1.1.1.3 does not filter content if queries are made via DoT (DNS over TLS)

Zero Trust 1.1.1.1
21

Android 9 Pie doesn’t accept an ip address for DNS over TLS!

22

I agree with @mystiquewolf, Android requires a TLS hostname but neither 1.1.1.2 nor 1.1.1.3 has a PTR record.

Google (Android) doesn’t accept an IP address, which is a contradiction: how does Android get the IP address if the DNS’ hostname is entered instead of an IP address?
I bet it uses Google’s DNS (8.8.8.8) just to look up the DNS server you have set. I also wonder how often it needs to look that up. We should check the source code, if it is available.

1 Like
23

Yes, Android does not accept IPs for its DoT feature. It’s an Android limitation.
I don’t know if exists Public DNS records for 1.1.1.3 and 1.0.0.3.
If them doesn’t exist, it’s not possible to assign Cloudflare DNS for Families to Android phones.

24

As well as Android, the Fritz!box 7530 also requires “Resolved Names of the DNS Servers to Be Used Enter the resolved name (Fully Qualified Domain Name) of your desired DNS server here.” This seems to be a common way of implementing DNS over TLS rather than an Android limitation. What is the market share of Android in the smartphone market? Almost 75%!

25

all the more reason to provide hostnames for 1.1.1.2 and 1.1.1.3

26

The hostnames listed here: Set up Cloudflare 1.1.1.1 resolver · Cloudflare 1.1.1.1 docs work for DoT.

27

Are you saying that DNS over TLS works with security.cloudflare-dns.com?
Becuase it certainly does not. It was mentioned months as the hostname that Cloudflare would use so I put it in my router and it has never worked!

28

Well, Android only accepts domain names, trying to put the /dns-query path string makes the “Save” button disabled.

29

Try 1dot1dot1dot3.cloudflare-dns.com Im sure this will work.
Also 1dot1dot1dot2.cloudflare-dns.com works.

30

FQDN family.cloudflare-dns.com does not work as DoT.

32

Also 1dot1dot1dot3.cloudflare-dns.com and 1dot1dot1dot2.cloudflare-dns.com does not work as DoT.

33

Hi all, the following are the mappings for hostnames to IP addresses for DoT:

security.cloudflare-dns.com → 1.1.1.2, 1.0.0.2, 2606:4700:4700::1112, 2606:4700:4700::1002

family.cloudflare-dns.com → 1.1.1.3, 1.0.0.3, 2606:4700:4700::1113, 2606:4700:4700::1003

Hope this helps for those clients that need both a hostname and an IP address.

3 Likes
34

Thank you, it works!!!

35

Great, it is working. Thanks.

36

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.