Added many more well-known, IPv4 and IPv6 public DNS servers, with DNSSEC enabled where supported.

Added symlinks to /dev/null in the local config directory to disable all the DNS servers. (The user can enable config snippets by removing the symlinks.)

37 files changed, 229 insertions, 19 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 9de3705d9647..151e5f8883a8 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,20 +1,82 @@
 pkgbase = systemd-resolved-public-dns
-	pkgdesc = Config files defining IPv4 public DNS for systemd's DNS resolver
-	pkgver = 1
-	pkgrel = 2
+	pkgdesc = Config files defining well-known, public, IPv4 and IPv6 DNS servers for systemd's DNS resolver (includes DNSSEC)
+	pkgver = 2
+	pkgrel = 1
 	url = https://github.com/jamesan/aur-pkgs/tree/master/systemd-resolved-public-dns
 	arch = any
 	license = GPL
+	source = alternate-dns.conf
+	source = blockaid-public-dns.conf
+	source = censurfridns.conf
+	source = chaos-computer-club-berlin.conf
+	source = christoph-hochstatter.conf
+	source = claranet.conf
 	source = comodo-secure-dns.conf
 	source = dns-advantage.conf
+	source = dnsreactor.conf
+	source = dns.watch.conf
+	source = dyn.conf
+	source = fdn.conf
+	source = foebud.conf
+	source = fooldns.conf
+	source = freedns.conf
+	source = freenom-world.conf
+	source = german-privacy-foundation-ev.conf
 	source = google-public-dns.conf
+	source = greenteamdns.conf
+	source = hurricane-electric.conf
+	source = level3.conf
+	source = neustar-dns-advantage.conf
+	source = new-nations.conf
 	source = norton-dns.conf
 	source = opendns.conf
-	md5sums = f1b6009234ac60f118ee92d332efc00b
+	source = opennic.conf
+	source = powerns.conf
+	source = puntcat.conf
+	source = quad9.conf
+	source = safedns.conf
+	source = skydns.conf
+	source = smartviper-public-dns.conf
+	source = validom.conf
+	source = verisign.conf
+	source = xiala.net.conf
+	source = yandex.dns.conf
+	md5sums = 2cceeb5bfc56cc6637cd361121b15a53
+	md5sums = 0627722b8754288ba6abd9793ef603b7
+	md5sums = ec1356dbee2d165ab19f93eff264bef0
+	md5sums = 80daa89eed96de895b54a58c325d8273
+	md5sums = 7889fef471faabc0483db133005f7320
+	md5sums = 5179e1b34f3751db5a0ebbef97a8c356
+	md5sums = 5b909aa3206b222f34db204908196d7a
 	md5sums = 92ae9aef034229d1ae1a7356760dc5b0
-	md5sums = 915793b1f0dafa3d1c2c22ab224b353d
-	md5sums = 1aafbfd2514aa39351d38c266085e320
-	md5sums = 910578ec675036e85cf493a9bfd2afb0
+	md5sums = ee4df09900780f0611e909e7d4d3ea73
+	md5sums = 52a72a161e7e7c72435778ad5cfe8059
+	md5sums = 040a94243820773564c82bb57070c68f
+	md5sums = be747116817a8987597364630aa809ec
+	md5sums = 3e6a9efc6766f08a091012ccea17ed97
+	md5sums = 9507b9f9f91e9c697f06683a17720f24
+	md5sums = be9890a04159cc4485271f878b46f42b
+	md5sums = df19b5fd0cf2461e135ac1d90126791d
+	md5sums = 4d72e70fa89f17f4816bed40fbd626cc
+	md5sums = e6583c0f183d8d4d6eb82e973cb6e968
+	md5sums = 4043fffbd006a0c50368759cf5cc798d
+	md5sums = 953a7f1ca1994ce155aec924adea0d7b
+	md5sums = 4722724e843a5c3d7b5b052d9befd8d2
+	md5sums = 04f1e43c5b01a9280f8f6a2125057a22
+	md5sums = b1b7270a64429807290605a9abad6c0d
+	md5sums = fd5ad6b3167cedfc4211e8746293d35c
+	md5sums = 0b35d80150db515a3f5de27eca6d41c0
+	md5sums = c591c050e5bedff86959cf57684a240e
+	md5sums = 7094086d2d4fab585b078cbc035b9496
+	md5sums = c466ad65a6925942ac01325ab00726c7
+	md5sums = c13f7d6d157375439348b62d765fa014
+	md5sums = 64123bdde7b8258164b431eec9f8cedb
+	md5sums = 4abdeb4f84ac53cab6768d3692027d54
+	md5sums = 6fbf56e5c3529012ef8e5196af10375c
+	md5sums = daab49702642e6f75f6bba654d857f87
+	md5sums = 4faee5805134df266edf8e33c8ecf71c
+	md5sums = c061f4e9fa4efc106f3114ee7a3104f2
+	md5sums = e51f146fe8b283455a38cc5108bbe9ab
 
 pkgname = systemd-resolved-public-dns
 
diff --git a/PKGBUILD b/PKGBUILD
index 95ce1db39e58..527020044b55 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,29 +1,91 @@
 # Maintainer: James An <james@jamesan.ca>
 
 pkgname=systemd-resolved-public-dns
-pkgver=1
-pkgrel=2
-pkgdesc="Config files defining IPv4 public DNS for systemd's DNS resolver"
+pkgver=2
+pkgrel=1
+pkgdesc="Config files defining well-known, public, IPv4 and IPv6 DNS servers for systemd's DNS resolver (includes DNSSEC)"
 arch=('any')
 url="https://github.com/jamesan/aur-pkgs/tree/master/$pkgname"
 license=('GPL')
 source=(
+    alternate-dns.conf
+    blockaid-public-dns.conf
+    censurfridns.conf
+    chaos-computer-club-berlin.conf
+    christoph-hochstatter.conf
+    claranet.conf
     comodo-secure-dns.conf
     dns-advantage.conf
+    dnsreactor.conf
+    dns.watch.conf
+    dyn.conf
+    fdn.conf
+    foebud.conf
+    fooldns.conf
+    freedns.conf
+    freenom-world.conf
+    german-privacy-foundation-ev.conf
     google-public-dns.conf
+    greenteamdns.conf
+    hurricane-electric.conf
+    level3.conf
+    neustar-dns-advantage.conf
+    new-nations.conf
     norton-dns.conf
     opendns.conf
+    opennic.conf
+    powerns.conf
+    puntcat.conf
+    quad9.conf
+    safedns.conf
+    skydns.conf
+    smartviper-public-dns.conf
+    validom.conf
+    verisign.conf
+    xiala.net.conf
+    yandex.dns.conf
 )
-md5sums=(
-    'f1b6009234ac60f118ee92d332efc00b'
-    '92ae9aef034229d1ae1a7356760dc5b0'
-    '915793b1f0dafa3d1c2c22ab224b353d'
-    '1aafbfd2514aa39351d38c266085e320'
-    '910578ec675036e85cf493a9bfd2afb0'
-)
+md5sums=('2cceeb5bfc56cc6637cd361121b15a53'
+         '0627722b8754288ba6abd9793ef603b7'
+         'ec1356dbee2d165ab19f93eff264bef0'
+         '80daa89eed96de895b54a58c325d8273'
+         '7889fef471faabc0483db133005f7320'
+         '5179e1b34f3751db5a0ebbef97a8c356'
+         '5b909aa3206b222f34db204908196d7a'
+         '92ae9aef034229d1ae1a7356760dc5b0'
+         'ee4df09900780f0611e909e7d4d3ea73'
+         '52a72a161e7e7c72435778ad5cfe8059'
+         '040a94243820773564c82bb57070c68f'
+         'be747116817a8987597364630aa809ec'
+         '3e6a9efc6766f08a091012ccea17ed97'
+         '9507b9f9f91e9c697f06683a17720f24'
+         'be9890a04159cc4485271f878b46f42b'
+         'df19b5fd0cf2461e135ac1d90126791d'
+         '4d72e70fa89f17f4816bed40fbd626cc'
+         'e6583c0f183d8d4d6eb82e973cb6e968'
+         '4043fffbd006a0c50368759cf5cc798d'
+         '953a7f1ca1994ce155aec924adea0d7b'
+         '4722724e843a5c3d7b5b052d9befd8d2'
+         '04f1e43c5b01a9280f8f6a2125057a22'
+         'b1b7270a64429807290605a9abad6c0d'
+         'fd5ad6b3167cedfc4211e8746293d35c'
+         '0b35d80150db515a3f5de27eca6d41c0'
+         'c591c050e5bedff86959cf57684a240e'
+         '7094086d2d4fab585b078cbc035b9496'
+         'c466ad65a6925942ac01325ab00726c7'
+         'c13f7d6d157375439348b62d765fa014'
+         '64123bdde7b8258164b431eec9f8cedb'
+         '4abdeb4f84ac53cab6768d3692027d54'
+         '6fbf56e5c3529012ef8e5196af10375c'
+         'daab49702642e6f75f6bba654d857f87'
+         '4faee5805134df266edf8e33c8ecf71c'
+         'c061f4e9fa4efc106f3114ee7a3104f2'
+         'e51f146fe8b283455a38cc5108bbe9ab')
 
 package() {
+    install -dm755 "$pkgdir/etc/systemd/resolved.conf.d"
     for CONF in *.conf; do
         install -Dm644 "$CONF" "$pkgdir/usr/lib/systemd/resolved.conf.d/$CONF"
+        ln -s /dev/null "$pkgdir/etc/systemd/resolved.conf.d/$CONF"
     done
 }
diff --git a/alternate-dns.conf b/alternate-dns.conf
new file mode 100644
index 000000000000..fb64e415765b
--- /dev/null
+++ b/alternate-dns.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=198.101.242.72 23.253.163.53
+DNSSEC=allow-downgrade
diff --git a/blockaid-public-dns.conf b/blockaid-public-dns.conf
new file mode 100644
index 000000000000..d94cb30846fe
--- /dev/null
+++ b/blockaid-public-dns.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=205.204.88.60 178.21.23.150
diff --git a/censurfridns.conf b/censurfridns.conf
new file mode 100644
index 000000000000..07fe49e097e8
--- /dev/null
+++ b/censurfridns.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=91.239.100.100 89.233.43.71 2001:67c:28a4:: 2002:d596:2a92:1:71:53::
+DNSSEC=on
diff --git a/chaos-computer-club-berlin.conf b/chaos-computer-club-berlin.conf
new file mode 100644
index 000000000000..7c12b91e7c92
--- /dev/null
+++ b/chaos-computer-club-berlin.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=213.73.91.35
+DNSSEC=on
diff --git a/christoph-hochstatter.conf b/christoph-hochstatter.conf
new file mode 100644
index 000000000000..6ddb5f5c913d
--- /dev/null
+++ b/christoph-hochstatter.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=209.59.210.167 85.214.117.11
diff --git a/claranet.conf b/claranet.conf
new file mode 100644
index 000000000000..ad84a24a5869
--- /dev/null
+++ b/claranet.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=212.82.225.7 212.82.226.212
diff --git a/comodo-secure-dns.conf b/comodo-secure-dns.conf
index 24a40714ffbf..793f71b455f3 100644
--- a/comodo-secure-dns.conf
+++ b/comodo-secure-dns.conf
@@ -1,2 +1,3 @@
 [Resolve]
 DNS=8.26.56.26 8.20.247.20
+DNSSEC=allow-downgrade
diff --git a/dns.watch.conf b/dns.watch.conf
new file mode 100644
index 000000000000..717d2dacc2aa
--- /dev/null
+++ b/dns.watch.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=84.200.69.80 84.200.70.40 2001:1608:10:25::1c04:b12f 2001:1608:10:25::9249:d69b
+DNSSEC=on
diff --git a/dnsreactor.conf b/dnsreactor.conf
new file mode 100644
index 000000000000..e820ab02c9f2
--- /dev/null
+++ b/dnsreactor.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=104.236.210.29 45.55.155.25
+DNSSEC=off
diff --git a/dyn.conf b/dyn.conf
new file mode 100644
index 000000000000..aad4161eb2a1
--- /dev/null
+++ b/dyn.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=216.146.35.35 216.146.36.36
+DNSSEC=allow-downgrade
diff --git a/fdn.conf b/fdn.conf
new file mode 100644
index 000000000000..27968c2d7453
--- /dev/null
+++ b/fdn.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=80.67.169.12 2001:910:800::12
+DNSSEC=on
diff --git a/foebud.conf b/foebud.conf
new file mode 100644
index 000000000000..c82790823cbf
--- /dev/null
+++ b/foebud.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=85.214.73.63
diff --git a/fooldns.conf b/fooldns.conf
new file mode 100644
index 000000000000..a767a8ba5e5a
--- /dev/null
+++ b/fooldns.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=87.118.111.215 213.187.11.62
diff --git a/freedns.conf b/freedns.conf
new file mode 100644
index 000000000000..4b7d2973966f
--- /dev/null
+++ b/freedns.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=37.235.1.174 37.235.1.177
+DNSSEC=off
diff --git a/freenom-world.conf b/freenom-world.conf
new file mode 100644
index 000000000000..5c0d6c1c4d47
--- /dev/null
+++ b/freenom-world.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=80.80.80.80 80.80.81.81
diff --git a/german-privacy-foundation-ev.conf b/german-privacy-foundation-ev.conf
new file mode 100644
index 000000000000..6df041a51b13
--- /dev/null
+++ b/german-privacy-foundation-ev.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=87.118.100.175 94.75.228.29 85.25.251.254 62.141.58.13
diff --git a/google-public-dns.conf b/google-public-dns.conf
index ac18cbcf748c..bf9fd566b9c6 100644
--- a/google-public-dns.conf
+++ b/google-public-dns.conf
@@ -1,2 +1,3 @@
 [Resolve]
-DNS=8.8.8.8 8.8.4.4
+DNS=8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844
+DNSSEC=on
diff --git a/greenteamdns.conf b/greenteamdns.conf
new file mode 100644
index 000000000000..7b355b28e999
--- /dev/null
+++ b/greenteamdns.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=81.218.119.11 209.88.198.133
+DNSSEC=off
diff --git a/hurricane-electric.conf b/hurricane-electric.conf
new file mode 100644
index 000000000000..7a3e453f1441
--- /dev/null
+++ b/hurricane-electric.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=74.82.42.42 2001:470:20::2
+DNSSEC=off
diff --git a/level3.conf b/level3.conf
new file mode 100644
index 000000000000..a11198a159c7
--- /dev/null
+++ b/level3.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=209.244.0.3 209.244.0.4
diff --git a/neustar-dns-advantage.conf b/neustar-dns-advantage.conf
new file mode 100644
index 000000000000..1904195ad580
--- /dev/null
+++ b/neustar-dns-advantage.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=156.154.70.1 156.154.71.1
+DNSSEC=on
diff --git a/new-nations.conf b/new-nations.conf
new file mode 100644
index 000000000000..537235f26410
--- /dev/null
+++ b/new-nations.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=5.45.96.220 185.82.22.133
+DNSSEC=allow-downgrade
diff --git a/norton-dns.conf b/norton-dns.conf
index 0341342276f6..f09bc9bb29d2 100644
--- a/norton-dns.conf
+++ b/norton-dns.conf
@@ -1,2 +1,3 @@
 [Resolve]
 DNS=198.153.192.1 198.153.194.1
+DNSSEC=on
diff --git a/opendns.conf b/opendns.conf
index d47f529220b6..7eae0fc1a894 100644
--- a/opendns.conf
+++ b/opendns.conf
@@ -1,2 +1,3 @@
 [Resolve]
-DNS=208.67.222.222 208.67.220.220
+DNS=208.67.222.222 208.67.220.220 2620:0:ccc::2 2620:0:ccd::2
+DNSSEC=off
diff --git a/opennic.conf b/opennic.conf
new file mode 100644
index 000000000000..7fd42bc6812f
--- /dev/null
+++ b/opennic.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=23.94.5.133 89.36.220.220 185.133.72.100 104.238.186.189 188.165.200.156 62.113.203.99 62.113.203.55  2a01:6e60:10:cdc::1 2001:470:8e08:: 2001:19f0:8000:8ac3::feed
+DNSSEC=on
diff --git a/powerns.conf b/powerns.conf
new file mode 100644
index 000000000000..7778a4a14f0d
--- /dev/null
+++ b/powerns.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=194.145.226.26 77.220.232.44
diff --git a/puntcat.conf b/puntcat.conf
new file mode 100644
index 000000000000..b455b109ac17
--- /dev/null
+++ b/puntcat.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=109.69.8.51 2a00:1508:0:4::9
+DNSSEC=on
diff --git a/quad9.conf b/quad9.conf
new file mode 100644
index 000000000000..96dddb29f6ae
--- /dev/null
+++ b/quad9.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=9.9.9.9 2620:fe::fe
+DNSSEC=on
diff --git a/safedns.conf b/safedns.conf
new file mode 100644
index 000000000000..011bc539e40b
--- /dev/null
+++ b/safedns.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=195.46.39.39 195.46.39.40
+DNSSEC=allow-downgrade
diff --git a/skydns.conf b/skydns.conf
new file mode 100644
index 000000000000..7a263e05e51e
--- /dev/null
+++ b/skydns.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=193.58.251.251
+DNSSEC=allow-downgrade
diff --git a/smartviper-public-dns.conf b/smartviper-public-dns.conf
new file mode 100644
index 000000000000..d3374afb28ad
--- /dev/null
+++ b/smartviper-public-dns.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=208.76.50.50 208.76.51.51
diff --git a/validom.conf b/validom.conf
new file mode 100644
index 000000000000..cdb93cb0bc6b
--- /dev/null
+++ b/validom.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNS=78.46.89.147 88.198.75.145
diff --git a/verisign.conf b/verisign.conf
new file mode 100644
index 000000000000..043e51a9e1d2
--- /dev/null
+++ b/verisign.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=64.6.64.6 64.6.65.6 2620:74:1b::1:1 2620:74:1c::2:2
+DNSSEC=on
diff --git a/xiala.net.conf b/xiala.net.conf
new file mode 100644
index 000000000000..c7fd87fb1162
--- /dev/null
+++ b/xiala.net.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=77.109.148.136 77.109.148.137 2001:1620:2078:136:: 2001:1620:2078:137::
+DNSSEC=on
diff --git a/yandex.dns.conf b/yandex.dns.conf
new file mode 100644
index 000000000000..be79400f4684
--- /dev/null
+++ b/yandex.dns.conf
@@ -0,0 +1,3 @@
+[Resolve]
+DNS=77.88.8.88 77.88.8.2 2a02:6b8::feed:bad 2a02:6b8:0:1::feed:bad
+DNSSEC=off