Skip to content

Latest commit

 

History

History
431 lines (350 loc) · 42.7 KB

README.en.md

File metadata and controls

431 lines (350 loc) · 42.7 KB
Bahasa / Languages:

Indonesia English

BebasDNS / BebasID DNS is sponsored by:

Website Provider Atharva Website Provider Atharva Website Provider Cloud Atharva Website Provider Cloud Atharva
https://www.atharva.co.id/ https://www.atharva.cloud/
A freedom oriented and neutral VPS provider for your need
Starting from Rp. 50.000,00.
See the complete VPS packages.

Notice before using this project:

Plain DNS is only usable within allowlisted Indonesian and Singaporean IP range to prevent DDOS attack, if you need your IP address to be allowlisted or want to request a list of allowlisted IP, please contact us or join our Discord





For Internet Service Provider (ISP) that use Deep Packet Inspection (DPI), please use BebasIT / BebasID IT to bypass DPI. Or by using Internet Protocol version 6 (IPv6), to force the DNS to use it if the ISP supported it.

For Internet Service Provider (ISP) that block DoH/DoT domain like JSN, please contact us at dukungan[at]bebasid.com for alternative domain to be able to use BebasID DNS service.



Signs if the ISP is using DPI:

HTTP redirecting to lamanlabuh.aduankonten.id. While HTTPS throwing the ERR_CONNECTION_RESET/PR_CONNECT_RESET_ERROR.
HTTP Lamanlabuh Result HTTPS Connection Reset Result
See the complete information about DPI.

Tutorial how to bypass DPI or Lamanlabuh using Modem/Router or in Operating System (OS):

> Modem/Router:
OpenWRT MikroTik

> Operating System (OS):
Windows MacOS Linux


KINI Introducing:

bebasDNS Black Logo bebasDNS White Logo
Helping you surfing securely and without limit!





Community Server:

Discord
Join Discord BEBASID Join Grup Telegram BEBASID
Join WhatsApp
Join BEBASID Telegram Group


Donate Us:

Donasi BebasID Trakteer Donasi BebasID Saweria
Donasi BebasID Trakteer Donasi BebasID Saweria


Table of Content


BebasDNS / BebasID DNS

BebasDNS / BebasID DNS is an implementation of DNS resolver with ad-blocker and anti-tracking which running using VPS (Virtual Private Server) Atharva dan Alibaba with stable-enough uptime, does not record queries, and does not log for user privacy. We even support TLD from OpenNIC

We only record queries if there is a bug report. For example, if users can not access a website for troubleshooting purposes, and fixing that bug report.

Primary Server:

Default DNS

With malware blocking and anti-tracking. Does not block ads.

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS 1: tls://dns.bebasid.com,
2: tls://loadbalance.dns.bebasid.com
IPv4:
1: sdns://AwMAAAAAAAAAETEwMy44Ny42OC4xOTQ6ODUzAA9kbnMuYmViYXNpZC5jb20,
2: sdns://AwMAAAAAAAAAETM1LjIxOS42Ny4xNTA6ODUzABtsb2FkYmFsYW5jZS5kbnMuYmViYXNpZC5jb20
IPv6:
1: sdns://AwMAAAAAAAAAIVsyYTA2OjlmNDQ6ZjNlMDpiZWJhOjUxZDo6NTNdOjg1MwAPZG5zLmJlYmFzaWQuY29t
2: sdns://AwMAAAAAAAAAGlsyNjAwOjE5MDE6ODE3MDoyNjg6Ol06ODUzABtsb2FkYmFsYW5jZS5kbnMuYmViYXNpZC5jb20
853
DNS-over-HTTPS 1: https://dns.bebasid.com/dns-query,
2: https://loadbalance.dns.bebasid.com/dns-query
IPv4:
1: sdns://AgMAAAAAAAAADTEwMy44Ny42OC4xOTQAE2Rucy5iZWJhc2lkLmNvbTo0NDMKL2Rucy1xdWVyeQ,
2: sdns://AgMAAAAAAAAADTM1LjIxOS42Ny4xNTAAH2xvYWRiYWxhbmNlLmRucy5iZWJhc2lkLmNvbTo0NDMKL2Rucy1xdWVyeQ
IPv6:
1 sdns://AgMAAAAAAAAAHVsyYTA2OjlmNDQ6ZjNlMDpiZWJhOjUxZDo6NTNdABNkbnMuYmViYXNpZC5jb206NDQzCi9kbnMtcXVlcnk
2: sdns://AgMAAAAAAAAAFlsyNjAwOjE5MDE6ODE3MDoyNjg6Ol0AH2xvYWRiYWxhbmNlLmRucy5iZWJhc2lkLmNvbTo0NDMKL2Rucy1xdWVyeQ
443
DNSCrypt, IPv4 Provider:
2.dnscrypt-cert.dns.bebasid.com
IP: 103.87.68.194:8443
sdns://AQMAAAAAAAAAEjEwMy44Ny42OC4xOTQ6ODQ0MyAxXDKkdrOao8ZeLyu7vTnVrT0C7YlPNNf6trdMkje7QR8yLmRuc2NyeXB0LWNlcnQuZG5zLmJlYmFzaWQuY29t 8443
iOS/macOS, DoH IPv4/6 1: doh-default.dns.bebasid.com-signed.mobileconfig
2: doh-loadbalance.dns.bebasid.com-signed.mobileconfig
- 443
iOS/macOS, DoT IPv4/6 1: dot-default.dns.bebasid.com-signed.mobileconfig
2: dot-loadbalance.dns.bebasid.com-signed.mobileconfig
- 853

Alternative:

Antivirus

Specialized for malware blocking and without anti-tracking and adblocking.

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS antivirus.bebasid.com IPv4:
sdns://AwMAAAAAAAAAETEwMy44Ny42OC4xOTU6ODUzABVhbnRpdmlydXMuYmViYXNpZC5jb20,
IPv6:
sdns://AwMAAAAAAAAAI1syYTA2OjlmNDQ6ZjNlMDpiZWJhOjUxZDo6NTM1M106ODUzABVhbnRpdmlydXMuYmViYXNpZC5jb20
853
DNS-over-HTTPS https://antivirus.bebasid.com/dns-query IPv4:
sdns://AgMAAAAAAAAADTEwMy44Ny42OC4xOTUAGWFudGl2aXJ1cy5iZWJhc2lkLmNvbTo0NDMKL2Rucy1xdWVyeQ,
IPv6:
sdns://AgMAAAAAAAAAH1syYTA2OjlmNDQ6ZjNlMDpiZWJhOjUxZDo6NTM1M10AGWFudGl2aXJ1cy5iZWJhc2lkLmNvbTo0NDMKL2Rucy1xdWVyeQ
443
iOS/macOS, DoH IPv4/6 doh-malware.dns.bebasid.com-signed.mobileconfig - 443
iOS/macOS, DoT IPv4/6 dot-malware.dns.bebasid.com-signed.mobileconfig - 853

Unfiltered

Does not block malware, tracking, and ads

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS unfiltered.dns.bebasid.com IPv4:
sdns://AwcAAAAAAAAAETEwMy44Ny42OC4xOTM6ODUzABZ1bmZpbHRlcmVkLmJlYmFzaWQuY29t,
IPv6:
sdns://AwcAAAAAAAAAHFsyYTA2OjlmNDQ6ZjNlMDpkMDFjOjoyXTo4NTMAFnVuZmlsdGVyZWQuYmViYXNpZC5jb20
853
DNS-over-HTTPS https://dns.bebasid.com/unfiltered IPv4:
sdns://AgcAAAAAAAAADTEwMy44Ny42OC4xOTMAE2Rucy5iZWJhc2lkLmNvbTo0NDMLL3VuZmlsdGVyZWQ,
IPv6:
sdns://AgcAAAAAAAAAGFsyYTA2OjlmNDQ6ZjNlMDpkMDFjOjoyXQATZG5zLmJlYmFzaWQuY29tOjQ0MwsvdW5maWx0ZXJlZA
443
iOS/macOS, DoH IPv4/6 doh-unfiltered.dns.bebasid.com-signed.mobileconfig - 443
iOS/macOS, DoT IPv4/6 dot-unfiltered.dns.bebasid.com-signed.mobileconfig - 853

Family

Specialized for hate speech/gore, adult (18+), gambling, and other negative things.
BebasDNS Internet Sehat is an implementation of Internet Sehat without unnecessary blocking or censorship so you can surfing the internet comfortably. There are two blocklists used BebasDNS Internet Sehat: OISD NSFW and KINI Community Blocklist created by the BebasID community and Indonesian people.

You can join our Community on Discord or Telegram to contribute towards BebasDNS Internet Sehat blocklist. You can also open issue to add blocklist or to report false positive.

You can choose from 3 (three) variants: Family Default and Family Strict, which blocks DNS resolvers and VPN providers.

Family Default:

Specialized to block without DNS resolvers and VPN providers blocking.

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS internetsehat.bebasid.com IPv4:
sdns://AwMAAAAAAAAAETEwMy44Ny42OC4xOTY6ODUzABlpbnRlcm5ldHNlaGF0LmJlYmFzaWQuY29t,
IPv6:
sdns://AwMAAAAAAAAAI1syYTA2OjlmNDQ6ZjNlMDpiMDBiOmJlYmE6OjUxZF06ODUzABlpbnRlcm5ldHNlaGF0LmJlYmFzaWQuY29t
853
DNS-over-HTTPS https://internetsehat.bebasid.com/dns-query IPv4:
sdns://AgMAAAAAAAAADTEwMy44Ny42OC4xOTYAHWludGVybmV0c2VoYXQuYmViYXNpZC5jb206NDQzCi9kbnMtcXVlcnk,
IPv6:
sdns://AgMAAAAAAAAAH1syYTA2OjlmNDQ6ZjNlMDpiMDBiOmJlYmE6OjUxZF0AHWludGVybmV0c2VoYXQuYmViYXNpZC5jb206NDQzCi9kbnMtcXVlcnk
443
iOS/macOS, DoH IPv4/6 doh-familydefault.dns.bebasid.com-signed.mobileconfig - 443
iOS/macOS, DoT IPv4/6 dot-familydefault.dns.bebasid.com-signed.mobileconfig - 853

Family Adblock:

Also blocking ads.

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS family-adblock.bebasid.com 853
DNS-over-HTTPS https://internetsehat.bebasid.com/adblock 443

Family Strict:

Specialized to block with DNS resolvers and VPN providers blocking.

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS 1984.bebasid.com IPv4:
sdns://AwMAAAAAAAAAETEwMy44Ny42OC4xOTY6ODUzABAxOTg0LmJlYmFzaWQuY29t,
IPv6:
sdns://AwMAAAAAAAAAI1syYTA2OjlmNDQ6ZjNlMDpiMDBiOmJlYmE6OjUxZF06ODUzABAxOTg0LmJlYmFzaWQuY29t
853
DNS-over-HTTPS https://internetsehat.bebasid.com/dns-strict IPv4:
sdns://AgMAAAAAAAAADTEwMy44Ny42OC4xOTYAHWludGVybmV0c2VoYXQuYmViYXNpZC5jb206NDQzCy9kbnMtc3RyaWN0,
IPv6:
sdns://AgMAAAAAAAAAH1syYTA2OjlmNDQ6ZjNlMDpiMDBiOmJlYmE6OjUxZF0AHWludGVybmV0c2VoYXQuYmViYXNpZC5jb206NDQzCy9kbnMtc3RyaWN0
443
iOS/macOS, DoH IPv4/6 doh-familystrict.dns.bebasid.com-signed.mobileconfig - 443
iOS/macOS, DoT IPv4/6 dot-familystrict.dns.bebasid.com-signed.mobileconfig - 853

Custom Filter DNS

Specialized in the way that users can choose their own DNS blocking filter list according to their preferences.
Only blocking malware, tracking, and ads.

You can choose from 3 (three) variants: OISD Big, Hagezi Multi-Normal, and StevenBlack

OISD Big Filter:

Special variant for OISD blocklist filter.

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS oisd.dns.bebasid.com IPv4:
sdns://AwMAAAAAAAAAETEwMy44Ny42OC4xOTM6ODUzABRvaXNkLmRucy5iZWJhc2lkLmNvbQ,
IPv6:
sdns://AwMAAAAAAAAAHFsyYTA2OjlmNDQ6ZjNlMDpkMDFjOjozXTo4NTMAFG9pc2QuZG5zLmJlYmFzaWQuY29t
853
DNS-over-HTTPS https://dns.bebasid.com/dns-oisd IPv4:
sdns://AgMAAAAAAAAADTEwMy44Ny42OC4xOTMAE2Rucy5iZWJhc2lkLmNvbTo0NDMJL2Rucy1vaXNk,
IPv6:
sdns://AgMAAAAAAAAAGFsyYTA2OjlmNDQ6ZjNlMDpkMDFjOjozXQATZG5zLmJlYmFzaWQuY29tOjQ0MwkvZG5zLW9pc2Q
443
iOS/macOS, DoH IPv4/6 doh-oisdbig.dns.bebasid.com-signed.mobileconfig - 443
iOS/macOS, DoT IPv4/6 dot-oisdbig.dns.bebasid.com-signed.mobileconfig - 853

Hagezi Multi-Normal Filter:

Special variant for Hagezi blocklist filter.

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS hagezi.dns.bebasid.com IPv4:
sdns://AwMAAAAAAAAAETEwMy44Ny42OC4xOTM6ODUzABZoYWdlemkuZG5zLmJlYmFzaWQuY29t,
IPv6:
sdns://AwMAAAAAAAAAHFsyYTA2OjlmNDQ6ZjNlMDpkMDFjOjo0XTo4NTMAFmhhZ2V6aS5kbnMuYmViYXNpZC5jb20
853
DNS-over-HTTPS https://dns.bebasid.com/dns-hagezi IPv4:
sdns://AgMAAAAAAAAADTEwMy44Ny42OC4xOTMAE2Rucy5iZWJhc2lkLmNvbTo0NDMLL2Rucy1oYWdlemk,
IPv6:
sdns://AgMAAAAAAAAAGFsyYTA2OjlmNDQ6ZjNlMDpkMDFjOjo0XQATZG5zLmJlYmFzaWQuY29tOjQ0MwsvZG5zLWhhZ2V6aQ
443
iOS/macOS, DoH IPv4/6 doh-hagezimultinormal.dns.bebasid.com-signed.mobileconfig - 443
iOS/macOS, DoT IPv4/6 dot-hagezimultinormal.dns.bebasid.com-signed.mobileconfig - 853

StevenBlack Filter:

Special variant for StevenBlack blocklist filter.

Protocols IP/Domain Addresses DNSCrypt Stamps & Ports Supported Ports
DNS-over-TLS stevenblack.dns.bebasid.com IPv4:
sdns://AwMAAAAAAAAAETEwMy44Ny42OC4xOTM6ODUzABtzdGV2ZW5ibGFjay5kbnMuYmViYXNpZC5jb20,
IPv6:
sdns://AwMAAAAAAAAAHFsyYTA2OjlmNDQ6ZjNlMDpkMDFjOjo1XTo4NTMAG3N0ZXZlbmJsYWNrLmRucy5iZWJhc2lkLmNvbQ
853
DNS-over-HTTPS https://dns.bebasid.com/dns-stevenblack IPv4:
sdns://AgMAAAAAAAAADTEwMy44Ny42OC4xOTMAE2Rucy5iZWJhc2lkLmNvbTo0NDMQL2Rucy1zdGV2ZW5ibGFjaw,
IPv6:
sdns://AgMAAAAAAAAAGFsyYTA2OjlmNDQ6ZjNlMDpkMDFjOjo1XQATZG5zLmJlYmFzaWQuY29tOjQ0MxAvZG5zLXN0ZXZlbmJsYWNr
443
iOS/macOS, DoH IPv4/6 doh-stevenblack.dns.bebasid.com-signed.mobileconfig - 443
iOS/macOS, DoT IPv4/6 dot-stevenblack.dns.bebasid.com-signed.mobileconfig - 853

Filter (Ad-Blocker & Anti-Tracking):

A filter is a mechanism for blocking access to certain content on the Internet. When going to a website, the browser sends the website name (for example, google.com) to a DNS server. The DNS server answers with the IP address of the server hosting this website.

DNS Blocklist

DNS Blocklists are used to block domains according to each DNS resolver specializations.

Blocklists - For Default
BebasDNS's Custom Filtering Blocklists Rules
OISD Big
URLHaus
Blocklists - For Antivirus Variant
BebasDNS's Custom Filtering Blocklists Rules
URLHaus
Hagezi Threat Blocking
Blocklists - For Healthy Internet Variant
List of Filter used by Healthy Internet DNS
URLHaus
OISD NSFW
Hagezi Gambling Blocklist

DNS Allowlist

DNS Allowlists are used to allow domains that blocklists would otherwise block.

Allowlists - For Default DNS
BebasDNS's Custom Filtering Whitelists Rules
BebasDNS's Whitelists

Maintenance:

Server Status

Public service status statistic can be seen at BebasDNS/BebasID DNS Status. List of server status:

Security Test

BebasDNS / BebasID DNS has been tested for security and graded according to website:

SSL Sites Grade Latest Test Date
SSL Security Test ImmuniWeb DoH A+ 17 Desember 2023
SSL Security Test ImmuniWeb TLS A+ 17 Desember 2023
SSL Labs IPv4/IPv6 A+ 17 Desember 2023
SSL Labs IPv6 A+ 17 Desember 2023
Is your site IPv6 ready? PASS -

List of Tutorials and Questions:

How to Use

Please follow the tutorial below:

Operating System Modem/Router Mobile DNS/DPI Tool
Microsoft Windows 11 MikroTik iOS Plain DNS (Port Alternatif)
Apple macOS OpenWRT Android DNS-over-HTTPS
Simple DNSCrypt (Windows) DNS-over-TLS
AdGuard Home
Pi-Hole
DNSCrypt-Proxy
GoodbyeDPI

Contributing, Question and Request

If you have any requests or bug reports, please open a new issue.

Frequently Asked Questions

If you have any problems using BebasDNS / BebasID DNS, please head to Discord or send email to [email protected] with the subject BebasDNS / BebasID DNS: [Your problem/question]

Donate us:

Help us maintain this project and keep BebasDNS / BebasID DNS VPS running by donating.

☕ Buy us a coffee: [v]
Donasi BebasID Trakteer Donasi BebasID Saweria
Donasi BebasID Trakteer Donasi BebasID Saweria

License:

BebasDNS / BebasID DNS is licensed under MPL-2.0 License.

Terms and Conditions:

By using this service, you are deemed to have read, understood, and agreed to all the rules that we have made and you accept all the consequences that will arise. If you do not agree to accept the existing rules, then you are not allowed to use this service.

For more information about the rules, see them on the RULES here.


Thank you for using BebasDNS / BebasID DNS service.
Enjoy your internet access freedom, forever!

Share our project!


bebasDNS Black Logo bebasDNS White Logo
KINI
Komunitas Internet Netral Indonesia