Skip to content

Latest commit

 

History

History
409 lines (296 loc) · 22.5 KB

README.en.md

File metadata and controls

409 lines (296 loc) · 22.5 KB

Bahasa / Language

Indonesia English

bebasDNS Black Logo bebasDNS White Logo
Helping you surf securely and without limit!


Static Badge Static Badge
Discord Static Badge Static Badge
Static Badge Static Badge

Notice Regarding DPI

Click to open the announcement:

Plain DNS is only usable within allowlisted Indonesian and Singaporean IP range to prevent DDOS attacks, if you need your IP address to be allowlisted or want to request a list of allowlisted IPs, please get in touch with us or join our Discord.

For Internet Service Providers (ISP) that use Deep Packet Inspection (DPI), please use BebasIT / BebasID IT to bypass DPI. Or by using Internet Protocol version 6 (IPv6), to force the DNS to use it if the ISP supports it.

For Internet Service Providers (ISP) that block DoH/DoT domains, please get in touch with us at dukungan@bebasid.com for the alternative domain to be able to use BebasID DNS service.

Signs if the ISP is using DPI:

HTTP redirecting to lamanlabuh.aduankonten.id While HTTPS throwing the ERR_CONNECTION_RESET/PR_CONNECT_RESET_ERROR
HTTP Lamanlabuh Result HTTPS Connection Reset Result

See the complete information about DPI.

Tutorial on how to bypass DPI or Lamanlabuh using a Modem/Router or in an Operating System (OS):

Modem/Router:

OpenWRT MikroTik

Operating System (OS):

Windows MacOS Linux

Sponsor

A freedom-oriented and neutral VPS provider for your needs.

atharva.co.id

Table of Contents

BebasDNS / BebasID DNS

BebasDNS / BebasID DNS is an implementation of DNS resolver with ad-blocker and anti-tracking with stable-enough uptime, does not record queries, and does not log for user privacy.

We only record queries if there is a bug report. For example, if users can not access a website for troubleshooting purposes, fix that bug report.

Primary Server

Default DNS

Blocking malware, trackers, and ads.

Protocols Addresses Ports
DNS-over-TLS dns.bebasid.com 853
DNS-over-HTTPS https://dns.bebasid.com/dns-query 443
DoT-iOS/macOS dot-default.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-default.dns.bebasid.com-signed.mobileconfig -

Alternative

Antivirus

Specialized for malware blocking, without trackers blocking, and without adblocking.

Protocols Addresses Ports
DNS-over-TLS antivirus.bebasid.com 853
DNS-over-HTTPS https://antivirus.bebasid.com/dns-query 443
DoT-iOS/macOS dot-malware.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-malware.dns.bebasid.com-signed.mobileconfig -

Unfiltered

Does not block malware, trackers, and ads.

Protocols Addresses Ports
DNS-over-TLS unfiltered.dns.bebasid.com 853
DNS-over-HTTPS https://dns.bebasid.com/unfiltered 443
DoT-iOS/macOS dot-unfiltered.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-unfiltered.dns.bebasid.com-signed.mobileconfig -

Family

Specialized for hate speech/gore, adult (18+), gambling, and other negative things.
BebasDNS Internet Sehat is an implementation of Internet Sehat without unnecessary blocking or censorship so you can surf the internet comfortably. There are two blocklists used by BebasDNS Internet Sehat: OISD NSFW and KINI Community Blocklist created by the BebasID community and Indonesian people.

You can join our Community on Discord or Telegram to contribute towards BebasDNS Internet Sehat blocklist. You can also open an issue to add a blocklist or to report false positives.

You can choose from 3 (three) variants: Family Default and Family Strict, which block DNS resolvers and VPN providers.

Family Default:

Default variant.

Protocols Addresses Ports
DNS-over-TLS internetsehat.dns.bebasid.com 853
DNS-over-HTTPS https://internetsehat.bebasid.com/dns-query 443
DoT-iOS/macOS dot-familydefault.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-familydefault.dns.bebasid.com-signed.mobileconfig -

Family Adblock:

With adblocking.

Protocols Addresses Ports
DNS-over-TLS family-adblock.bebasid.com 853
DNS-over-HTTPS https://internetsehat.bebasid.com/adblock 443
DoT-iOS/macOS dot-familyadblock.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-familyadblock.dns.bebasid.com-signed.mobileconfig -

Family Strict:

Specialized for blocking alternative DNS resolvers and VPN providers.

Protocols Addresses Ports
DNS-over-TLS 1984.bebasid.com 853
DNS-over-HTTPS https://internetsehat.bebasid.com/dns-strict 443
DoT-iOS/macOS dot-familystrict.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-familystrict.dns.bebasid.com-signed.mobileconfig -

Custom Filter DNS

Specialized in the way that users can choose their own DNS blocking filter list according to their preferences.
Only blocking malware, tracking, and ads.

You can choose from 3 (three) variants: OISD Big, Hagezi Multi-Normal, and StevenBlack

OISD Big Filter:

Specialized variant for OISD blocklist filter.

Protocols Addresses Ports
DNS-over-TLS oisd.dns.bebasid.com 853
DNS-over-HTTPS https://dns.bebasid.com/dns-oisd 443
DoT-iOS/macOS dot-oisdbig.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-oisdbig.dns.bebasid.com-signed.mobileconfig -

Hagezi Multi-Normal Filter:

Specialized variant for Hagezi blocklist filter.

Protocols Addresses Ports
DNS-over-TLS hagezi.dns.bebasid.com 853
DNS-over-HTTPS https://dns.bebasid.com/dns-hagezi 443
DoT-iOS/macOS dot-hagezimultinormal.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-hagezimultinormal.dns.bebasid.com-signed.mobileconfig -

StevenBlack Filter:

Specialized variant for StevenBlack blocklist filter.

Protocols Addresses Ports
DNS-over-TLS stevenblack.dns.bebasid.com 853
DNS-over-HTTPS https://dns.bebasid.com/dns-stevenblack 443
DoT-iOS/macOS dot-stevenblack.dns.bebasid.com-signed.mobileconfig -
DoH-iOS/macOS doh-stevenblack.dns.bebasid.com-signed.mobileconfig -

Filter (Ad-Blocker & Anti-Tracking)

A filter is a mechanism for blocking access to certain content on the Internet. When going to a website, the browser sends the website name (for example, google.com) to a DNS server. The DNS server answers with the IP address of the server hosting this website.

DNS Blocklists

Used to block domains according to DNS variants.

Blocklists - For Default
BebasDNS's Custom Filtering Blocklists Rules
OISD Big
URLHaus
Blocklists - For Antivirus Variant
BebasDNS's Custom Filtering Blocklists Rules
URLHaus
Hagezi Threat Blocking
Blocklists - For Healthy Internet Variant
List of Filter used by Healthy Internet DNS
URLHaus
OISD NSFW
Hagezi Gambling Blocklist

DNS Allowlists

Used to allow domains that were originally blocked by blocklists.

Allowlists - For Default DNS
BebasDNS's Custom Filtering Allowlists Rules
BebasDNS's Allowlists

Maintenance

Server Status

Public service statistics can be seen on Status BebasDNS/BebasID DNS. List of server status:

Security Test

BebasDNS / BebasID DNS has been tested for security and graded according to the website:

SSL Sites Grade Latest Update Date
SSL Security Test ImmuniWeb DoH A+ 17 December 2023
SSL Security Test ImmuniWeb TLS A+ 17 December 2023
SSL Labs IPv4/IPv6 A+ 17 December 2023
SSL Labs IPv6 A+ 17 December 2023
Is your site IPv6 ready? PASS -

List of Tutorials and Questions

How to Use

Please follow these tutorials:

Operating System Modem/Router Mobile DNS Method DPI Tool
Microsoft Windows 11 MikroTik Android Plain DNS (Alternative Port) GoodbyeDPI
Apple macOS OpenWRT iOS DNS-over-HTTPS GreenTunnel
DNS-over-TLS PowerTunnel
AdGuard Home Zapret
Pi-Hole Geneva
DNSCrypt-Proxy
Simple DNSCrypt (Windows)

Contributing, Question and Request

If you have any requests or bug reports, please open a new issue.

Frequently Asked Questions

If you have any problems using BebasDNS / BebasID DNS, please head to Discord or send email to dukungan@bebasid.com with the subject BebasDNS / BebasID DNS: [Your problem/question]

Donate Us

Help us maintain this project and keep BebasDNS / BebasID DNS VPS running by donating.

☕ Buy us a coffee:
Static Badge Static Badge

License

BebasDNS / BebasID DNS is licensed under MIT License

Terms and Conditions

By using this service, you are deemed to have read, understood, and agreed to all the rules that we have made and you accept all the consequences that will arise. If you do not agree to accept the existing rules, then you are not allowed to use this service.

For more information about the rules, see them on the RULES here.

Share this project!