I responded to someone in comments on a post that may not get as much visibility, and wanted to share something that might help some others sail the seas but also while not sailing, too.

I referenced Quad9 DNS as probably one of the best private DNS you can use, Swiss based, no log, no tracking, no data to sell, etc. They also implement DNSSEC, DoH, DoT, QUIC, ECS (which you may or may bot want), malware blocking, content filtering, and maybe something else I'm forgetting.

Many DNS sinkhole apps, OSes, or systems can actually utilize Quad9 for your resolver while those systems also block ads. Below is my functional list of systems that I'm aware of, though I haven't tested everything. I believe all are considered FOSS, too. If you don't have a spare Raspberry Pi laying around, try running in HomeAssistant, Yunohost, ZimaOS (previously CasaOS), or others.

DNS sinkhole (Adblocking) apps:

1. Pihole
2. eBlocker
3. Technitium
4. AdGuard
5. uBlock Origin

Feel free to comment and add your own I'm maybe not aware of. I'm no software engineer, but I can read through some code, though not an expert, nor have combed through these personally. Usually I've tested/run at the recommendation of others over the years before my ban on Reddit (for shitting on AI).

Hope this helps!!

And your effort on providing the information is appreciated (I've already set up Quad9!).

Just one question:

What do you mean uBO can use Quad 9? Do you mean it can be set up as an alternate resolver instead of using the system? Because if so, that would be great for provisioning eg.: Firefox + uBO on corporate semi-locked platforms when I have to do so for support reasons. Is there a hidden config or something?

I've set up adguard as a docker container running on my homelab before but it felt like it slowed almost every device on my network to a crawl. The docker container was running on an ssd but the only thing I could think of was that it was slowing every device down because it was searching the list of disallowed domains each time for far too long. So I disabled it and went back to some "ad blocking" euro dns option on my router.

I am getting ready to bite the bullet again though now that discord is pushing there bullshit ads into the mobile app. Can't stand that shit and apparently all the "quest" ads can be blocked by DNS.

If you're talking about a browser, Firefox I believe can config custom DNS, but idk about it working alongside the extension if the extension needs to use its own. For the browser, I use PrivacyBadger from EFF for cookie and tracker blocking and PortAuthority which blocks LexisNexis port scanning on sites like eBay, etc. My adblock is done through pihole. Pihole uses Quad9 for the resolver.

What were you running it on? Pihole is basically the same thing and runs just fine on older raspberry pi hardware (I had it on a 2 or 3 before moving to an AdGuard VM).

It sounds like there may have been a configuration issue somewhere in your chain.

It was running on my old desktop, a good gaming computer a decade ago. So it should have been plenty fast enough I'd reckon. I have ran pihole successfully on a raspberry pi before so I may just look into setting that up again. I agree it was probably a configuration error on my end though.

Either one is definitely worth having. Good luck!

If anyone is interested, the CTO of Quad9 just did an interview with TechLore talking about their benefits and giving some laymen answers about DNS and encrypted DNS:

https://youtu.be/lEi71ukb5AQ
https://invidious.nerdvpn.de/watch?v=lEi71ukb5AQ

Actually, they named it wrong.. Its not unlock origin its uBlockDNS their website even mentions that they are not related to ublock origin lol.

All you had to was click and open the website (;

Admittedly never thought of it lol. I was too enthused by the potential of uBO adding such a feature.

Haha that's alright.. I was also confused and wondering since when did ublock origin start providing dns and that's the only reason I bothered to open the link.

Isn't it 1.1.1.1 enough ? :D

Don't mind me being naive, instead just teach me hahaha

From Cloudflares's https://one.one.one.one/: We believe privacy is a right. We won't sell your data, ever.

That tells me that they do gather data, but in the sense like Apple where they want all your data for themselves, vs actually being private.

A rep from Quad9 joked "we don't actually know how many people use quad 9 because we don't track or log any data."

Yes, for some 1.1.1.1 is WAY better than your ISP! But, being "good enough" doesn't always mean good.

Are those mentioned in the post depends on quad9?