webfilter-ng
The facts below are what the maker publishes about webfilter-ng, checked and dated. Our editors have not written about it yet.
The facts
Each one read from webfilter-ng's own pages, with the date it was checked.
What it does
- Categorification
- The categorify.org API option is gateway-only, and the README says its current implementation adds reliability only to adult-content filtering.checked 5 Oct 2026
- Categorification API
- The categorify.org API option is available only for gateway filtering, and the README says its current implementation adds reliability only to adult content filtering.checked 11 Oct 2026
- Deployment
- It is intended to run on a standalone Linux computer or as a router or internet gateway.checked 11 Oct 2026
- DNS bypass checks
- With DNS filtering, webfilter-ng compares the requested website IP with IPs supplied by the DNS filtering service and blocks requests when they do not match.checked 11 Oct 2026
- Filtering methods
- The project describes four usage options: squidGuard, a public DNS filtering service, DNS filtering plus the categorify.org API, or a whitelist or blacklist.checked 11 Oct 2026
- Filtering modes
- The README describes filtering with squidGuard, a public DNS filtering service, that service with the categorify.org API, or a whitelist or blacklist.checked 5 Oct 2026
- HTTPS handling
- It says HTTPS traffic can be filtered without decrypting it or installing root certificates on client computers.checked 11 Oct 2026
- Integrations
- The README describes using a local BIND9 DNS resolver and DHCP distribution for gateway DNS filtering, and names CleanBrowsing as a DNS filtering service option.checked 11 Oct 2026
- IPv6 limit
- The README says IPv6 is not yet supported and instructs users to disable it on the Linux computer or router.checked 5 Oct 2026
- License
- The repository identifies the project license as LGPL-3.0.checked 11 Oct 2026
- Logs
- The README gives /var/log/webfilter-ng as the location for logs.checked 11 Oct 2026
- Notable limits
- The README says IPv6 is not yet supported and should be disabled on the Linux computer or router.checked 11 Oct 2026
- Protocol limit
- The README says standard IETF QUIC is not currently filtered; Google-QUIC support is described as work in progress.checked 11 Oct 2026
- Purpose
- webfilter-ng filters HTTP and HTTPS web access by domain name using the HTTP Host field or TLS SNI.checked 11 Oct 2026
- QUIC limit
- The README says standard IETF QUIC is not currently filtered; Google-QUIC support is described as experimental or work in progress.checked 5 Oct 2026
- Safe search
- The README describes an optional gateway setup to enforce safe search on Bing and Google using a BIND9 RPZ zone.checked 11 Oct 2026
- TLS filtering
- It reads TLS ClientHello SNI to filter HTTPS without decrypting traffic or installing root certificates on client computers.checked 5 Oct 2026
- Transparent operation
- The README says filtering is transparent and client proxy settings are not needed.checked 11 Oct 2026
Where it runs
- Platform requirement
- Installation instructions specify Debian or Ubuntu and require Linux networking packages including iptables and libnetfilter_queue.checked 5 Oct 2026
- Platform requirements
- The documented installation requirements are for Debian or Ubuntu and include build tools, iptables, and netfilter queue libraries.checked 11 Oct 2026
Alternatives to webfilter-ng
- 1
AdGuard DNS
Free planOpen sourceAndroidiOSWebAPI8.6From $29.88 a year - 2
NextDNS
Free planOpen sourceAndroidiOSWebAPI8.6From £1.79 a month - 3
Cloudflare Gateway
Free planAndroidiOSWebAPI8.3$7 usage-based - 4
Control D
Open sourceAndroidiOSWebAPI8.1From $2 a month - 5
OpenBLD
Free planAndroidiOSWebAPI7.9From $15 a month - 6
DNSFilter
AndroidiOSWebAPI7.8From $1 a month