What's new

Is there good VPN tunnel plain DNS filtering software for Windows?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

SDF07S

Occasional Visitor
I just want a simple filtering system within my VPN tunnels and have that filtering use native Windows DNS services. It doesn't appear to be possible.

Windows "hosts" file is a mess. If DNS Cache service is enabled, then Windows (any version) can't handle large block lists without slowing down significantly. DNS Cache is required for VPN's, like the official WireGuard for Windows. There are also Windows and Microsoft-related domains hard-coded into DNS library files and hosts file cannot filter them at all, but that is not an issue.

There is DNSCrypt-Proxy, but it handles only encrypted connectons and only allows you to forward specific domains to cleartext DNS (such as VPN DNS) of you choosing. You can't force it to forward all domains to whichever cleartext DNS addresses. There is YogaDNS. Its closed-source and driver-based. There is also NextDNS, but it requires an account.

Is there perhaps a tweak to improve Windows hosts file caching speed when DNS Cache service is enabled?
 
Windows 10/11 has native support for encrypted DNS (DNS over HTTPS).
There are many free filtering DNS services out there which do not require an account (Adguard, Cleanbrowsing, Quad9....)
 
I meant custom DNS filtering. I have my own lists. I use VPN and don't have much need for encrypted DNS, but I do want to apply my own filters and I can't do it through hosts file because after 1000 entries or so it starts to cause network delays.
 

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top