RECURSIVE DNS · NETWORK POLICY
Your network. Your rules.
Allow client networks, block websites and choose content policies.
Who can use this DNS resolver?
Only the listed source IP addresses and pools can send DNS requests.
Use CIDR notation for a pool. Localhost entries are retained for server operation. An empty external list blocks external access.
| IP address / network | Scope | Access | Action |
|---|
The resolver must see the subscriber’s source IP for individual policies. If a router replaces every source with its own address, policies apply to that router’s address.
Website rules
Block a domain and its subdomains, or create an allow exception.
| Website | Applies to | Action | Status | Manage |
|---|
Existing advanced rules are preserved. Allow exceptions take precedence according to the filtering engine’s rules.
Content & service policy
Choose a shared policy or set an override for a specific IP or pool.
DNS filtering works at domain level. It cannot distinguish individual videos, messages or pages inside the same HTTPS service. A specific policy replaces that client’s inherited content settings.
Check a website policy
Check how the current rules apply to one source IP without changing them.
Enter a domain and client IP to check.Open query logs ↗