FilterDNS

Overview

FilterDNS is a self-hosted DNS filtering service for blocking ads, trackers, and malware. It suits people who want separate rules for different devices and direct visibility into DNS activity. Its flexible profiles come with the trade-off of deploying and maintaining the service yourself.

Key features

FilterDNS supports DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53. Profiles let users tailor filtering by device or use case, with custom domain allow and deny rules and presets for gaming and social media. Preconfigured Hagezi, StevenBlack, and OISD blocklists provide starting points; support for custom blocklists offers room to adapt them.

Query logs and statistics help users see what their profiles are doing, but logging is enabled by default in the documented configuration and activity reports are basic. Users who do not want to retain query records should account for that default. Filtering can be paused for 5, 15, 30, or 60 minutes, and maintenance mode blocks DNS except for allowed domains. These are practical manual controls, not a substitute for filtering schedules, which FilterDNS does not offer; it also has no safe-search controls.

The API documents endpoints for profiles, logs, statistics, rules, presets, devices, and administration. That breadth is useful for users who want programmatic control. The quick start uses Docker Compose, with a web interface at http://localhost:8080; the documented architecture uses PostgreSQL and a SvelteKit web UI. Encrypted DNS has an important prerequisite: DoH and DoT require a wildcard TLS certificate for the service domain.

Pricing

FilterDNS is open-source MIT-licensed software, with a free self-hosted plan at free. There are no paid tiers or trial period described. The cost advantage comes with operational responsibility: users deploy and manage the service themselves, rather than selecting a hosted plan.

Platforms

The service supports DoH, DoT, and legacy DNS. The README says DoH works in Firefox, Chrome, iOS, and Android; DoT works with Android Private DNS and iOS profiles. The broader platform support includes Linux, macOS, Windows, web, API, and self-hosted deployment.

Who it's for

FilterDNS is a strong fit for technically capable users who want self-service profiles for distinct devices or use cases, customizable domain rules, and query-level visibility. It is less suited to people seeking a managed service, scheduled filtering, safe-search controls, or encrypted DNS without handling certificate setup. The project is associated with ZKM | Center for Art and Media Karlsruhe, which describes its open-source work as tools and research and supports making publicly funded software publicly available.

Pros and cons

• Pros: Profiles combine custom rules, presets, and established preconfigured blocklists, making policies adaptable across devices and use cases.
• Pros: Logs, statistics, and a broad documented API give users visibility and multiple ways to manage the service.
• Cons: Docker Compose deployment and a required wildcard TLS certificate for DoH and DoT add setup and maintenance work.
• Cons: No safe-search controls or filtering schedules limits suitability for users who want those controls built in.
• Cons: Query logging is enabled by default in the documented configuration, so users should consider log handling before deployment.

Alternatives

Choose AdGuard DNS if you want a free plan with a trial option and open-source code. NextDNS is another freemium option; its free plan allows 300,000 queries per month, unlimited devices, and unlimited configurations. Consider OpenBLD for a free plan with about 100,000 DNS queries per day and stated private-use terms, or OpenDNS Home if you prefer a free service with a preconfigured adult-content-blocking option that requires no sign-up.

DNS for Family is a free alternative. NxFilter offers freeware for commercial and non-commercial use, as well as a paid plan. UnveilDNS has a free Community plan. Cloudflare Gateway has a free tier for 50 users with up to 24 hours of standard log retention.

Browse more options in Internet Filtering Software.

Verdict

Choose FilterDNS if you want configurable DNS filtering, device-specific profiles, and query visibility, and are prepared to self-host. Its MIT license and flexible controls make it a capable option for a self-managed setup; the deployment burden and wildcard certificate requirement are the clearest reasons to look elsewhere.