macOS DNS Setup

Use network settings for classic DNS or a reviewed profile for encryption

Classic DNS

In System Settings → Network, select the active service, open its DNS settings and add:

• 51.75.96.82
• 51.89.95.33
• 151.115.80.165

Remove only resolver entries you intentionally want to replace. Configuration made here is classic, unencrypted DNS.

The same can be inspected with:

scutil --dns

Encrypted DNS

macOS supports encrypted DNS through configuration profiles and compatible resolver applications. le_dns does not currently publish a first-party signed profile, so this guide no longer delegates profile generation to an unrelated website.

A reviewed profile should use:

• DoH: https://website-xnqsyvgcprzaash17upkc5cd.DE-FRA-COG.ledns.infra.rqsco.cloud/dns-query; or
• DoT hostname: ledns.eu.

Inspect the complete payload and signature before installation. Remove an unwanted profile from the system’s profile or device-management settings.

Verify

Flush or wait out cached answers, then resolve a new hostname and inspect scutil --dns. A leak-test label may show OVHcloud or Scaleway rather than the le_dns hostname.