FilterDNS

Overview

FilterDNS is a self-hosted DNS filter for blocking ads, trackers, and malware. It suits people who want to manage filtering profiles for different devices or use cases and are comfortable running a server. Its range of manual controls and DNS protocols is appealing; deploying the service and arranging a wildcard TLS certificate add work.

Key features

FilterDNS accepts DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53. That gives users a choice of encrypted DNS methods and a conventional option. DoH works with Firefox, Chrome, iOS, and Android; DoT works with Android Private DNS and iOS profiles.

Profiles keep device or use-case configurations separate. Each can combine custom domain allow and deny rules with presets such as gaming and social media. Hagezi, StevenBlack, and OISD blocklists provide starting points, and custom blocklists are supported. This flexibility helps tailor filtering, though it also means users must decide which rules suit each profile.

Query logs and statistics make DNS activity visible, while the documented configuration enables logging by default. Reports are basic, so this is useful for inspecting activity rather than a deep reporting workflow. Users can pause filtering for 5, 15, 30, or 60 minutes, or switch to maintenance mode, which blocks DNS except for allowed domains. Those controls are manual: there are no filtering schedules or safe-search controls.

The API covers profiles, logs, statistics, rules, presets, devices, and administration, which gives programmatic managers a broad set of controls. The quick start uses Docker Compose, with the web UI at http://localhost:8080. The documented architecture also uses PostgreSQL and a SvelteKit web UI. Encrypted DNS requires a wildcard TLS certificate for the service domain, a meaningful setup requirement for anyone operating the service.

Pricing

FilterDNS costs nothing. The MIT-licensed software is self-hosted, with no trial and no paid tier. It suits users who can provide and maintain their own deployment; the price does not include a hosted service. Its free plan has no stated seat or query quota, and custom blocklists are supported.

Platforms

FilterDNS supports Android, iOS, Linux, macOS, Windows, web, API, and self-hosted use. Its documented DNS compatibility includes DoH, DoT, and legacy DNS, with client support for Firefox, Chrome, Android, and iOS.

Who it's for

FilterDNS is for people who want to operate their own filtering service and tune rules separately for devices or purposes. It is especially suited to users who value query visibility, custom rules, and API management. People seeking a managed service, scheduled filtering, or safe-search controls should look elsewhere.

Pros and cons

• Pros: Three DNS protocol options let users accommodate encrypted and legacy clients.
• Pros: Per-profile rules, presets, and custom blocklists support tailored filtering across devices and use cases.
• Pros: Query statistics, temporary pauses, maintenance mode, and API endpoints give operators practical ways to inspect and manage filtering.
• Cons: Self-hosting with Docker Compose and PostgreSQL means the operator takes on deployment and upkeep.
• Cons: DoH and DoT require a wildcard TLS certificate for the service domain.
• Cons: Reports are basic, and there are no filtering schedules or safe-search controls.

Alternatives

Choose AdGuard DNS if you want a free plan alongside a freemium offering and a free trial; it also supports a broad range of platforms and is described as open source by AdGuard.

DNS for Family is another free option with no trial and broad platform support; its free plan applies fair-use limits to unusually high query volumes.

Choose NextDNS if you prefer a freemium service with a free plan capped at 300,000 queries per month, unlimited devices and configurations, and all features.

OpenBLD offers a free plan with about 100,000 DNS queries per day for private use and a limit of 100 requests per second per IP.

OpenDNS Home is a free alternative that includes a preconfigured Family Shield option for blocking adult content without sign-up.

Choose Cloudflare Gateway if you need a free plan for up to 50 users with standard log retention of up to 24 hours, or a paid pay-as-you-go tier at $7 a month.

DNS Daddy is another free and open-source option with no account, trial, subscription, or paid tiers.

GateSentry is a free open-source alternative under the Apache-2.0 license.

Browse more options in Internet Filtering Software.

Verdict

Choose FilterDNS if you want free, self-hosted DNS filtering with separate profiles, adaptable rules, query visibility, and API control. Look elsewhere if you want filtering without server administration, or need schedules, safe-search controls, or more developed activity reports.