From efd57f9cac908a0f68fb1967745966cd142a8298 Mon Sep 17 00:00:00 2001 From: Luca LeBlanc <67206487+yodaluca23@users.noreply.github.com> Date: Mon, 24 Feb 2025 07:54:37 -0600 Subject: [PATCH 1/3] Add Quad9 Non-Filtering HTTPS --- profiles/quad9-nofilter-https.mobileconfig | 53 ++++++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 profiles/quad9-nofilter-https.mobileconfig diff --git a/profiles/quad9-nofilter-https.mobileconfig b/profiles/quad9-nofilter-https.mobileconfig new file mode 100644 index 0000000..dadf43a --- /dev/null +++ b/profiles/quad9-nofilter-https.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + HTTPS + ServerAddresses + + 2620:fe::10 + 2620:fe::fe:10 + 9.9.9.10 + 149.112.112.10 + + ServerURL + https://dns10.quad9.net/dns-query + + PayloadDescription + Configures device to use Quad9 No Filter Encrypted DNS over HTTPS + PayloadDisplayName + Quad9 No Filter DNS over HTTPS + PayloadIdentifier + com.apple.dnsSettings.managed.1a93b54b-8541-4536-8302-c08159ca9184 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 5b67762c-3a11-47fd-ad22-1b7810cacfc1 + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the Quad9 No Filter DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + Quad9 No Filter Encrypted DNS over HTTPS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 79AE8914-AC0B-4EF9-9AA4-392584F35278 + PayloadVersion + 1 + + From 98447d54da76b14acb21b53ac6d6e097b7de6bee Mon Sep 17 00:00:00 2001 From: Luca LeBlanc <67206487+yodaluca23@users.noreply.github.com> Date: Mon, 24 Feb 2025 07:59:39 -0600 Subject: [PATCH 2/3] Add Quad9 Non-Filtering TLS --- profiles/quad9-nofilter-tls.mobileconfig | 53 ++++++++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 profiles/quad9-nofilter-tls.mobileconfig diff --git a/profiles/quad9-nofilter-tls.mobileconfig b/profiles/quad9-nofilter-tls.mobileconfig new file mode 100644 index 0000000..358ee5a --- /dev/null +++ b/profiles/quad9-nofilter-tls.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + TLS + ServerAddresses + + 2620:fe::10 + 2620:fe::fe:10 + 9.9.9.10 + 149.112.112.10 + + ServerName + dns10.quad9.net + + PayloadDescription + Configures device to use Quad9 No Filter Encrypted DNS over HTTPS + PayloadDisplayName + Quad9 No Filter DNS over TLS + PayloadIdentifier + com.apple.dnsSettings.managed.1a93b54b-8541-4536-8302-c08159ca9184 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 4d269f08-712f-4fd3-8c5e-273443747d0e" + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the Quad9 No Filter DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + Quad9 No Filter Encrypted DNS over TLS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 64289639-1FFE-484F-8133-E3350992F2CA + PayloadVersion + 1 + + From 82edc6a6800ebf7190fdfc4f325fbacda37c29b0 Mon Sep 17 00:00:00 2001 From: Luca LeBlanc <67206487+yodaluca23@users.noreply.github.com> Date: Mon, 24 Feb 2025 08:09:44 -0600 Subject: [PATCH 3/3] Update README with new Quad9 profiles --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 6634414..590b169 100644 --- a/README.md +++ b/README.md @@ -49,6 +49,7 @@ Check out [encrypted-dns over TOR](https://github.com/alecmuffett/dohot) if you | [OpenDNS FamilyShield][opendns] | πŸ‡ΊπŸ‡Έ | Yes | Operated by Cisco OpenDNS LLC. Blocks malware & adult content | [HTTPS][opendns-familyshield-profile-https-signed] | [HTTPS][opendns-familyshield-profile-https] | | [Quad9][quad9] | πŸ‡¨πŸ‡­ | Yes | Operated by Quad9 Foundation. Blocks malware | [HTTPS][quad9-profile-https-signed], [TLS][quad9-profile-tls-signed] | [HTTPS][quad9-profile-https], [TLS][quad9-profile-tls] | | [Quad9 w/ ECS][quad9] | πŸ‡¨πŸ‡­ | Yes | Operated by Quad9 Foundation. Supports ECS. Blocks malware | [HTTPS][quad9-ecs-profile-https-signed], [TLS][quad9-ecs-profile-tls-signed] | [HTTPS][quad9-ecs-profile-https], [TLS][quad9-ecs-profile-tls] | +| [Quad9 Unfiltered][quad9] | πŸ‡¨πŸ‡­ | No | Operated by Quad9 Foundation. | | [HTTPS][quad9-profile-unfiltered-https], [TLS][quad9-profile-unfiltered-tls] | | [Tiarap][tiarap] | πŸ‡ΈπŸ‡¬ πŸ‡ΊπŸ‡Έ | Yes | Operated by Tiarap Inc. Blocks ads, tracking, phising & malware | [HTTPS][tiarap-profile-https-signed], [TLS][tiarap-profile-tls-signed] | [HTTPS][tiarap-profile-https], [TLS][tiarap-profile-tls] | ## Installation @@ -188,6 +189,8 @@ New-Guid [quad9]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/ [quad9-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-https.mobileconfig [quad9-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-tls.mobileconfig +[quad9-profile-unfiltered-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-https.mobileconfig +[quad9-profile-unfiltered-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-tls.mobileconfig [quad9-ecs-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-https.mobileconfig [quad9-ecs-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-tls.mobileconfig [tiarap]: https://doh.tiar.app