Skip to main content

Configure, Block, Relax

For home networks, the service is accessed by changing the DNS settings (see service home page for guides). While this can seem complicated, the reality is that almost anyone can easily do it. Additionally, one of the cybersecurity benefits of changing DNS settings is that it is very difficult for technology luddites to “break” it after you are done. The solution protects you and means fewer trips, or painful phone calls, trying to help family or friends fix their computer problems.

For mobile devices, CIRA Canadian Shield is a simple download in your app store of choice.

How the DNS works

CIRA Canadian Shield blocks threats at the DNS level. The Domain Name System (DNS) provides the core backbone of the Internet by providing the map between easily-readable hostnames (i.e. www.cira.ca) and IP addresses (192.228.29.1). It is essential to the operation of the Internet by enabling the use of logical, human-readable names for locations rather than complex IPv4 or IPv6 addresses that computers understand. Because it is the first (invisible) step in visiting a domain name it is a perfect way to block malicious links.

What does CIRA Canadian Shield do to block threats?

CIRA Canadian Shield is, what is technically called, a policy-enabled recursive resolver. This means that it performs the functions of a recursive server in looking-up and storing the DNS information – also known as a map of the internet.  However, it will not provide the answer when the site you are trying to visit is known to contain malware or phishing. Blocking it before it happens is preferable to first getting malicious code and then having it detected and cleaned by anti-virus software. You can think of it like not getting the flu at all rather than treating it with medicine after you are infected.

What does CIRA Canadian Shield do to protect my privacy?

When you use CIRA it means that your prior recursive DNS resolver can no longer know and store your DNS data. Remember that the DNS is a record of all your web activity, in terms of the sites that you and your family visit. We believe that CIRA is a trusted Canadian non-profit provider of this service. We will not retain any personal information for marketing purposes and will not resell your personal data. We retain it for the shortest time possible* to deliver a quality service.

Additionally, you can use the DNS encryption (DoH) service to further protect the privacy of your DNS look-ups by encrypting the DNS queries on the internet.

 

*IP address information is, in our opinion, personal information. We do store it for up to 24 hours for the purpose of stopping malicious activity abusing the CIRA Canadian Shield service for illegal activity after which all personally identifiable information is deleted.

IP addresses and mobile app store download links

Home Version DNS resolver addresses

Features IPv4 IPv6 DoH DoT
Private

DNS resolution only

149.112.121.10

149.112.122.10

2620:10A:80BB::10

2620:10A:80BC::10

https://private.canadianshield.cira.ca/dns-query

private.canadianshield.cira.ca

Protected

Malware and phishing protection

149.112.121.20

149.112.122.20

2620:10A:80BB::20

2620:10A:80BC::20

https://protected.canadianshield.www.cira.ca/dns-query

protected.canadianshield.www.cira.ca

Family

Protected + blocking pornographic content

149.112.121.30

149.112.122.30

2620:10A:80BB::30

2620:10A:80BC::30

https://family.canadianshield.cira.ca/dns-query

family.canadianshield.cira.ca

Loading…