SECDNS.pl — simple DNS protection powered by DataHouse DNS Protect+

1. Open Settings → Network & Internet.
2. Select your active connection: Wi‑Fi or Ethernet.
3. Open network properties.
4. Next to DNS server assignment, click Edit.
5. Choose Manual and enable IPv4.
6. Preferred DNS: 80.72.32.60.
7. Alternate DNS: 80.72.32.61.
8. Save changes and run ipconfig /flushdns.

1. Open Control Panel → Network and Internet → Network and Sharing Center.
2. Click your active Ethernet or Wi‑Fi connection.
3. Click Properties.
4. Select Internet Protocol Version 4 (TCP/IPv4) and open Properties.
5. Select Use the following DNS server addresses.
6. Enter 80.72.32.60 and 80.72.32.61.
7. Confirm and run ipconfig /flushdns.

1. Log in via RDP as administrator.
2. Run ncpa.cpl.
3. Open properties of the active network adapter.
4. Open IPv4 and set DNS to 80.72.32.60 and 80.72.32.61.
5. Run ipconfig /flushdns.
6. Test with nslookup example.com 80.72.32.60.

1. Open DNS Manager on the domain controller.
2. Right-click the DNS server name and choose Properties.
3. Open the Forwarders tab.
4. Add 80.72.32.60 and 80.72.32.61.
5. Save and test from a domain workstation with nslookup example.com.

nmcli con show
sudo nmcli con mod "CONNECTION_NAME" ipv4.dns "80.72.32.60 80.72.32.61"
sudo nmcli con mod "CONNECTION_NAME" ipv4.ignore-auto-dns yes
sudo nmcli con down "CONNECTION_NAME" && sudo nmcli con up "CONNECTION_NAME"
resolvectl status

Replace CONNECTION_NAME with the name shown by the first command.

Edit a file in /etc/netplan/, for example sudo nano /etc/netplan/01-netcfg.yaml:

network:
  version: 2
  ethernets:
    eth0:
      dhcp4: true
      nameservers:
        addresses: [80.72.32.60, 80.72.32.61]

Apply with sudo netplan apply and check with resolvectl dns.

Edit /etc/systemd/resolved.conf:

[Resolve]
DNS=80.72.32.60 80.72.32.61
FallbackDNS=

Restart with sudo systemctl restart systemd-resolved and verify using resolvectl status.

nmcli con show
sudo nmcli con mod "CONNECTION_NAME" ipv4.dns "80.72.32.60 80.72.32.61"
sudo nmcli con mod "CONNECTION_NAME" ipv4.ignore-auto-dns yes
sudo nmcli con up "CONNECTION_NAME"

For older systems, set DNS1=80.72.32.60, DNS2=80.72.32.61 and PEERDNS=no in the interface configuration.

Android Private DNS requires a DoT hostname, not an IP address. For SECDNS IP addresses, configure DNS per Wi‑Fi network.

1. Open Settings → Network & Internet → Wi‑Fi.
2. Long-press the network and choose Modify.
3. Open advanced options.
4. Change IP settings to Static.
5. DNS 1: 80.72.32.60, DNS 2: 80.72.32.61.
6. Save and reconnect.

1. Open System Settings → Network.
2. Select Wi‑Fi or Ethernet.
3. Click Details → DNS.
4. Add 80.72.32.60 and 80.72.32.61.
5. Save changes.
6. Optionally run: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder.

/ip dns set servers=80.72.32.60,80.72.32.61 allow-remote-requests=yes
/ip dns print

DHCP for clients:

/ip dhcp-server network print
/ip dhcp-server network set [find] dns-server=80.72.32.60,80.72.32.61

1. Log in to UniFi Network.
2. Open Settings → Networks.
3. Select the LAN or VLAN network.
4. In DHCP settings, set manual DNS.
5. Enter 80.72.32.60 and 80.72.32.61.
6. Save and renew client DHCP leases.

1. Log in to the router, usually 192.168.0.1 or 192.168.1.1.
2. Open Internet/WAN, LAN, DHCP, DNS or Network settings.
3. Enter DNS 1: 80.72.32.60.
4. Enter DNS 2: 80.72.32.61.
5. Save settings.
6. Reconnect devices or restart the router outside business hours.

Some models configure DNS under WAN, others under DHCP. The important point is that LAN clients receive SECDNS addresses.

uci set network.wan.peerdns='0'
uci -q delete network.wan.dns
uci add_list network.wan.dns='80.72.32.60'
uci add_list network.wan.dns='80.72.32.61'
uci commit network
/etc/init.d/network restart

1. Open System → General Setup.
2. Add DNS servers 80.72.32.60 and 80.72.32.61.
3. Disable DNS received from WAN if you want to enforce SECDNS.
4. Check DNS Resolver or DNS Forwarder.
5. Set client DNS in DHCP Server for LAN.