Feature Requests

Provide the ability to block DNS requests if the domain's destination IP address belongs to a specific country. Allow customers to decide which countries are blocked/allowed in the Dashboard.

A client approached me and asked if we could monitor what his employees were doing without stopping the activity. I was stumped, there's nothing for that. Could we have a monitor only policy in place along with the block policy? To filter all the things a company would want to see but not block completely. (Shopping, Social Media, and Sports are a few that come to mind)

Would be nice to be able to have a single user be assigned multiple policies. This is to prevent having to place an allow for everyone when only one person needs it. To help minimize the risk of over allowing a site for risk and or business need.

The Bing search engine allows Bing Chat to be disabled in a similar way to SafeSearch is enforced - by mapping www.bing.com to nochat.bing.com or nochatstrict.bing.com . Add this as an option to the SafeSearch configuration page.

We like to use the Parked Sites & Domains options - however it blocks too many valid sites. Suggestion to have the AI run a categorization check on these sites to try and properly Categorize them. Much in the same way it runs on a Uncategorized Sites.

It would be useful to be able to add a temporary whitelist/blacklist entry. We occasionally need to whitelist (or blacklist) a domain but don't want it permanently added. It would be great if we could indicate that this rule automatically expires in X days. And I guess we'd need a way to see expiring/expired rules.

The NETWORK should be able allow us to define a list of domains that we simply want to BLACK hole and NOT TO be processed at all. NOT a block but simply a black hole with no reply. This is in relation to DNS being used to spy on SMART TV Views where the TV sends a continuous stream of DNS queries revealing essentially WHAT you are watching and FOR HOW LONG you are watching. These domains are discoverable and they can be BLOCKED by DNSFilter but the problem this creates is that a single SMART TV left on 24x7 will generate upwards of 2 millions DNS queries as it continues to rat out what your watching.... A single SMART TV can generate 2 million DNS requests per month -- non of which are legitimate DNS requests. They are using DNS port 53, / 853 and DNS over TLS or HTTP to sneek an outbound packet that basically reveals WHAT YOU are watching and how long you are watching it. These packets can be a stream of continuous DNS packets going out from the TV. -- WHY NOT allow for a catch all BLACK HOLE in the DNSFilter cloud that if domains are matched here there are simply DISCARDED with no DNS reply response -- thereby not counting as traffic processed by DNSFilter at all and not counted against your TRAFFIC threshold.. This is a major issue. SURE -- we can reconfigure the TVs to use 1.1.1.1 or some other DNS server, but shouldn't DNSFilter offer a soluition here - -you can not expect everyone to be savy enough to change their DNS server settings on their TV. Lets be honest, the average user of a smart TV is using IP addressing and DNS server settings pushed to their device via DHCP probably associated with their WIFI router or a telcom network end point. Users are completely oblivious to DNS servers and changing them. So we need an elegant way to just DROP this traffic at the CLOUD level so it is just not counted. Just drop the DNS request and do not process it at all. The TV will still run and now you are PROTECTING the users of that TV so that their USER WATCHING habits are not being spied on and used for targeted advertising. THIS IS a security and privacy issue.

A preconfigured filter to control access to public internet update services such as Apple, Windows and other MS products and there are many others. This will be useful to reduce congestion on inbound over the gateway. A one click and forget solution. In some countries that have expensive internet or data capped internet services (yes they still exist), this helps preserve bandwidth and reduce expense for internet services.

Look at adding Doppelgänger for threat tab to block similar domains. See attached graphic

In our setup we block pages which belong to category "drugs". However we would like to have the pages which belong to the category "educational" (and "drugs") not to be blocked. We have seen lot's of pages which belong to both categories which we are now whitelisting. Perhaps it can be made possible with a "smart filter".