Skip to content

Instantly share code, notes, and snippets.

@stramargio
Last active February 24, 2021 11:55
Show Gist options
  • Save stramargio/5f46f59fb3bb3c19d06003b8ea6c8e05 to your computer and use it in GitHub Desktop.
Save stramargio/5f46f59fb3bb3c19d06003b8ea6c8e05 to your computer and use it in GitHub Desktop.
Quad9 configuration profile for macOS Big Sur and iOS 14+: secured w/ECS (Malware blocking, DNSSEC Validation, ECS enabled)
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>Name</key>
<string>Quad9 DNS over TLS</string>
<key>PayloadDescription</key>
<string>Configures device to use Quad9 Encrypted DNS over TLS</string>
<key>PayloadDisplayName</key>
<string>Quad9 DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.3f67e963-9ace-49af-bfda-859e08ac5d81</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>3f67e963-9ace-49af-bfda-859e08ac5d81</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>TLS</string>
<key>ServerAddresses</key>
<array>
<string>2620:fe::11</string>
<string>9.9.9.11</string>
<string>149.112.112.11</string>
</array>
<key>ServerName</key>
<string>dns11.quad9.net</string>
</dict>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Quad9 DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Quad9 DoTLS DNS</string>
<key>PayloadIdentifier</key>
<string>macos.local.f13c7c1e-d435-4cd0-aa8e-0fff4be35ad3</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>f13c7c1e-d435-4cd0-aa8e-0fff4be35ad3</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment