NxFilter

NxFilter is a DNS filtering server for administrators who need user-level policies, activity reporting, and controls for devices beyond the office network. It suits schools, businesses, and other managed networks; the key trade-off is that it takes deliberate setup and licensed-user limits are warnings, not enforcement.

Overview

NxFilter filters DNS queries across a network, with rules that can be assigned to individual users or groups. Its freeware license permits commercial and non-commercial use, making the core filtering service an option for organizations that can manage their own deployment. Paid plans add dynamic classification through Jahaslist or Cloudlist databases.

The software can send Jahastech a usage report that its EULA says contains no end-user personal information. Its license counts unique usernames and client IP addresses each day. If the licensed user limit is exceeded, logs show a visual warning; NxFilter does not block traffic as a result. That distinction matters for administrators who need a hard seat cap rather than a prompt to review usage.

Key features

URL keyword filtering, custom blocklists, safe-search controls, schedules, screen-time controls, and data caps let administrators tailor access by user or group. Active Directory integration can connect authentication to an existing directory, while advanced activity reporting includes daily, weekly, and user-level reports. Log retention extends up to 400 days, useful for organizations that need a longer record of network activity.

NxFilter caches responses from an upstream DNS server and serves them locally, avoiding repeated upstream lookups for cached requests. Clustering supports load balancing and fail-safe operation with one master and up to four slave nodes, a practical option for deployments where a single filtering server is insufficient.

Remote Windows and Android devices can use filtering agents. Roaming iOS and Android devices can use DNS over HTTPS, but that route requires an installed SSL certificate and NxFilter user authentication. Administrators should account for those requirements when planning off-network coverage.

Pricing

The free NxFilter plan costs nothing and permits commercial or non-commercial use. The software license prohibits selling NxFilter in its original form. Freeware is the most economical choice for teams that can work within their user limit and do not need paid dynamic classification.

The paid prices are per 50 users. Jahaslist Monthly gives the same stated user allowance and local-database classification as its annual counterpart, but bills monthly; the annual plan adds a multi-year discount. Cloudlist Annual is the option for those who want a cloud database rather than a local one. A 30-day trial is also offered. Because the daily licensed-user count can trigger a log warning without blocking, administrators should not treat the cap as an access-control safeguard.

Platforms

NxFilter runs on Windows and Linux, with Docker and pfSense support; the maker also provides a Windows executable, Debian package, and ZIP download, and points to third-party RPM packages and Docker images. Its management and API support extend its reach beyond desktop operating systems. Filtering is supported on Windows and Android through agents, with iOS and Android roaming coverage through DNS over HTTPS subject to certificate and authentication requirements. macOS is supported via DNS over HTTPS.

The maker, Jahastech, is based in Seocho-gu, Seoul, Republic of Korea. Support is available through a forum and by email at [email protected].

Who it's for

NxFilter is best suited to administrators managing a network who want granular DNS policies, reports, and the option to extend filtering to remote devices. Its free commercial-use license makes it attractive when budget is tight and the daily user count fits. It is less suitable when an organization needs user-limit enforcement, wants a turnkey consumer DNS service, or cannot accommodate certificate and authentication setup for roaming devices.

Pros and cons

• Pros: Freeware allows commercial use, and policy controls include user and group rules, schedules, screen-time limits, data caps, and safe search.
• Pros: Up to 400 days of logs, user-level reports, and clustering across a master and as many as four slave nodes support administration at scale.
• Pros: Windows and Android agents plus DNS-over-HTTPS support provide a route to filter devices away from the network.
• Cons: Exceeding the licensed-user limit only raises a visual log warning; it does not block users or devices.
• Cons: Roaming DNS-over-HTTPS setup requires an installed SSL certificate and user authentication, adding operational work.
• Cons: Paid classification is divided between local and cloud databases, so teams must choose which model fits their deployment.

Alternatives

Choose AdGuard DNS if open-source DNS filtering and broad platform support are priorities; it has a free plan and free trial. NextDNS may suit readers who prefer a cloud-oriented service with a free plan capped at 300,000 queries per month, unlimited devices and configurations, and all features. Quad9 is a simpler free DNS service for readers who want no contract or sign-up process.

Technitium DNS Server is another free, open-source, self-hosted DNS server. Choose AdGuard if you want a freemium filtering product with personal and family device plans. CleanBrowsing is an option for readers who want a paid Basic tier with up to 25 devices or 3.75 million requests per month. Control D may suit those looking for endpoint-based SMB pricing and a free trial. RethinkDNS is a free, open-source Android app for readers who specifically want filtering on Android.

Browse more options in DNS Filtering Software or Internet Filtering Software.

Verdict

Choose NxFilter if you administer a network and want detailed user-based DNS controls, long-lived reporting, and commercial-use freeware with paid classification options. Its main advantage is the breadth of policy and reporting features in a self-managed system; look elsewhere if you need licensed-user caps to block access or want roaming-device filtering without certificate and authentication setup.