Security from minute zero: Why every Lumi-Systems notebook ships with Quad9 DNS
Your privacy is not a matter of indifference to us. That's why we configure it before shipping.
By Dimitri Rupp, founder of Lumi-Systems.io | October 3, 2025
It is 2025, and most people still buy computers that are just as insecure as they were ten years ago. Your new laptop comes out of the box, you switch it on – and from the first second on the Internet, your Internet provider knows exactly which websites you visit. Not only that: this information is transmitted unencrypted, is vulnerable to manipulation, and opens the door for malware.
At Lumi-Systems, we do things differently.
The invisible protective shield: What Quad9 DNS means for you
Every notebook that leaves our warehouse in Vienna is already equipped with a security configuration that normally only IT professionals give their own systems: Quad9 DNS with DNS-over-TLS and DNSSEC.
What sounds like technical jargon at first means something very concrete for you as a user: You get your first protective wall against digital threats from us free of charge – and it works from the first second.
What makes Quad9 DNS so special?
Quad9 is not an ordinary DNS service. While most people use their Internet provider's DNS servers (often without knowing it), we deliberately chose an alternative that puts your security and privacy first.
Here are the concrete benefits you use every day:
🛡️ 1. Automatic malware protection – without additional software
Quad9 automatically blocks access to known malware domains before you can even reach a dangerous website. The special thing: This blocking happens at the DNS level – before your browser even contacts the website.
What that means for you: You don't have to buy or configure additional security software. The protection is simply there, in the background, 24/7.
A practical example: Phishing emails contain links to fake banking websites. Even if you click such a link, the connection is blocked by Quad9 before the fake page loads. You see an error message instead of a deceptively real fake page.
🔒 2. Encrypted DNS requests: Your Internet provider sees less
Normally, your Internet provider can see every website you visit – even if the website itself is encrypted (HTTPS). Why? Because the DNS request is sent unencrypted.
We enable on all Lumi-Systems notebooks DNS-over-TLS (DoT). This means: Your DNS requests are transmitted encrypted over port 853. Your internet provider only sees encrypted traffic, not which websites you visit.
What that means for you: More privacy. Period. Your browsing behavior remains your business – not your internet provider's.
✅ 3. DNSSEC: Protection against manipulation
DNSSEC (Domain Name System Security Extensions) ensures that the DNS responses you receive are authentic and were not manipulated on the way to you.
What that means for you: Protection against DNS hijacking and cache poisoning attacks. When you type „bank.at“ into your browser, you actually end up at bank.at – and not at a fake page from an attacker.
🇨🇭 4. Privacy by Design: No logs, no trackers
Quad9 is a non-profit organization based in Switzerland and is subject to strict European data protection laws. Unlike many other DNS providers:
- No storage of your IP address
- No sale of your data to advertisers
- No usage profiles for targeted advertising
- GDPR-compliant by design
What that means for you: Your digital life remains private. Your DNS requests are not compiled into a profile about you and sold.
Why most computers don't have this – and why we set it up anyway
The uncomfortable truth: Most computer manufacturers ship devices with insecure default settings.
Why? Because it's easier. Because configuration takes time. Because most buyers don't know they have a problem that could be solved.
At Lumi-Systems, we have a different philosophy:
„Pre-Hardened by Default“
Security should not be optional. It should be the standard.
What you get – automatically, at no extra cost
When you buy a Lumi-Systems notebook, the system is already optimized for you:
✅ Quad9 DNS (9.9.9.9 & 149.112.112.112) as primary resolvers
✅ DNS-over-TLS for encrypted queries
✅ DNSSEC for authenticity verification
✅ Malware blocking at DNS level
✅ Privacy-first configuration without logs
And the best part: You don't have to do anything. It just works. From the moment you first turn it on.
Rollback possible: You have control
We believe in transparency. That's why we not only document what we configure, but also provide the tools to undo changes – if you want to.
Every Lumi-System comes with documentation that explains:
- What was configured and why
- How you can verify the configuration
- How to return to the default configuration if needed
- How to set up alternative DNS servers (if desired)
This is your computer. You decide.
Outlook: The next evolutionary stage – Proactive monitoring
Quad9 DNS is only the beginning. We are already thinking ahead.
The vision: Lumi-Systems notebooks that are not only secure from the start, but that proactively warn you about problems – before you even notice that something is wrong.
What we are currently evaluating: Remote Monitoring & Management
We are currently testing enterprise-grade monitoring solutions specifically optimized for Linux systems:
- NinjaOne: The dominant player in the RMM space with a strong Windows focus, but growing Linux support
- Level.io: A modern, cost-efficient alternative with excellent Linux support and Ansible integration
Our goal: An optional service for customers who want more than just a secure system – who want an actively monitored and maintained system want.
What could a Lumi-Systems monitoring service mean for you?
Imagine:
🔔 Proactive notifications: „Your disk space is 85% full. Would you like a recommendation for cleanup?“
🔄 Automatic updates: Security patches are installed automatically – at the time you specify. No hassle with „Windows Update during the presentation.“
🛡️ DNS configuration monitoring: If your Quad9 configuration is overwritten for any reason (e.g., by other software), you will be notified and can restore it.
📊 System health dashboard: See at a glance how your system is doing – storage, CPU, network, security status.
🚨 Real-time security alerts: Unusual activity? You will know immediately.
Why Linux-focused monitoring tools?
All Lumi-Systems notebooks run on AnduinOS – an Ubuntu-based Linux system optimized for stability and security. While most RMM tools are focused on Windows, we are specifically looking for solutions that:
✅ Native Linux integration offer (systemd, apt, snap)
✅ Automation via Ansible support
✅ Lightweight are (no resource waste)
✅ Open-source-friendly are in their architecture
✅ Privacy-respecting are in their implementation
Our standard: When we offer monitoring, we do so in a way that fits our privacy-first philosophy. Your data remains your data.
Transparency and security are very important to us
Many manufacturers treat their configurations like trade secrets. We do the opposite.
Transparency creates trust.
If you know what we configure and why, you can make an informed decision. If you like our DNS configuration, recommend us. If you have other preferences, we respect that – and still provide the documentation so you can customize your system to your liking.
This is not a marketing trick. This is our conviction:
Computers should be made for people – not the other way around.
Frequently asked questions (FAQ)
Q: Does the Quad9 configuration cost extra?
A: No. The secure DNS configuration is included with every Lumi-Systems notebook – at no extra cost.
Q: Can I change the DNS settings if I want to?
A: Absolutely. It's your computer. We provide documentation that explains how to return to the default configuration or set up alternative DNS servers.
Q: Does Quad9 also work in corporate networks?
A: In most corporate networks, there is a dedicated DNS server. In this case, your notebook will automatically use the company DNS. The Quad9 configuration only takes effect when you are connected to external networks (e.g., home network, public Wi-Fi).
Q: Will my internet speed slow down?
A: On the contrary. Quad9 uses a global anycast network with servers worldwide. In many cases, Quad9 is faster than your internet provider's DNS servers.
Q: When will the monitoring service be available?
A: We are currently in the evaluation phase. If everything goes according to plan, the optional monitoring service will be available in early 2026. Existing customers will get access to a closed beta phase.
Q: Can I also book monitoring later?
A: Yes! Even if you already own your Lumi-System, you can add monitoring services later once they are available.
Conclusion: Security should not be optional
At Lumi-Systems, we believe that security and privacy are fundamental rights – not premium features.
The Quad9 DNS configuration on all our notebooks is a small but important step in this direction. It shows that it is possible to ship computers that are more secure from day one – without the end user having to be an IT expert.
And we are not stopping here. With our planned monitoring service, we want to reach the next level: computers that are not only secure, but that actively help you stay secure.
That is our mission. That is Lumi-Systems.
About the Author
Dimitri Rupp is the founder of Lumi-Systems.io and responsible for technical product strategy. With over 20 years of experience in IT operations and cybersecurity, he advocates for privacy-first technology and user-friendly security solutions.
📧 Contact: dimitri.rupp@lumi-systems.io
🌐 Website: https://lumi-systems.io
💼 LinkedIn: https://www.linkedin.com/in/dimitrirupp
Would you like to learn more?
👉 Visit our online store and discover our pre-installed AnduinOS notebooks.
👉 Questions? Send us an email – we reply personally.
#LumiSystems #CyberSecurity #PrivacyFirst #Quad9DNS #LinuxDesktop #AnduinOS #MadeInVienna #levelio
Note: This blog post is for informational purposes only. Technical specifications may change. You can find current information at lumi-systems.io.
