[9216]

I hope it is ok to start a new topic. Otherwise I request mods to move it to an appropriate thread.

I am looking for clarifications on :

1. Is it possible to change the dns server for mobile data connection in an android phone? Search on web returns hundreds of results, but they all talk about setting dns for wifi connections.

2. How can I find the dns server I am currently using? I mean something like whatismyip.com (for ip address) to show the dns server in use. Checking the phone settings is not what I mean.

Thanks

[lxskllr]

On recent Android versions, you can do that. Works over mobile data. Go to network and internet, then private dns. Enter the hostname and you're done

[JonSnow]

You can change the DNS in network settings. It applies for both wifi and mobile data.

[9216]

Thanks lxskllr andJonSnow.
I am not sure that works. I have set cloudfare (1.1.1.1) as my dns. On checking network info, this is what I see.

[hserus]

Cellular connections will automatically override the dns settings and this cannot be changed. DNS for your WiFi is another matter altogether.

[ph03n!x]

Originally Posted by 9216

Thanks lxskllr andJonSnow.
I am not sure that works. I have set cloudfare (1.1.1.1) as my dns. On checking network info, this is what I see.

First off, test your DNS at https://www.dnsleaktest.com/ and not in network info. Network info will show what the DHCP server assigned when your phone connected to the network, and not your private DNS config

Secondly, private DNS for cloudflare is not 1.1.1.1, it is 1dot1dot1dot1.cloudflare-dns.com

[hserus]

Originally Posted by ph03n!x

First off, test your DNS at https://www.dnsleaktest.com/ and not in network info. Network info will show what the DHCP server assigned when your phone connected to the network, and not your private DNS config

Secondly, private DNS for cloudflare is not 1.1.1.1, it is 1dot1dot1dot1.cloudflare-dns.com

Yes that 1dot1dot etc is the hostname that maps to the IP 1.1.1.1

You'll still set the IP as your nameserver, rather than the hostname because, to actually resolve the hostname 1dot1dot1, you need to look it up against a nameserver .. becomes rather chicken and egg when you have to resolve the nameserver before attempting a dns resolution. Which is why the IP is specified instead.

[SunnyBoi]

Originally Posted by lxskllr

On recent Android versions, you can do that. Works over mobile data. Go to network and internet, then private dns. Enter the hostname and you're done

If anyone is going this route, might as well install AdAway. Allows you to customise your DNS and provide systemwide ad blocking.

https://github.com/AdAway/AdAway

AdAway is mandatory on all my + family phones.

[anandbangalore]

Originally Posted by 9216

I hope it is ok to start a new topic. Otherwise I request mods to move it to an appropriate thread.

I am looking for clarifications on :

1. Is it possible to change the dns server for mobile data connection in an android phone? Search on web returns hundreds of results, but they all talk about setting dns for wifi connections.

2. How can I find the dns server I am currently using? I mean something like whatismyip.com (for ip address) to show the dns server in use. Checking the phone settings is not what I mean.

Thanks

Googles 'Private DNS' does exactly that - where you can control what dns service to use. The DNS service you choose needs to support 'dns over tls'. A good starting point is CloudFlares multiple services
1. PRIVATE DNS https://developers.cloudflare.com/1....setup/android/
2. VPN - 1.1.1.1 available in the app Store.
3. Privacy for home incl Porn content filtering -

https://youtu.be/tEuucdHnXic?si=GthGmPdIXojvXQDv

[anandbangalore]

Originally Posted by SunnyBoi

If anyone is going this route, might as well install AdAway. Allows you to customise your DNS and provide systemwide ad blocking.

https://github.com/AdAway/AdAway

AdAway is mandatory on all my + family phones.

I don't mean to start a side topic than what OP asked, but 'thoroughly trust' Anyone in the way of your family's devices and the Internet. Including your WiFi router, the dns service provider, or any 'VPN' styled apps installed on your devices.

[atulsian]

You have many options to change DNS for both wifi and mobile.

1) Installing app and setting up DNS. Cloudfare warp, intra( you can choose your DNS provider)

2) On Android, you can set it in Private DNS. Search for DNS in settings. It works for both mobile and wifi.

I personally use nextdns at router level and tailscale app on Android and iOS device for DNS blocking.

[ph03n!x]

Originally Posted by hserus

Yes that 1dot1dot etc is the hostname that maps to the IP 1.1.1.1

You'll still set the IP as your nameserver, rather than the hostname because, to actually resolve the hostname 1dot1dot1, you need to look it up against a nameserver .. becomes rather chicken and egg when you have to resolve the nameserver before attempting a dns resolution. Which is why the IP is specified instead.

Hey! You're talking about traditional DNS. What I'm specifying is Private DNS - aka DNS-Over-TLS - as a easy way to change the DNS server across various OS (incl. Android 9+ and iOS 14+)

Traditional DNS server queries are unencrypted UDP queries - anyone from the ISP to "interested parties" can monitor all DNS queries for whatever reasons and purposes

With private DNS setup, Android will lookup the Private DNS server address through traditional (unencrypted) DNS when the mobile data (or WI-FI) connection is established. After that, it'll route all DNS queries this private server with TLS encryption.

Some more resources for your reference on this topic -

Cloudflare blog.
DNS vs. Encrypted DNS
iOS configuration for encrypted DNS
Google (8.8 8.8 - equivalent) encrypted DNS

If you specify a traditional DNS server address in Private DNS, there is no encryption (I have not checked if the query actually goes to the server name specified here or to the ISP).

This is what my setup looks like -



Try one of this server in your mobile phone and visit https://dnsleaktest.com/ to check which DNS server is used (do a before/ after).

This is without private DNS (I'm currently traveling, and this shows my ISP's DNS config) -



This is with Private DNS enabled -



My home router (running OpenWRT) has DNS-over-TLS enabled through dnscrypt for the same objective - resolve the secure DNS server with ISP or custom (unencrypted) DNS, and then route all DNS traffic through secure DNS...

[attinder]

On Android phones, Settings > Network> Private DNS
Enter " 1dot1dot1dot1.cloudflare-dns.com " or " dns.adguard.com "

On iOS devices, use this tool "
https://simpledns.plus/apple-dot-doh " to create DNS profile.

[9216]

Thanks for the very useful responses. The site https://dnsleaktest.com/ is exactly what I was looking for in my original query. I can now verify that setting private dns indeed works for wifi as well as mobile data.

Taking the virtual vpn route to set dns is not convenient for me, because I am using Netguard to limit internet access to selected apps (it uses virtual vpn). I understand that only one virtual vpn can be active at a time.