[LINK] OpenDNS?

[Martin Barry]

$quoted_author = "stephen at melbpc.org.au" ;
> 
> Just wondering, would the Link networking folk here recommend changing to
> and so utilizing the OpenDNS address as our first port of call for all our 
> net connectivity? Eg changing settings to: 208.67.222.222 & 208.67.220.220?

So, there are a few "open resolver" possibilities but the two biggest and
best know and Google's "Public DNS"¹ and the aforementioned OpenDNS.

¹https://developers.google.com/speed/public-dns/

Both are a way of routing around unreliable or slow resolvers provided by
your network provider. Beyond that they offer two very different
propositions. 

Google tries very hard to be a bare basic utility, it's feature list just
reads like a "best practices" check-list for running a DNS resolver. My
understanding is that they do not try to offer anything extra like OpenDNS.

OpenDNS on the other hand is not only offering itself as a DNS resolver but
also as a "security service", blocking domains that have been determined to
host malicious content, command-and-control servers for trojans/viruses
and "inappropriate" content if you have "parental controls" turned on. They
also spoof responses for invalid domains so you hit their search site
instead of getting a generic browser error.

Choosing one depends on what you really want from your DNS resolver. Do you
want it to play such a central role in your security configuration? Or would
you prefer just a plain but performant service and utilise other
services/software/configuration to cover your security needs?

cheers
Marty