Technitium DNS Server

Block ads & malware at the DNS level for your entire network

Get it on umbrelOS

Version15.3.0

CategoryNetworking

Source codePublic

Developed byTechnitium 1 app

Submitted byhighghlow 6 apps

Compatible withumbrelOS 0.5 or later

Technitium DNS Server is an open source authoritative, as well as recursive, DNS server that can be used for self hosting a DNS server for privacy & security. It works out-of-the-box with no or minimal configuration.

What's new

Version 15.3.0+3 days ago

⚠️ Security note: This release removes the default Delete permission from DNS Administrators in the Apps and Settings sections. Existing installations should manually remove that permission from DNS Administrators in those sections.

If you're updating from a pre-15 version, Technitium DNS Server 15.x runs on .NET 10. Most Umbrel users do not need to take action, but if you use Technitium clustering, upgrade all cluster nodes together for compatibility.

Key highlights include:

Fixed multiple Stored XSS vulnerabilities and RFC compliance/security issues
Added Unix socket support for the Web Service and DNS-over-HTTP optional protocol
Added zone search/filtering and multi-zone delete options
Added new settings for update checks, CSP frame ancestors, DoH help-page redirects, and shorter error logs
Added new DNS health-check and status APIs and improved local-zone handling

Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/releases/tag/v15.3.0

Version 15.2.0+last month

⚠️ Major update: Technitium DNS Server now runs on .NET 10. Most Umbrel users do not need to take any action, but if you use Technitium clustering, upgrade all cluster nodes together for compatibility.

Key highlights include:

Improved Single Sign-On (SSO) support, including configurable scopes and better user-info handling
Added reverse proxy address controls for trusted Real IP header handling
Added Prometheus metrics improvements and lifetime counters
Fixed multiple DNS amplification vulnerabilities
Added live query log updates, new theme options, and several DNS app improvements

Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md

Version 14.2.0+6 months ago

🚨 This major release upgrades to .NET 9 runtime and includes important security fixes. All cluster nodes must be upgraded together to maintain compatibility.

Key highlights in this release:

Fixed Denial of Service vulnerability in rate limiting implementation with redesigned QPM options
Fixed Cache Poisoning vulnerability through IP fragmentation attacks
Fixed DNSSEC Downgrade vulnerability that could bypass validation
Added Clustering feature to manage multiple DNS server instances from a single console
Added Two-factor authentication (2FA) support with TOTP
Added MISP Connector App to block malicious domains from MISP feeds
Updated Advanced Blocking App with configurable TTL for blocked responses
Enhanced Log Exporter App with EDNS logging support
Improved support for comment entries in Allow/Block List URLs
Multiple bug fixes for zone file parsing, session validation, and app configuration loading

Full release notes can be found at https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md

Version 13.6.0+last year

This release includes several improvements: