Why have Plusnet blocked secure DNS?

[#1]

@pv we considered a similar approach back when we deployed it.

Anyway, for anybody suffering this problem who might want to leave Safeguard enabled: I've done a bit of tinkering and it seems that whitelisting your DoT resolver of choice will also work around this problem:-

nslookup dns.google 213.120.234.38
Server:  indnsc102.bt.net
Address:  213.120.234.38

Non-authoritative answer:
Name:    dns.google
Addresses:  2001:4860:4860::8844
          2001:4860:4860::8888
          8.8.8.8
          8.8.4.4


>nslookup 1dot1dot1dot1.cloudflare-dns.com 213.120.234.38
Server:  indnsc102.bt.net
Address:  213.120.234.38

Non-authoritative answer:
Name:    1dot1dot1dot1.cloudflare-dns.com
Addresses:  2606:4700:4700::1111
          2606:4700:4700::1001
          1.0.0.1
          1.1.1.1


>nslookup dns.quad9.net 213.120.234.38
Server:  indnsc102.ukcore.bt.net
Address:  213.120.234.38

Non-authoritative answer:
Name:    dns.quad9.net
Addresses:  2620:fe::fe
          2620:fe::9
          149.112.112.112
          9.9.9.9

[#2]

---

@bobpullen wrote:

@pv we considered a similar approach back when we deployed it.

I see. Interesting the idea was abandoned then, I'm generally of the opinion that if you are going to implement something that is so trivial to circumvent, you might as well not bother at all.

[#3]

So Safeguard blocks access to DNS resolvers such as google and 1.1.1.1 by default?

[#4]

No. It blocks access to the hostname equivalents; the ones you would use to configure a device for DNS over TLS.

If you configure a client to simply use the IP address of another traditional DNS resolver, then Safeguard doesn't get a say in it.

[#5]

Same issue here, it took me a while to find out what's wrong with my phone, since it's the only phone in the house that uses private dns. But it stopped working a 1-2 weeks ago. On mobile data, it works just fine. Any solution for this?

[#6]

@Horvi  check this thread https://community.plus.net/t5/Tech-Help-Software-Hardware-etc/Why-have-Plusnet-blocked-secure-DNS/td... .  It appears that you may need to whitelist the private dns urls if you have Safeguard enabled

[#7]

---

@Horvi wrote:

Any solution for this?

---

See workaround here -  Why have Plusnet blocked secure DNS? 

EDIT: @MisterW beat me to it !

[#8]

Thank you guys! However I'm not sure how to do it. Please pretend I'm a 5y old. I used dns.adguard.com on my phone. How to whitelist it? Thanks

[#9]

@Horvi  look above at post 46.

Login to your account on the member centre, click the broadband icon and select Safeguard from the Help and settings links towards the bottom of the page.

Then select Allow websites and enter dns.adguard.com into the Add a website box and click Add

That should just about do it...

[#10]

Moderators Note

Topics merged and then moved to Everything Else from Fibre.