From 13db88a759a0516c79ad3aac61d9439eebe91643 Mon Sep 17 00:00:00 2001 From: Tobias <5702338+T0biii@users.noreply.github.com> Date: Wed, 10 Sep 2025 20:14:14 +0000 Subject: [PATCH] add ffmuc dns --- README.cmn-CN.md | 4 +++ README.cmn-TW.md | 4 +++ README.md | 4 +++ profiles/ffmucdns-https.mobileconfig | 53 ++++++++++++++++++++++++++++ profiles/ffmucdns-tls.mobileconfig | 53 ++++++++++++++++++++++++++++ providers/36-ffmuc-dns.json | 51 ++++++++++++++++++++++++++ 6 files changed, 169 insertions(+) create mode 100644 profiles/ffmucdns-https.mobileconfig create mode 100644 profiles/ffmucdns-tls.mobileconfig create mode 100644 providers/36-ffmuc-dns.json diff --git a/README.cmn-CN.md b/README.cmn-CN.md index 0a50f32..617b0da 100644 --- a/README.cmn-CN.md +++ b/README.cmn-CN.md @@ -47,6 +47,7 @@ | [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | | [HTTPS][dns4eu-profile-protective-child-ads-https], [TLS][dns4eu-profile-protective-child-ads-tls] | | [DNSPod 公共 DNS][dnspod-dns] | 🇨🇳 | 否 | 由腾讯公司 DNSPod 运营 | [HTTPS][dnspod-dns-profile-https-signed], [TLS][dnspod-dns-profile-tls-signed] | [HTTPS][dnspod-dns-profile-https], [TLS][dnspod-dns-profile-tls] | | [FDN][fdn-dns] | 🇫🇷 | 否 | 由法国数据网络运营 | | [HTTPS][fdn-https], [TLS][fdn-tls] | +| [FFMUC-DNS][ffmucdns] | 🇩🇪 | 否 | FFMUC free DNS servers provided by Freifunk München. | | [HTTPS][ffmuc-profile-https], [TLS][ffmuc-profile-tls] | | [Google 公共 DNS][google-dns] | 🇺🇸 | 否 | 由谷歌公司运营 | [HTTPS][google-dns-profile-https-signed], [TLS][google-dns-profile-tls-signed] | [HTTPS][google-dns-profile-https], [TLS][google-dns-profile-tls] | | [keweonDNS][keweondns] | 🇩🇪 | 否 | 由 Aviontex 运营，拦截广告和跟踪器 | [HTTPS][keweondns-profile-https-signed], [TLS][keweondns-profile-tls-signed] | [HTTPS][keweondns-profile-https], [TLS][keweondns-profile-tls] | | [Mullvad DNS][mullvad-dns] | 🇸🇪 | 是 | 由 Mullvad VPN AB 运营 | [HTTPS][mullvad-dns-profile-https-signed] | [HTTPS][mullvad-dns-profile-https] | @@ -203,6 +204,9 @@ New-Guid [dns4eu-protective-child-ads]: https://www.joindns4.eu/for-public [dns4eu-profile-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig [dns4eu-profile-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig +[ffmucdns]: https://ffmuc.net/wiki/knb:dohdot_en +[ffmuc-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-https.mobileconfig +[ffmuc-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-tls.mobileconfig [360-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-https.mobileconfig [adguard-dns-default-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig [adguard-dns-default-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig diff --git a/README.cmn-TW.md b/README.cmn-TW.md index 77ae193..795d0ea 100644 --- a/README.cmn-TW.md +++ b/README.cmn-TW.md @@ -47,6 +47,7 @@ | [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | | [HTTPS][dns4eu-profile-protective-child-ads-https], [TLS][dns4eu-profile-protective-child-ads-tls] | | [DNSPod 公共 DNS][dnspod-dns] | 🇨🇳 | 否 | 由騰訊公司 DNSPod 營運 | [HTTPS][dnspod-dns-profile-https-signed], [TLS][dnspod-dns-profile-tls-signed] | [HTTPS][dnspod-dns-profile-https], [TLS][dnspod-dns-profile-tls] | | [FDN][fdn-dns] | 🇫🇷 | 否 | 由法國資料網路營運 | | [HTTPS][fdn-https], [TLS][fdn-tls] | +| [FFMUC-DNS][ffmucdns] | 🇩🇪 | 否 | FFMUC free DNS servers provided by Freifunk München. | | [HTTPS][ffmuc-profile-https], [TLS][ffmuc-profile-tls] | | [Google 公共 DNS][google-dns] | 🇺🇸 | 否 | 由谷歌公司營運 | [HTTPS][google-dns-profile-https-signed], [TLS][google-dns-profile-tls-signed] | [HTTPS][google-dns-profile-https], [TLS][google-dns-profile-tls] | | [keweonDNS][keweondns] | 🇩🇪 | 否 | 由 Aviontex 營運，阻擋廣告和追蹤器 | [HTTPS][keweondns-profile-https-signed], [TLS][keweondns-profile-tls-signed] | [HTTPS][keweondns-profile-https], [TLS][keweondns-profile-tls] | | [Mullvad DNS][mullvad-dns] | 🇸🇪 | 是 | 由 Mullvad VPN AB 營運 | [HTTPS][mullvad-dns-profile-https-signed] | [HTTPS][mullvad-dns-profile-https] | @@ -203,6 +204,9 @@ New-Guid [dns4eu-protective-child-ads]: https://www.joindns4.eu/for-public [dns4eu-profile-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig [dns4eu-profile-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig +[ffmucdns]: https://ffmuc.net/wiki/knb:dohdot_en +[ffmuc-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-https.mobileconfig +[ffmuc-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-tls.mobileconfig [360-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-https.mobileconfig [adguard-dns-default-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig [adguard-dns-default-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig diff --git a/README.md b/README.md index 5efe541..36482d9 100644 --- a/README.md +++ b/README.md @@ -48,6 +48,7 @@ Check out [encrypted-dns over TOR](https://github.com/alecmuffett/dohot) if you | [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | | [HTTPS][dns4eu-profile-protective-child-ads-https], [TLS][dns4eu-profile-protective-child-ads-tls] | | [DNSPod Public DNS][dnspod-dns] | 🇨🇳 | No | Operated by DNSPod Inc., a Tencent Cloud Company | [HTTPS][dnspod-dns-profile-https-signed], [TLS][dnspod-dns-profile-tls-signed] | [HTTPS][dnspod-dns-profile-https], [TLS][dnspod-dns-profile-tls] | | [FDN][fdn-dns] | 🇫🇷 | No | Operated by French Data Network | | [HTTPS][fdn-https], [TLS][fdn-tls] | +| [FFMUC-DNS][ffmucdns] | 🇩🇪 | No | FFMUC free DNS servers provided by Freifunk München. | | [HTTPS][ffmuc-profile-https], [TLS][ffmuc-profile-tls] | | [Google Public DNS][google-dns] | 🇺🇸 | No | Operated by Google LLC | [HTTPS][google-dns-profile-https-signed], [TLS][google-dns-profile-tls-signed] | [HTTPS][google-dns-profile-https], [TLS][google-dns-profile-tls] | | [keweonDNS][keweondns] | 🇩🇪 | No | Operated by Aviontex. Blocks ads & tracking | [HTTPS][keweondns-profile-https-signed], [TLS][keweondns-profile-tls-signed] | [HTTPS][keweondns-profile-https], [TLS][keweondns-profile-tls] | | [Mullvad DNS][mullvad-dns] | 🇸🇪 | Yes | Operated by Mullvad VPN AB | [HTTPS][mullvad-dns-profile-https-signed] | [HTTPS][mullvad-dns-profile-https] | @@ -217,6 +218,9 @@ New-Guid [dns4eu-protective-child-ads]: https://www.joindns4.eu/for-public [dns4eu-profile-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig [dns4eu-profile-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig +[ffmucdns]: https://ffmuc.net/wiki/knb:dohdot_en +[ffmuc-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-https.mobileconfig +[ffmuc-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-tls.mobileconfig [360-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-https.mobileconfig [adguard-dns-default-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig [adguard-dns-default-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig diff --git a/profiles/ffmucdns-https.mobileconfig b/profiles/ffmucdns-https.mobileconfig new file mode 100644 index 0000000..8e64cc9 --- /dev/null +++ b/profiles/ffmucdns-https.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + HTTPS + ServerAddresses + + 2001:678:e68:f000:: + 2001:678:ed0:f000:: + 5.1.66.255 + 185.150.99.255 + + ServerURL + https://doh.ffmuc.net/dns-query + + PayloadDescription + Configures device to use FFMUC-DNS Encrypted DNS over HTTPS + PayloadDisplayName + FFMUC DNS over HTTPS + PayloadIdentifier + com.apple.dnsSettings.managed.3b0c0dcc-d377-48fb-a222-019f42867461 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + a9167fd8-e278-4c62-8c89-12f171617446 + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the FFMUC DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + FFMUC Encrypted DNS over HTTPS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + f9186f3a-edbc-422e-9d3c-31956c67fd14 + PayloadVersion + 1 + + diff --git a/profiles/ffmucdns-tls.mobileconfig b/profiles/ffmucdns-tls.mobileconfig new file mode 100644 index 0000000..145a4be --- /dev/null +++ b/profiles/ffmucdns-tls.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + TLS + ServerAddresses + + 2001:678:e68:f000:: + 2001:678:ed0:f000:: + 5.1.66.255 + 185.150.99.255 + + ServerName + dot.ffmuc.net + + PayloadDescription + Configures device to use FFMUC-DNS Encrypted DNS over TLS + PayloadDisplayName + FFMUC DNS over TLS + PayloadIdentifier + com.apple.dnsSettings.managed.69866750-1580-4f0f-90db-bd10da1ce3df + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 35022acf-0422-4523-a0aa-41f0747037ad + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the FFMUC DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + FFMUC Encrypted DNS over TLS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 386ffdff-bb84-499f-bfb4-10b4ea229ee8 + PayloadVersion + 1 + + diff --git a/providers/36-ffmuc-dns.json b/providers/36-ffmuc-dns.json new file mode 100644 index 0000000..53ae2ed --- /dev/null +++ b/providers/36-ffmuc-dns.json @@ -0,0 +1,51 @@ +{ + "id": "ffmucdns", + "profile": "ffmuc-profile", + "website": "https://ffmuc.net/wiki/knb:dohdot_en", + "region": "DE", + "censorship": false, + "names": { + "en": "FFMUC-DNS", + "cmn-CN": "FFMUC-DNS", + "cmn-TW": "FFMUC-DNS" + }, + "notes": { + "en": "FFMUC free DNS servers provided by Freifunk München.", + "cmn-CN": "", + "cmn-TW": "" + }, + "https": { + "name": "FFMUC-DNS Encrypted DNS over HTTPS", + "fullName": "FFMUC DNS", + "topName": "FFMUC Encrypted DNS over HTTPS", + "PayloadDisplayName": "FFMUC DNS over HTTPS", + "DNSProtocol": "HTTPS", + "ServerURLOrName": "https://doh.ffmuc.net/dns-query", + "ServerAddresses": [ + "2001:678:e68:f000::", + "2001:678:ed0:f000::", + "5.1.66.255", + "185.150.99.255" + ], + "PayloadIdentifier": "com.apple.dnsSettings.managed.3b0c0dcc-d377-48fb-a222-019f42867461", + "PayloadUUID": "a9167fd8-e278-4c62-8c89-12f171617446", + "TopPayloadUUID": "f9186f3a-edbc-422e-9d3c-31956c67fd14" + }, + "tls": { + "name": "FFMUC-DNS Encrypted DNS over TLS", + "fullName": "FFMUC DNS", + "topName": "FFMUC Encrypted DNS over TLS", + "PayloadDisplayName": "FFMUC DNS over TLS", + "DNSProtocol": "TLS", + "ServerURLOrName": "dot.ffmuc.net", + "ServerAddresses": [ + "2001:678:e68:f000::", + "2001:678:ed0:f000::", + "5.1.66.255", + "185.150.99.255" + ], + "PayloadIdentifier": "com.apple.dnsSettings.managed.69866750-1580-4f0f-90db-bd10da1ce3df", + "PayloadUUID": "35022acf-0422-4523-a0aa-41f0747037ad", + "TopPayloadUUID": "386ffdff-bb84-499f-bfb4-10b4ea229ee8" + } +}