Tootfinder

from my link log —
Using nsnotifyd with a PowerDNS secondary.
https://blog.feld.me/posts/2026/02/nsnotifyd-with-powerdns-secondary/
saved 2026-02-23

Using nsnotifyd with a PowerDNS Secondary
The nsnotifyd tool is a neat little utility that can be used for automating tasks when a DNS zone changes. It listens for a NOTIFY message from a DNS server and then you can choose to use a custom script to do things like send alerts or backup the zone …

Hey @…
I want to migrate my email to you. My plan was
1. Set up hosting with you
2. Move the contents of my IMAP folders over
3. Point my MX records at you on the old DNS provider
4. Let everything stabilise
5. Transfer the domain to you and point the MX records at you from you.
Is that sensible? I've got as far…

Yay, my bluesky domain handle now pass verification for both DNS and HTTP https://bsky-debug.app/handle?handle=rmendes.net

Whoops, MullvadVPN DNS blocker for social media also blocks my own Mastodon instance 😳

I recently got a “new” iPad (meaning, a used model from 2020) and I was amazed at how terrible it was for web browsing. Then I realized I forgot to point it at my Pi-hole install for DNS.
So much of the (commercial) web is nearly unusable on old(er) devices because of the amount of advertising crammed onto a page.
(Indie sites personal blogs, etc are mostly unaffected. Recipe sites though… whew!)
#web

from my link log —
Understanding systemd-resolved, split DNS, and VPN configuration.
https://blogs.gnome.org/mcatanzaro/2020/12/17/understanding-systemd-resolved-split-dns-and-vpn-configuration/
saved 2020-1…

Moving my primary domain somebits.com from Porkbun for DNS and Google for mail forwarding to Cloudflare for both. First time using Cloudflare and so far it's a good experience. I'm hoping their mail forwarding works more reliably than Google's: Google's own servers keep blocking mail it forwards to itself as spam.

I moved my DNS and mostly static sites from AWS to @…
It was a bit of a hassle, and I have to be a Linux admin again (AWS hosted via Route53 S3 magic)
https://webcam.calpenedes.com/

Montserrat Webcam & Weather
Live webcam and weather data from Montserrat. Current temperature: 8.8℃, humidity: 87%, and real-time weather conditions.

added hn and lobsters to the dns deny list. Firefox "failed to load page" will be my reminder that even staring at the wall will be more useful than reading those 2 sites

RE: https://infosec.exchange/@josephcox/116165631106678137
I am never regretful about my 30 year commitment to never clicking on any online advertisement.
Nor my more recent adoption of DNS-based ad blocking of a couple thousand ad-related hostna…

@… This is your kinda pun.
https://wuffs.org/@Ninji/115815324741233244

from my link log —
The case of the missing DNS packets.
https://cloud.google.com/blog/topics/inside-google-cloud/google-cloud-support-engineer-solves-a-tough-dns-case
saved 2020-05-13

A Google Cloud support engineer solves a tough DNS case | Google Cloud Blog
How a Google Cloud support engineer found one customer’s missing DNS packets

The Pihole instance running on my laptop blocks about 21% of the DNS requests …. This is self-defense …
#Pihole #Enshittification

Today I learned how to use socat to pipe IPv4 traffic to my #homelab that's accessible only over IPv6 (thanks 1&1 and DS-Lite).
Set the DNS A record to a VPS I already have, spin up a reverse proxy on the VPS via docker, point the right domains to a socat docker container which TCP6's the IPv4 traffic the right way. Don't forget to add an IPv6 network to the socat container. Done.

from my link log —
Route 53 DNS: Amazon’s premier AWS database.
https://www.lastweekinaws.com/blog/route-53-amazons-premier-database/
saved 2021-02-18 <…

Route 53, Amazon’s Premier Database
I’ve periodically made reference in a bunch of places to Route 53 being my preferred database. But I’ve only really told the story in podcast and tweet

Reading algorithmic feeds is a crazy thing to do: abandoning control over your own influences to a robot programmed by advertisers to manipulate you?
Madness.
I will not allow a robot programmed by advertisers and surveillance capitalists to determine what I read.
I don’t read any robo-feeds and don’t recommend anyone else does.
But people do:
Top five highest reaching smart phone apps:
All designed to harvest data from your phone, three of them owned by one creepy billionaire, and most people use them by looking at a robo-feed suggesting to them what to read and watch or filter.
I don’t use any of them.
I watch some Youtube, but not though their app. Uninstalled that from my phone as soon as I got it. It’s an awful downgrade of just playing in a browser page. I subscribe to some channels there in my RSS reader like a boss. Never watch what their recommendation algorithms suggests.
I tell them what I want to watch, I don’t let them tell ME what to watch, and frankly I wish all those videographers would start a peertube instance or something instead of posting their work on a corporate surveillance site.
I say you should avoid that algorithm stuff, it’s crazy manipulative.
But people should be free to do what they want.
I’m free to block Facebook! And I do: and I encourage everyone else to do so too.
Edit your DNS, block their domain names. Do it.
But if governments or corporations have the power to mandate those choices for everyone, it will go badly.
Prohibitions always do.

from my link log —
DINR2020: DNS and Internet Naming Research Directions workshop.
https://ant.isi.edu/events/dinr2020/index.html
saved 2020-07-28 http…

Yesterday, I managed to 1) install #PiHole on a #RaspberryPi behind in my #Tailscale mesh and configure the #DNS to…

from my link log —
Internet world despairs as non-profit .org sold for $$$$ to private equity firm.
https://www.theregister.co.uk/2019/11/20/org_registry_sale_shambles/
saved 2019-11-23

Does anyone actually use OpenNIC?
I selfhost my DNS with unbound, apparently it's simple to use OpenNIC's root server hints but then you remove ICANN ones.
I know OpenNIC's root servers also respond for ICANN domains, but what I was wondering is: can I use ICANN ones for ICANN domains and only use OpenNIC ones when ICANN root servers don't know about a TLD?
#OpenNIC

from my link log —
Gonemaster: a Golang clone of the Zonemaster DNS checker.
https://codeberg.org/pawal/gonemaster
saved 2026-01-26 https://dotat.…

gonemaster
Gonemaster is a Go implementation of the Zonemaster engine and CLI.