Feature Requests

A preconfigured filter to control access to public internet update services such as Apple, Windows and other MS products and there are many others. This will be useful to reduce congestion on inbound over the gateway. A one click and forget solution. In some countries that have expensive internet or data capped internet services (yes they still exist), this helps preserve bandwidth and reduce expense for internet services.

Would be nice to be able to have a single user be assigned multiple policies. This is to prevent having to place an allow for everyone when only one person needs it. To help minimize the risk of over allowing a site for risk and or business need.

The NETWORK should be able allow us to define a list of domains that we simply want to BLACK hole and NOT TO be processed at all. NOT a block but simply a black hole with no reply. This is in relation to DNS being used to spy on SMART TV Views where the TV sends a continuous stream of DNS queries revealing essentially WHAT you are watching and FOR HOW LONG you are watching. These domains are discoverable and they can be BLOCKED by DNSFilter but the problem this creates is that a single SMART TV left on 24x7 will generate upwards of 2 millions DNS queries as it continues to rat out what your watching.... A single SMART TV can generate 2 million DNS requests per month -- non of which are legitimate DNS requests. They are using DNS port 53, / 853 and DNS over TLS or HTTP to sneek an outbound packet that basically reveals WHAT YOU are watching and how long you are watching it. These packets can be a stream of continuous DNS packets going out from the TV. -- WHY NOT allow for a catch all BLACK HOLE in the DNSFilter cloud that if domains are matched here there are simply DISCARDED with no DNS reply response -- thereby not counting as traffic processed by DNSFilter at all and not counted against your TRAFFIC threshold.. This is a major issue. SURE -- we can reconfigure the TVs to use 1.1.1.1 or some other DNS server, but shouldn't DNSFilter offer a soluition here - -you can not expect everyone to be savy enough to change their DNS server settings on their TV. Lets be honest, the average user of a smart TV is using IP addressing and DNS server settings pushed to their device via DHCP probably associated with their WIFI router or a telcom network end point. Users are completely oblivious to DNS servers and changing them. So we need an elegant way to just DROP this traffic at the CLOUD level so it is just not counted. Just drop the DNS request and do not process it at all. The TV will still run and now you are PROTECTING the users of that TV so that their USER WATCHING habits are not being spied on and used for targeted advertising. THIS IS a security and privacy issue.

The Bing search engine allows Bing Chat to be disabled in a similar way to SafeSearch is enforced - by mapping www.bing.com to nochat.bing.com or nochatstrict.bing.com . Add this as an option to the SafeSearch configuration page.

CoPilot allows forcing commercial data protection via some DNS redirects; would be helpful to have that toggleable via DNSFilter rather like SafeSearch is. https://learn.microsoft.com/en-us/copilot/manage#require-commercial-data-protection-in-

CERT Poland maintains lists of suspicious sites in various formats https://cert.pl/lista-ostrzezen/ That should be used for filtering as well and updated every 5 minutes (as stated in the doc) so that users are protected from phishing quickly. Competition uses that list as well. this list is maintened and used in cooperation with polish government as well as biggest ISPs. This is crucial for protecting and encouraging customers from this country and main arguement in discussion dns filter against competition. Taking into account that Poland is under constant attack also because of the geopolitical reasons tat is a must as many malicious campaigns arise and only cert.pl delivers fast response and listing of malicious urls.

Owners have been asking if we can prevent someone from staying on youtube.com for 4 hours. This is a two part, time limit implementation and categories within youtube, if its education we can ignore, if its sports, they owner would like to put a limit.

Pixabay.com is a free stock photography and royalty-free stock media website. They support enforcing SafeSearch with a CNAME Entry: https://pixabay.com/blog/posts/block-adult-content-on-pixabay-at-your-school-or-w-140/

Currently, DNS Filter does not block any content servers unless you add them to a block list. This means that if you create a policy, block everything that you can and set up an allow list, these contents servers will not be blocked. That is not a TRUE allow list. If an allow list is set, all other domains, no matter what category they are in, should be blocked. Period.

Another product I have used provides all known TLDs and country codes in a list so the user can easily block them without having to manually type them into the block list.