Skip to content
SPECIFICTION
Get listed

FilterDNS

github.com

Free plan WebWindowsmacOSLinuxiOSAndroid
Visit github.com
Spec score 8.6 #9 of 65 in Internet Filtering Software

What it is

FilterDNS is a self-hosted DNS filtering service for blocking ads, trackers, and malware. It supports DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53. Users can create separate profiles for different devices or use cases, with custom domain allow and deny rules and preset rule sets such as gaming and social media. Preconfigured blocklists include Hagezi, StevenBlack, and OISD. Query logs and statistics let users review DNS requests; logging is enabled by default in the documented configuration. Filtering can be paused for 5, 15, 30, or 60 minutes, and maintenance mode allows DNS only for approved domains. The project documents API endpoints for profiles, logs, statistics, rules, presets, devices, and administration. Its Docker Compose quick start uses PostgreSQL and a SvelteKit web UI available locally at http://localhost:8080. DoH and DoT require a wildcard TLS certificate for the service domain. FilterDNS is MIT-licensed and free to self-host.

Spec sheet

Purpose
FilterDNS is a self-hosted DNS filtering service for blocking ads, trackers, and malware.Read 11 Oct 2026 · github.com
Intended users
The README describes a self-service model in which users create and manage profiles for different devices or use cases.Read 11 Oct 2026 · github.com
Deployment
The quick start uses Docker Compose, and the documented architecture uses PostgreSQL and a SvelteKit web UI.Read 11 Oct 2026 · github.com
API
The service documents endpoints for profile management, logs, statistics, rules, presets, devices, and administration.Read 11 Oct 2026 · github.com
License
The project is distributed under the MIT License.Read 11 Oct 2026 · github.com
Headquarters
Karlsruhe, GermanyRead 28 Sep 2026 · github.com
Maker
The maker’s GitHub organization describes itself as ZKM | Center for Art and Media Karlsruhe, a public institution based in Karlsruhe, Germany.Read 11 Oct 2026 · github.com
Blocklists
The project lists preconfigured Hagezi, StevenBlack, and OISD blocklists.Read 11 Oct 2026 · github.com
Custom rules
Profiles can have custom allow and deny rules for domains.Read 11 Oct 2026 · github.com
Device support
The README says DoH works in Firefox, Chrome, iOS, and Android; DoT works with Android Private DNS and iOS profiles.Read 11 Oct 2026 · github.com
DNS protocols
It supports DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53.Read 11 Oct 2026 · github.com
Filtering controls
Profiles can pause filtering for 5, 15, 30, or 60 minutes, and maintenance mode blocks DNS except for allowed domains.Read 11 Oct 2026 · github.com
Intended context
ZKM describes its open source projects as tools and research, and says the institution believes publicly funded software should be publicly available.Read 11 Oct 2026 · github.com
Maintenance mode
Maintenance mode blocks all DNS except allowed domains.Read 11 Oct 2026 · github.com
Pause filtering
Filtering can be paused temporarily for 5, 15, 30, or 60 minutes.Read 11 Oct 2026 · github.com
Presets
It includes predefined blocking rule sets such as gaming and social media presets.Read 11 Oct 2026 · github.com
Profiles
Users can create profiles with separate filtering configurations for different devices or use cases.Read 11 Oct 2026 · github.com
Protocols
It supports DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53.Read 11 Oct 2026 · github.com
Query logs
Users can view and analyze DNS queries with statistics, and query logging is enabled by default in the documented configuration.Read 11 Oct 2026 · github.com
Rules and presets
Profiles support custom allow and deny rules and preset rule sets, including gaming and social media presets.Read 11 Oct 2026 · github.com
Setup
The quick start uses Docker Compose, and the web UI is accessed locally at http://localhost:8080.Read 11 Oct 2026 · github.com
TLS requirement
The README says DoH and DoT require a wildcard TLS certificate for the service domain.Read 11 Oct 2026 · github.com

Plans and prices

FilterDNS Free MIT-licensed software; self-hosted Read 11 Oct 2026 · github.com

Every FilterDNS plan and price →

Strong points and limits

Strong points

  • Supports DoH, DoT, and legacy DNS.
  • Profiles allow separate filtering configurations.
  • Includes Hagezi, StevenBlack, and OISD blocklists.
  • Query logs include statistics.
  • MIT-licensed and free to self-host.

Limits

  • DoH and DoT require a wildcard TLS certificate.
  • Query logging is enabled by default in the documented configuration.
  • No safe search controls are listed.
  • No filtering schedules are listed.

Who it suits

FilterDNS suits people who want to manage DNS filtering themselves across devices or use cases. Its profiles, blocklists, and domain rules support users who want to tailor what gets blocked.

Verdict

FilterDNS combines multiple DNS protocols with per-profile rules, presets, and query statistics. Self-hosting requires the documented setup, and DoH or DoT also requires a wildcard TLS certificate.

Where Specifiction places it

Alternatives to FilterDNSAll alternatives →