Diladele Web Safety vs FilterDNS

Diladele Web Safety is a web filter and secure web gateway for inspecting and filtering internet traffic across a network. It can decrypt, inspect, filter, and re-encrypt incoming and outgoing TLS traffic. Administrators can block sites through more than 50 regularly updated categories and manually recategorize them. The software also supports EasyList ad blocking and download restrictions based on filename, detected contents, MIME type, and file size. Traffic reports cover visited and blocked sites, user activity, bandwidth, and prohibited categories; reports can be saved locally, exported as CSV, or emailed. Proxy users can be grouped by IP address, subnet, username, or Microsoft Active Directory security group. Authentication options include Kerberos, NTLM, Basic LDAP, and Microsoft Entra ID Captive Portal. Deployment options include virtual appliances for VMware, Hyper-V, Proxmox, Azure, and AWS, or installation on Ubuntu 26.04 hardware, with browser-based administration. The vendor describes home and school filtering uses, including Internet Watch Foundation prevention database support. A free small business license covers up to seven filtered devices or users; paid plans start at €299 a year.

FilterDNS is a self-hosted DNS filtering service for blocking ads, trackers, and malware. It supports DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53. Users can create separate profiles for different devices or use cases, with custom domain allow and deny rules and preset rule sets such as gaming and social media. Preconfigured blocklists include Hagezi, StevenBlack, and OISD. Query logs and statistics let users review DNS requests; logging is enabled by default in the documented configuration. Filtering can be paused for 5, 15, 30, or 60 minutes, and maintenance mode allows DNS only for approved domains. The project documents API endpoints for profiles, logs, statistics, rules, presets, devices, and administration. Its Docker Compose quick start uses PostgreSQL and a SvelteKit web UI available locally at http://localhost:8080. DoH and DoT require a wildcard TLS certificate for the service domain. FilterDNS is MIT-licensed and free to self-host.