• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.
  • The forums have been upgraded with support for dark mode. By default it will follow the setting on your system/browser. You may override it by scrolling to the end of the page and clicking the gears icon.

DNS not switching even though it says it is

Joined
Dec 13, 2022
Messages
43 (0.05/day)
Location
Manhattan
Hello, So i recently built a new PC and was going to put a family safe DNS on it i usually use 1.1.1.2 / .3 and when i try to get them to work on this build i get nothing. I switched it through the GUI and adult/Malware sites still pop up and when i do it through Netsh on the Command Line i have the same issue. i flushed the DNS and it made no change i'm confused maybe i'm doing something wrong or missing a step?
 
It sounds like you're configuring the DNS correctly. Is it possible the NIC you set the DNS settings on is the wrong NIC. Or if you're on a VPN, that NIC will also need to be set.

If you're using a NIC that has a DNS resolving the unwanted site, if you then connect with a new NIC, it'll still be in the DNS resolver cache. You can use Ipconfig /flushdns to delete all the entries in the DNS resolver cache. If you are unsure, use ipconfig /displaydns to see if a name resolution got through after the unexpected lookup.

You can also use nslookup <site>. One of the output fields should tell you which DNS server resolved the name for you as well as the resolution, as in if it's blackholed.
 
It sounds like you're configuring the DNS correctly. Is it possible the NIC you set the DNS settings on is the wrong NIC. Or if you're on a VPN, that NIC will also need to be set.

If you're using a NIC that has a DNS resolving the unwanted site, if you then connect with a new NIC, it'll still be in the DNS resolver cache. You can use Ipconfig /flushdns to delete all the entries in the DNS resolver cache. If you are unsure, use ipconfig /displaydns to see if a name resolution got through after the unexpected lookup.

You can also use nslookup <site>. One of the output fields should tell you which DNS server resolved the name for you as well as the resolution, as in if it's blackholed.
This is helpful i was running into this issue prior to setting up my VPN but i won't hurt to give this a try. The thing that is strange to me though is that its reading that the dns ip i static'd it to is correct. It didn't switch to another one or anything. It still reads 1.1.1.3 but just doesn't have the functionality
 
Try another service such as cleanbrowsing, adguard, control D or nextdns. Im not asking you to switch but it is a troubleshooting step. If other dns service works but cloudflare doesn't it is possible that cloudflare is not blocking the sites you want them to block.

Another thing to try is to use the respective service dedicated apps instead or use Windows 11 built in encrypted dns, or use a third party app like YogaDNS. Again like I said this is merely a troubleshooting step, you do not need to change to using something you don't want to. If these alternatives work, but the NIC DNS settings do not, a deeper form of troubleshooting is necessary. Maybe your Windows is borked and a reinstall might be the easiest way to fix it.
 
Try another service such as cleanbrowsing, adguard, control D or nextdns. Im not asking you to switch but it is a troubleshooting step. If other dns service works but cloudflare doesn't it is possible that cloudflare is not blocking the sites you want them to block.

Another thing to try is to use the respective service dedicated apps instead or use Windows 11 built in encrypted dns, or use a third party app like YogaDNS. Again like I said this is merely a troubleshooting step, you do not need to change to using something you don't want to. If these alternatives work, but the NIC DNS settings do not, a deeper form of troubleshooting is necessary. Maybe your Windows is borked and a reinstall might be the easiest way to fix it.
To be honest i think the latter is the case of the windows being borked because i bought one of those stupid keys for cheap and i'm pretty sure its just some fake bs lol my fault for being cheap i guess, who ever made the modified version probably didn't anticipate someone wanting to use more than standard networking stuff
 
To be honest i think the latter is the case of the windows being borked because i bought one of those stupid keys for cheap
did you install their version of Windows, or did you download the installer from Microsoft itself?

Also - I've had DNS issues with Windows before, the machine was set to 8.8.8.8 (google dns) but the ISP-provided router was intercepting all DNS traffic and re-routing it to their own nameservers
 
did you install their version of Windows, or did you download the installer from Microsoft itself?

Also - I've had DNS issues with Windows before, the machine was set to 8.8.8.8 (google dns) but the ISP-provided router was intercepting all DNS traffic and re-routing it to their own nameservers
i used the microsoft installer and used their code and i don't think it could be my router because i have 2 linux rigs set up to 1.1.1.3 already and they work fine
 
i used the microsoft installer and used their code
well you are probably fine then... the code won't change the dns abilities

have you checked the browser config to ensure it's not using some kind of DNS over HTTPS config that's bypassing the dns settings on the network adaptor?
 
well you are probably fine then... the code won't change the dns abilities

have you checked the browser config to ensure it's not using some kind of DNS over HTTPS config that's bypassing the dns settings on the network adaptor?
Yeah only reason i say this is i get the windows not official watermark sometimes, but i just tried dns over https and it will resolve to 1.1.1.1 but when i do 1.1.1.3 it says its not a correct address which is strange because if you enter the ip in the browser it still redirects to cloudflare
 
I found it much much easier to set the DNS in my router instead of individual systems. That way, you only have to set and manage just 1 device.

I also use 1.1.1.1 instead of the .2 or .3 settings.
 
I found it much much easier to set the DNS in my router instead of individual systems. That way, you only have to set and manage just 1 device.

I also use 1.1.1.1 instead of the .2 or .3 settings.
Yeah i'll probably have to just go in the router and change it but its strange it works on everything else but i use .2/.3 because it filters more search results
 
Yeah i'll probably have to just go in the router and change it but its strange it works on everything else but i use .2/.3 because it filters more search results
Have you tried using 1.1.1.3 as the primary, and 1.0.0.3 as the secondary or are you using 1.1.1.2 and 1.1.1.3 as primary/secondary?
 
Have you tried using 1.1.1.3 as the primary, and 1.0.0.3 as the secondary or are you using 1.1.1.2 and 1.1.1.3 as primary/secondary?
i usually on most my devices use only .2/.3 for whatever reason it doesn't work on windows i have the config running fine on Ubuntu and Ios
 
Back
Top