Table of Contents
Upstream DNS Providers
Your CSB uses an external “upstream” DNS servers to resolve DNS queries.
Several of these offer privacy by never logging your IP address or any other personal identifiable information (PII).
Several of these also offer Malware and Adult content blocking. They typically are not as encompassing as CSB for these categories, but they are excellent for adding an additional layer of protection.
All of these are free to use.
We strongly recommend Quad9 for use as your CSB upstream DNS server.
Quad9 ( Our #1 Pick) ⭐️⭐️⭐️
Quad9 is secure and fast, however they do not offer adult content filtering. If you do not care about the upstream DNS server blocking adult content, we recommend Quad9. Otherwise we recommend using the CloudFlare Malware and Adult Content option.
Filtered DNSSEC
Malware blocking, secure DNSSEC
We recommend these settings for general use
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 9.9.9.9 | 149.112.112.112 | 2620:fe::fe | 2620:fe::9 |
Open
Not Filtered, no DNSSEC or EDNS
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 9.9.9.10 | 149.112.112.10 | 620:fe::10 | 620:fe::fe:10 |
Filtered EDNS, DNSSEC
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 9.9.9.11 | 149.112.112.11 | 620:fe::11 | 620:fe::fe:11 |
CloudFlare DNS (Our #2 Pick) ⭐️
CloudFlare will never log your IP address and are rated as the fastest DNS service in the world. If extra adult content blocking is important to you for your upstream DNS server, we recommend using the CloudFlare Malware and Adult Content option.
Please note, we have encountered several false positives using the CloudFlare malware blocking version. One of these was eBay! If you experience website blocking, it may actually be blocked by Cloudflare and not your CSB.
Open - No Blocking
We recommend you use one of the filtered options below.
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 1.1.1.1 | 1.0.0.1 | 2606:4700:4700::1111 | 2606:4700:4700::1001 |
Malware Blocking Only
We recommend these settings for general use
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 1.1.1.2 | 1.0.0.2 | 2606:4700:4700::1112 | 2606:4700:4700::1002 |
Malware and Adult Content
We recommend these settings for kids and families.
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 1.1.1.3 | 1.0.0.3 | 2606:4700:4700::1113 | 2606:4700:4700::1003 |
Google DNS
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 8.8.8.8 | 8.8.4.4 | 2620:119:35::35 | 2620:119:53::53 |
OpenDNS Home (Cisco)
Open
Includes a phishing filter.
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 208.67.222.222 | 208.67.220.220 | 2620:119:35::35 | 2620:119:53::53 |
FamilyShield
Includes pornography, tasteless, and sexuality filters categories, as well as proxies and anonymizers, phishing and some malware.
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 208.67.222.123 | 208.67.220.123 | - | - |
Level3 DNS
No filtering - Redirects mistyped URLs to a search.
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 4.2.2.1 | 4.2.2.2 | - | - |
Comodo Secure DNS
Filters “harmful” websites.
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 8.26.56.26 | 8.20.247.20 | - | - |
DNS.WATCH
No filtering
| Primary IPv4 | Secondary IPv4 | Primary IPv6 | Secondary IPv6 |
|---|---|---|---|
| 84.200.69.80 | 84.200.70.40 | 2001:1608:10:25::1c04:b12f | 2001:1608:10:25::9249:d69b (IPv6) |