macOS DoH Setup | Unruly Citizen

Quick Configuration Endpoints

DNS over HTTPS

https://xyz01-srv.unrulycitizen.com/dns-query

DNS over TLS

xyz01-srv.unrulycitizen.com

macOS DoH Configuration Methods

Method 1: Network Settings (macOS 14+ Sonoma)

1

Open System Settings

Click Apple menu → "System Settings" or "System Preferences"

2

Navigate to Network

Click "Network" in the sidebar (under "Network & Internet" in Sonoma)

3

Select Your Connection

Click on your active network connection (Wi-Fi or Ethernet)

4

Open DNS Settings

Click "Details" → "DNS" tab

5

Configure DNS over HTTPS

Click the "+" under DNS Servers and add:

https://xyz01-srv.unrulycitizen.com/dns-query

6

Apply Settings

Click "OK" and then "Apply" to save the configuration

Method 2: Terminal Configuration (All macOS Versions)

Open Terminal and use these commands to configure DoH system-wide:

# Get your network service name (usually "Wi-Fi" or "Ethernet")
networksetup -listallnetworkservices

# Configure DoH for your network service (replace "Wi-Fi" with your service)
sudo networksetup -setdnsoverhttps "Wi-Fi" on \
  https://xyz01-srv.unrulycitizen.com/dns-query

# Optional: Disable legacy DNS fallback
sudo networksetup -setdnsoverhttpsfallbacks "Wi-Fi" off

# Verify configuration
networksetup -getdnsoverhttps "Wi-Fi"
            

Replace "Wi-Fi" with your network service name from the first command

Method 3: Configuration Profile (Enterprise/Bulk Deployment)

Create and install a mobileconfig profile for easy deployment:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadType</key>
            <string>com.apple.dnsSettings.managed</string>
            <key>PayloadUUID</key>
            <string>UNIQUE-UUID-HERE</string>
            <key>PayloadIdentifier</key>
            <string>com.unrulycitizen.dns</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>DNSSettings</key>
            <dict>
                <key>DNSProtocol</key>
                <string>HTTPS</string>
                <key>ServerAddresses</key>
                <array>
                    <string>https://xyz01-srv.unrulycitizen.com/dns-query</string>
                </array>
            </dict>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Unruly Citizen DNS over HTTPS</string>
    <key>PayloadIdentifier</key>
    <string>com.unrulycitizen.dns.profile</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>PROFILE-UUID-HERE</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>
            

Save as .mobileconfig file and double-click to install

Method 4: Browser-Specific DoH (Firefox/Chrome)

Configure DoH directly in your web browser for application-level encryption:

Firefox Configuration

# Open Firefox and navigate to:
about:config

# Search for and set these preferences:
network.trr.mode = 3
network.trr.uri = "https://xyz01-srv.unrulycitizen.com/dns-query"
network.trr.bootstrapAddress = "140.82.41.243"
            

Chrome Configuration

# Launch Chrome with DoH flag:
open -a "Google Chrome" --args --enable-features="dns-over-https" --dns-over-https-servers="https://xyz01-srv.unrulycitizen.com/dns-query"

# Or set via Chrome flags:
# 1. Navigate to chrome://flags/#dns-over-https
# 2. Enable "Secure DNS lookups"
# 3. Set custom provider to: https://xyz01-srv.unrulycitizen.com/dns-query
            

Verification

To verify DoH is working on macOS:

Check DNS Configuration

# Check current DNS settings:
scutil --dns | grep -A5 "resolver #"

# Verify DoH configuration:
networksetup -getdnsoverhttps "Wi-Fi"

# Test DNS resolution:
dig @140.82.41.243 unrulycitizen.com
nslookup unrulycitizen.com 140.82.41.243
            

Test DoH Connection

# Install dog (DNS over HTTPS client)
brew install dog

# Test DoH directly:
dog @https://xyz01-srv.unrulycitizen.com/dns-query google.com

# Or use curl to test the endpoint:
curl -H "accept: application/dns-json" \
  "https://xyz01-srv.unrulycitizen.com/dns-query?name=unrulycitizen.com&type=A"
            

Troubleshooting

DoH not working?

Ensure macOS is updated to version 14 (Sonoma) or later for native DoH support
Check if port 443 (HTTPS) is accessible through your firewall
Verify the DoH endpoint URL is correct
Try disabling VPN or proxy temporarily during setup
Restart the mDNSResponder service: sudo killall -HUP mDNSResponder

Common macOS Issues

macOS 13 or earlier: Use Terminal method or browser configuration
VPN conflicts: Some VPNs override DNS settings
Corporate networks: May block external DNS servers
Certificate issues: Ensure system date/time is correct
Multiple interfaces: Configure DoH for each network service

macOS Version Compatibility

macOS 14+ (Sonoma)

Native DoH support in Network Settings. Recommended method.

macOS 11-13

Use Terminal commands or configuration profiles.

All Versions

Browser-specific DoH configuration available.

macOS DNS over HTTPS Configuration

UNRULY CITIZEN