network are you on? Are connectivity checks enabled?

      They are enabled and I'm just on the dorm WiFi

        • [deleted]

        • Post #13

        E24 And over mobile data it's the same?

          Lte doesnt work either I have to turn off DNS

            • [deleted]

            • Post #15

            E24 Have you tried isolating the issue (by removing the VPN from the equation for example)? Why do you even need both? These two don't complement each other very well and make you stand out like a sore thumb.

                • [deleted]

                • Post #18
                • Edited

                E24 Depends on what you're trying to achieve but VPN with content filtering is best of both words (eg NetShield for ProtonVPN, IVPN AntiTracker, Ad-blocking and tracker-blocking DNS service etc).

                In case you're missed discussion from a couple of days ago.

                  E24

                  They do two different things. In not a matter of which one is better, it depends on what you're trying to accomplish.

                  The VPN hides your true IP address, it does your DNS request, and it encrypts your traffic.

                  What you're doing is using nextDNS to handle the DNS requests instead of your VPN. Running the VPN still encrypts the traffic and hides your real IP (people will only see the IP of the VPN server you're connected to). Its just not handling your DNS requests now.

                  If you use no VPN or DNS service, then people see your true IP address, your data is not encrypted, and your ISP (internet service provider) handles your DNS request, which means your ISP is seeing what you're doing.

                  The perk of nextDNS is that you have more control over blocklists/firewall settings (things you can't change in some VPN's). The real perk is that you can view live logs and block telemetry, which you can't do with your VPN (I'll assume). This is done by enabling logs, and watching a live feed of domains that are making connections and blocking what you don't want to connect (excess telemetry, tracking, etc).

                  Its not bad to use your VPN to handle DNS requests, but it won't allow you to set specific blocks.

                  I believe what @Ddismount2784 is referring to, is the more specific you make security settings, the easier you are to fingetprint. E.g., this person (although we don't know who they are) is doing this, and we can tell because they connect with very specific settings that are specific to them (browser settings, VPN/DNS settings, etc) (dismount correct me if I'm wrong).

                      • [deleted]

                      • Post #20

                      Lolsrslybro Just a wild guess the OP read some reddit post somewhere recommending both for no good reason.

                          [deleted] fair enough, I mentioned you in the above comment. That's what you're referring to regarding fingerprinting right? I'm no expert on this shit.

                            • [deleted]

                            • Post #22

                            Lolsrslybro Its not bad to use your VPN to handle DNS requests, but it won't allow you to set specific blocks.

                            It's not some odd technological limitation. There's probably little to no demand for it, but options do exist.

                                • [deleted]

                                • Post #24
                                • Edited

                                Lolsrslybro We're running circles here. I asked what OP is trying to achieve. My guess OP doesn't know why they're using both. FYI, I love NextDNS and I've been a paid subscriber for many years, but it's not always the right tool for the job.

                                  • [deleted]

                                  • Post #26

                                  nrt I don't want to hijack this thread with what Michael Bazzell does or doesn't do (I also haven't listened to the man in what feels like several years) other than just say there's no substitute for educating oneself.

                                    So is using both neccesssry or not? I guess my goal is to hide my IP, encrypt my traffic, and make sure my ISP isn't constantly seeing what I'm doing :)

                                      • [deleted]

                                      • Post #28
                                      • Edited

                                      @E24 if you're looking to block most ads and 'trackers' on Android, then generic DNS endpoints from AdGuard, Mullvad etc should do the trick.

                                      If you want above but with more comprehensive blocking and control, you can't go wrong with NextDNS.

                                      If you're looking to hide your IP address from websites and your ISP you need a VPN.

                                      If you're looking to do both (hide your traffic and block ads), you will be well served by a VPN that does content filtering (Proton, IVPN, Mullvad etc). It's both what's recommended by the project and what will give you least headache.

                                      If for some reason you want both VPN and Encrypted DNS (such as NextDNS) you can do that too.

                                      • [deleted]

                                      • Post #29
                                      • Edited

                                      E24 So is using both neccesssry or not? I guess my goal is to hide my IP, encrypt my traffic, and make sure my ISP isn't constantly seeing what I'm doing :)

                                      Just using a respectable VPN takes care of that, no need to mess with encrypted DNS.