FilterDNS

FilterDNS is a free, MIT-licensed DNS filtering service designed for self-hosting. It can block ads, trackers, and malware using DNS over HTTPS on port 443, DNS over TLS on port 853, or legacy DNS on port 53. Users can create profiles for different devices or purposes, set custom allow and deny rules, and choose preset rule sets such as gaming and social media. The project lists Hagezi, StevenBlack, and OISD among its preconfigured blocklists. Query logs and statistics let users review DNS requests; logging is enabled by default in the documented configuration. Filtering can be paused for 5, 15, 30, or 60 minutes, while maintenance mode allows DNS only for permitted domains. The documented setup uses Docker Compose, PostgreSQL, and a SvelteKit web interface available locally at http://localhost:8080. DoH and DoT require a wildcard TLS certificate for the service domain. API endpoints cover profiles, logs, statistics, rules, presets, devices, and administration. The project documents support for Firefox, Chrome, iOS, and Android through its DNS options.

FilterDNS offers protocol choices, profile-specific rules, and query review for a self-hosted setup. Plan for its Docker Compose deployment and the certificate requirement if using DoH or DoT.

FilterDNS suits people who want to self-host DNS filtering and manage separate rules for different devices or use cases. Its profile controls also suit users who want temporary pauses or an allow-only maintenance mode.

Overview

FilterDNS is a free, MIT-licensed DNS filter that you run on your own server. It is best for people who want to set different rules for their devices and inspect DNS activity.

Key features

FilterDNS handles DNS over HTTPS on port 443, DNS over TLS on port 853, and legacy DNS on port 53. Profiles let users tailor filtering to a device or use case, using custom domain allow and deny rules alongside presets for gaming and social media. Hagezi, StevenBlack, and OISD blocklists provide ready-made starting points, and users can add custom blocklists. That flexibility is useful for households or self-managed networks with different needs, though the lack of filtering schedules means changes and pauses require manual attention.

Query logs and statistics show how profiles handle DNS requests, and the documented setup enables logging by default. This gives administrators useful visibility, but activity reports are basic and users should consider whether they want query logging left on. Filtering can be paused for 5, 15, 30, or 60 minutes; maintenance mode blocks DNS except for allowed domains. These are practical controls for temporary exceptions or tightly restricted maintenance windows. FilterDNS has no safe-search controls.

The API covers profile management, logs, statistics, rules, presets, devices, and administration, giving technically inclined users a way to manage more than the web interface alone. The quick start uses Docker Compose, with the web UI at http://localhost:8080; the documented architecture also relies on PostgreSQL and SvelteKit. DoH and DoT require a wildcard TLS certificate for the service domain, a meaningful setup hurdle for anyone seeking encrypted DNS. The README identifies support for DoH in Firefox, Chrome, iOS, and Android, and for DoT through Android Private DNS and iOS profiles.

Pricing

FilterDNS costs nothing. The free plan is the software itself: open-source, MIT-licensed, and self-hosted, with custom blocklists and basic activity reports. There is no free trial because there is no paid plan to trial. The price is attractive for users able to provide and maintain their own deployment; it does not remove the work of running the service, configuring Docker Compose, or obtaining the required wildcard certificate for DoH or DoT.

Platforms

FilterDNS is categorized for Android, iOS, Linux, macOS, Windows, web, API, and self-hosted use. Its documented client support includes Firefox and Chrome, mobile DoH, Android Private DNS and iOS profiles for DoT, plus legacy DNS. This range gives users several ways to connect devices, while the central service still needs to be deployed and administered by the user.

Who it's for

FilterDNS suits technically capable users who want self-service profiles for different devices or use cases, control over allow and deny rules, and visibility into DNS queries. It is less suitable for someone seeking a managed filter with scheduled rules, safe-search controls, or minimal setup. The project comes from ZKM | Center for Art and Media Karlsruhe, a public institution that frames its open-source work as tools and research and supports public access to publicly funded software.

Pros and cons

• Pros: Three DNS protocols, custom rules, presets, and multiple blocklist options give administrators meaningful control over how each profile filters.
• Pros: Query logs, statistics, and a broad API support review and programmatic management of DNS activity.
• Pros: The software is free and MIT-licensed, with no paid tier to unlock its filtering features.
• Cons: Docker Compose deployment and self-hosting demand server setup and maintenance.
• Cons: DoH and DoT require a wildcard TLS certificate for the service domain.
• Cons: Logging is on by default in the documented configuration, activity reporting is basic, and there are no filtering schedules or safe-search controls.

Alternatives

AdGuard DNS is another free-plan option, with freemium pricing, a free trial, and an open-source codebase that AdGuard says anyone can inspect. NextDNS may suit readers who want a hosted free plan with 300,000 queries per month, unlimited devices and configurations, and all features; its listed price is free. NxFilter offers a freeware plan for commercial and non-commercial use, as well as a Jahaslist Monthly plan at $7 a month. OpenBLD has a free private-use tier with about 100,000 DNS queries per day and a limit of 100 requests per second per IP. UnveilDNS offers a Community plan with unlimited devices and requests, filtering across more than 120 services, and safe-search controls. DNS Daddy is a free, open-source alternative with no account, trial, subscription, or paid tiers. DNS for Family is another free option, with fair-use limits and rate limits for unusually high query volumes. OpenDNS Home offers a free Family Shield plan preconfigured to block adult content without sign-up, alongside a free Home plan.

Verdict

Choose FilterDNS if you want a free, self-hosted DNS filter with per-profile rules, several protocol options, and query visibility—and are prepared to run the service yourself. Its chief advantage is combining flexible profile controls with an open-source deployment. Look elsewhere if you want managed setup, filtering schedules, safe-search controls, or encrypted DNS without handling a wildcard certificate.