NxFilter

Overview

NxFilter is a self-hosted DNS filter for administrators who need network-wide controls tied to users and groups. It is best suited to managed workplaces, schools, and similar networks that can operate their own filtering service. Its free commercial-use license is a strong starting point, but license limits warn rather than enforce a user cap.

Key features

Administrators can combine URL keyword filtering, custom blocklists, safe-search controls, schedules, screen-time limits, and data caps. User and group policies, authentication including Active Directory integration, and advanced activity reports make NxFilter more relevant to managed networks than to people seeking a simple household DNS service.

NxFilter caches responses from its upstream DNS server and serves them locally, a practical way to handle repeated queries within the network. Reports can be daily, weekly, or user-level, and logs can be retained for up to 400 days. Clustering supports load balancing and fail-safe across one master and up to four slave nodes, which gives larger deployments a path beyond a single server.

Remote Windows and Android devices can use filtering agents. Roaming iOS and Android devices can use DNS over HTTPS, but this setup requires an installed SSL certificate and NxFilter user authentication. That makes roaming coverage possible, though it entails more administration than simply applying policies on the local network.

Pricing

The NxFilter plan costs nothing and permits commercial and non-commercial use. The maker's license also prohibits selling the software in its original form. The free option makes sense for organizations comfortable managing deployment and deciding whether the included service meets their classification needs.

Paid plans are priced per 50 users. Jahaslist Monthly costs $7 a month and includes a local database, dynamic classification, and a free clustering license. Jahaslist Annual costs $60 a year for the same features, with a multi-year discount. Cloudlist Annual costs $150 a year and includes a cloud database, dynamic classification, and a free clustering license. The monthly Jahaslist plan suits those preferring a monthly term; the annual Jahaslist plan lowers the stated price for the same 50-user package, while Cloudlist is the option for a cloud rather than local database.

The license counts unique usernames and client IP addresses daily. Going over the licensed user limit produces a visual warning in logs, not blocked traffic, so it is not a hard access-control boundary. The EULA says the software may send Jahastech a usage report that does not contain end-user personal information.

Platforms

NxFilter supports Windows, Linux, Docker, pfSense, iOS, Android, and macOS via DNS over HTTPS. The maker provides Windows executables, Debian packages, and ZIP downloads, and points to third-party RPM packages and Docker images. A support forum and [email protected] are available for contact.

Who it's for

NxFilter fits administrators who want user-aware DNS policies, longer-term activity records, and the option to cover remote devices. Its free license and clustering support can suit organizations that can handle setup and monitoring. It is a weaker fit for anyone who needs license overages to automatically stop access, or who wants roaming-device coverage without certificate and authentication requirements.

Pros and cons

• Pros: Free commercial and non-commercial use keeps the core service accessible to organizations.
• Pros: User and group policies, Active Directory authentication, and user-level reporting support managed access rather than only network-wide filtering.
• Pros: Up to 400 days of log retention and clustering with one master and four slave nodes support sustained reporting and larger deployments.
• Cons: Exceeding the licensed user limit creates a warning rather than blocking traffic, so administrators must monitor usage themselves.
• Cons: Roaming DNS-over-HTTPS filtering requires an installed SSL certificate and NxFilter authentication.

Alternatives

For a hosted DNS option with an open-source codebase, consider AdGuard DNS; its free plan and listed platform range also cover several device types. NextDNS may suit readers who want a free plan with 300,000 queries per month, unlimited devices and configurations, and all features, rather than NxFilter's self-hosted server approach.

Quad9 is a simpler choice for readers seeking a free DNS service with no contract or sign-up. For a free, open-source, self-hosted DNS server, consider Technitium DNS Server; Blocky is another free, open-source self-hosted DNS proxy. Pi-hole is a free open-source option for supported Linux hardware or Docker.

RethinkDNS is worth considering for a free, open-source Android app. Readers comparing a broader device-focused filtering product can also consider AdGuard.

Browse more options in DNS Filtering Software or Internet Filtering Software.

Verdict

Choose NxFilter if you need self-hosted DNS filtering with user and group policies, substantial reporting, and the ability to extend controls to roaming devices. Its free commercial-use license is compelling, and paid plans add dynamic classification; the main reason to look elsewhere is that the licensed-user threshold does not enforce itself, while remote setup has certificate and authentication requirements.