OpenNIC Wiki

Infrastructure Anti-Abuse

anonymous@undisclosed.example.com (Anonymous) — Thu, 06 Jul 2017 01:46:19 +0000

Infrastructure Anti-Abuse Collection of documentation and scripts for preventing abuse on the OpenNIC, Tier 1 and Tier 2 infrastructure.

Abusive ISPs

anonymous@undisclosed.example.com (Anonymous) — Sun, 09 Jun 2019 21:21:56 +0000

Abusive ISPs These are Internet Service Providers that have been found to tamper with your DNS (or OpenNIC related) traffic, do note that this list is only for previously mentioned abuse, nothing else. Is my ISP intercepting DNS traffic? Some abusive ISPs will intercept

API

anonymous@undisclosed.example.com (Anonymous) — Sat, 24 Mar 2018 19:07:51 +0000

API OpenNIC maintains an API page as a gateway to various projects. The default page is located at however there is no official website on that page. The following resources may be accessed through the API: * Tier 2 GeoIP API - (/geoip/) * DNS Blacklisting API - (/acl/filter/) * DNS Whitelisting API - (/ip/update/) * BIND9 Access Control Lists API - (/acl/bind/)

Automated DNS Server Testing

anonymous@undisclosed.example.com (Anonymous) — Wed, 04 Oct 2017 07:20:54 +0000

Automated DNS Server Testing Every 15 minutes, full testing is performed on each publicly listed Tier 2 server. The results and history of this testing may be viewed from here. You can view either Tier 1 or Tier 2 server results, and filter the display based on region. This information may be helpful in choosing reliable servers near you.

Obfuscating BIND 9 logs

anonymous@undisclosed.example.com (Anonymous) — Tue, 04 Jul 2017 23:45:53 +0000

Obfuscating BIND 9 logs In the interest of privacy and anonymity, a couple of ideas for obfuscating named logs are presented below. There is no official OpenNIC policy that addresses the privacy and retention of named logs. method 1: Post-logging processing

Logging in Bind 9

anonymous@undisclosed.example.com (Anonymous) — Fri, 27 Mar 2020 11:51:30 +0000

Logging in Bind 9 Lets go through turning on some logging for your BIND9 DNS server. These logs are interesting to look through, but should not be archived. If you wish to archive them, provided is a perl script, written by Brianko, which will remove all IP addresses and replace them with XXX.XXX.XXX.XXX. It is important that we protect our members' right to browse the internet in complete privacy, so use of this perl script is highly encouraged.

BIND Whitelist

anonymous@undisclosed.example.com (Anonymous) — Tue, 30 Nov 2021 12:10:46 +0000

BIND Whitelist BIND-whitelist is a version-specific patch for BIND that implements whitelist functionality. It uses a very fast Berkeley database backend to track and whitelist IPs (both IPv4 and IPv6) that routinely query OpenNIC TLDs. So long as a specific IP queries for OpenNIC

Blog Bytes

anonymous@undisclosed.example.com (Anonymous) — Wed, 21 Nov 2018 01:56:21 +0000

Blog Bytes These are comments about OpenNIC from blogs and other sources. Please feel free to add you own. Blog URL Date Quote Falk Husemann Blog 2012-05-15 OpenNIC ist ein nicht-kommerzielles Projekt, dass alternative DNS Server zur Verfügung stellt. New.Net 2007-07-20

Getting alternative TLDs to work with Chrome

anonymous@undisclosed.example.com (Anonymous) — Sun, 02 Jul 2017 20:30:24 +0000

Getting alternative TLDs to work with Chrome Chrome has this very weird behavior where - when typing a full qualified domain name that is not known to Google (such as opennic.glue or grep.geek into the address bar - it redirects the user to their primary search engine (Google by default, because it's a Google product after all) instead of navigating to the actual website you just wanted to reach because the browser keeps a hardcoded, non-reconfigurable list of all

anonymous@undisclosed.example.com (Anonymous) — Thu, 29 Jun 2017 04:00:39 +0000

Declaration Of Independence

anonymous@undisclosed.example.com (Anonymous) — Fri, 07 Apr 2017 17:44:19 +0000

Declaration Of Independence When in the Course of human events it becomes necessary for one network to dissolve the political tubes which have connected them with ICANN and to assume among the powers of cyberspace, the separate and equal station to which the Laws of Internet and Internet's Servers entitle them, a decent respect to the opinions of the Internet Community requires that they should declare the causes which impel them to the separation.

Getting Help

anonymous@undisclosed.example.com (Anonymous) — Tue, 16 Nov 2021 21:23:03 +0000

Getting Help OpenNIC provides various contact methods when you need help getting started or just want to chat. Currently those contact methods are: * Mailing List: discuss@lists.opennicproject.org * IRC: #opennic on the Libera IRC network * Traditional Email:

OpenNIC Infrastructure Project Owners

anonymous@undisclosed.example.com (Anonymous) — Thu, 26 Jul 2018 23:48:04 +0000

OpenNIC Infrastructure Project Owners Project/Service Description Owner/Group Internal documentation api.opennic.org proxy cache Caching frontend proxy for the actual api. server fusl api.opennic.org query backend The backend server, everything behind the scenes, etc.

Setting up OpenNIC

anonymous@undisclosed.example.com (Anonymous) — Thu, 08 Jul 2021 18:50:35 +0000

Setting up OpenNIC * Setting up OpenNIC on macOS * Setting up OpenNIC on Windows 7, 8, 10 * to setup on OpenWRT go to interfaces -> WAN -> Advanced. Then uncheck “get DNS from server” and enter PASS tier 1 and-or tier 2 IP's from servers.opennic.org

Welcome to the OpenNIC Wiki

anonymous@undisclosed.example.com (Anonymous) — Wed, 29 Apr 2026 17:51:45 +0000

Welcome to the OpenNIC Wiki About OpenNIC OpenNIC (also referred to as the OpenNIC Project) is a user owned and controlled top-level Network Information Center offering a non-national alternative to traditional Top-Level Domain (TLD) registries; such as

anonymous@undisclosed.example.com (Anonymous) — Sun, 10 May 2026 08:34:54 +0000

Since Debian 13 ”Trixie”, the resolv.conf is generated by the systemd-resolved, the systemd Resolver Daemon. To get an overview over the currently configured resolvers we run the resolvectl command: root@machine:~# resolvectl Global Protocols: +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported resolv.conf mode: stub DNS Servers: 127.0.0.1 ::1

anonymous@undisclosed.example.com (Anonymous) — Mon, 05 Jan 2026 18:07:54 +0000

This simple config excerpt should be used as a basis for a Tier 2 Unbound installation: server: access-control: 0.0.0.0/0 allow hide-identity: yes hide-trustanchor: yes hide-version: yes interface: x.x.x.x minimal-responses: yes log-queries: no root-hints: "/usr/local/etc/unbound/opennic.cache" # ratelimiting examples ip-ratelimit-factor: 0 ip-ratelimit: 20 ratelimit-below-domain: gov 30 ratelimit: 100 # See https://nlnetlabs.nl/doc…

OpenNIC Votes

anonymous@undisclosed.example.com (Anonymous) — Fri, 06 Oct 2017 00:12:52 +0000

OpenNIC Votes Piwik Hello! We were interested in adding web analytics to some of our key sites including opennic.org, the wiki, and possibly the servers page, and we wanted to get your opinions on that and the best way we could accomplish that. We’d be using Piwik, which is a self-hosted analytics program similar to Google Analytics, but all the data would be within our control. Here’s a list of the data we could feasibly collect: https://piwik.org/faq/general/#faq_18254 In particular, we…

OpenNIC Voting Rules

anonymous@undisclosed.example.com (Anonymous) — Sat, 24 Aug 2019 20:07:05 +0000

OpenNIC Voting Rules Proposing a TLD BEFORE you begin a proposal, you MUST meet the following requirements: * You MUST have an operational Tier 1 DNS server. This server must mirror the root data of the root “.” zone and all the zone data for each OpenNIC

OpenNIC Voting Rules & Currently Ongoing Votings

anonymous@undisclosed.example.com (Anonymous) — Wed, 15 May 2019 20:12:03 +0000

OpenNIC Voting Rules & Currently Ongoing Votings BEFORE you begin a proposal, you MUST meet the requirements outlined in OpenNIC Voting Rules. OpenNIC Votings Should OpenNIC add .epic as a new zone? .epic is a new TLD proposal for OpenNIC. A link to the charter can be found here: https://epic.okashi.me/charter.html Voting ends at Tuesday, September 3, 2019, at 00:00 UTC.

OpenNIC Compatible Webspace Providers

anonymous@undisclosed.example.com (Anonymous) — Tue, 21 Apr 2026 07:35:01 +0000

OpenNIC Compatible Webspace Providers Requirements for listing * Provider needs to accept free or paid sign-ups using an automated or semi-automated sign-up form, no closed/invite-only groups * Paid-only providers need to have “paid-only” included in the notes section