Skip to content

Scanner Tab

Jump to bottom
KamalMac edited this page May 11, 2026 · 3 revisions

Scanner Tab

فارسی: تب اسکنر

The Scanner tab is where you find working DNS resolvers and save them as a VPN profile.

Input Fields

VPN Type selector

Click MasterDNS or VayDNS. This controls which key field and save button are shown. You must select one before scanning.

Country / Folder

A name for this configuration. A folder with this name is created next to the KevinNet app, containing the VPN config files and binary. You can have multiple profiles with different names.

Tunnel Domain

The NS-delegated subdomain pointing to your server. e.g. v.example.com

Key

  • MasterDNS: 32-character encryption key from encrypt_key.txt on the server
  • VayDNS: 64-character hex public key from server.pub on the server

Scan Options

Option What it controls Recommended for Iran
Target How many resolvers to find 100 — more resolvers = more stable VPN
Concurrency Simultaneous connections during scan 80 — do not exceed 100 inside Iran
Timeout How long to wait per resolver 3s — Iranian networks are slow
Pool ×1000 How many IPs to scan 200 (= 200,000 IPs)

Tips

  • If you find fewer than 10 resolvers, increase Pool to 300 or 500
  • Run the scan 2–3 times — each run picks a different random set of IPs
  • Increasing Concurrency above 100 inside Iran causes silent failures and kernel panics on macOS Intel

The Three Scan Phases

Phase 1 — Alive check

Quickly pings all IPs in the pool to find which ones are responding on port 53. Fast but shallow.

Phase 2 — 6-check scoring

Tests each alive resolver against 6 criteria:

  • NS→A — does it resolve your NS record?
  • TXT — does it handle TXT queries?
  • RND — does it handle random subdomains?
  • DPI — does it pass Iran's DPI?
  • EDNS — does it support EDNS extensions?
  • NXD — does it respond correctly to non-existent domains?

Score shown as ★6/6 · ◆4–5 · ▸2–3 · ·0–1

Phase 3 — Real E2E tunnel test

Connects the actual VPN binary through each resolver to your server. This is the real filter — only resolvers that can tunnel traffic through to your server pass.

If Phase 3 passes zero resolvers, the issue is usually:

  • Server is down
  • DNS not propagated yet (wait up to 48h)
  • Wrong key

Save Buttons

After scanning:

  • 💾 Save to MasterDNS Profiles — saves with default options; go to the MasterDNS Profiles tab to customise
  • 💾 Save to VayDNS Profiles — saves with default options; go to the VayDNS Profiles tab to customise

The VPN binary is copied into the output folder automatically when you save.

Export DNS List

After any scan, the 📤 Export DNS List button activates regardless of which VPN mode is selected. It saves the found resolver IPs as a plain .txt file — one IP per line, with a header showing the date and total count.

Use this when you want to:

  • Pipe the resolver list into another tool or script
  • Archive results from multiple scans
  • Share working resolvers without sharing an entire profile

Clicking 🗑 Clear disables the export button until the next scan.

Related

Clone this wiki locally