Knowledge Base
go directly to the main content
Configuring DNS filters in the FRITZ!Box
With a DNS filter, the FRITZ!Box blocks DNS queries from devices in the home and guest networks, thus preventing access to unwanted or harmful domains (internet addresses). This reduces the number of ads, lowers the risk of malware, and protects your privacy.
Note:DNS filters can only block some ads, therefore they cannot replace ad blockers in the internet browser. For example, DNS filters cannot filter out ads on YouTube, because these ads come from the same domain as the actual content.
Requirements / Restrictions
- DNS filters can only filter queries from devices that use the DNS servers of the FRITZ!Box (DHCP client).
- DNS filters cannot block ads that come from the same domain as the actual content (e.g. on YouTube).
- DNS filters are not available when the FRITZ!Box is used as a Mesh Repeater or in IP client mode. In this case, regulate internet access in the Mesh Master or in your router.
Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.
1 Determining a suitable DNS filter list
DNS filter lists are files with a list of unwanted domains. FRITZ!OS does not contain any predefined filter lists, and it supports filter lists in the formats Adblock (||example.com^), Hosts (0.0.0.0 example.com), and wildcard domains (example.com).
Note:Many entries are duplicated in different filter lists. Duplicate entries do not have an additional effect, but they put an unnecessary load on the FRITZ!Box. Therefore, it is better if you to use just a few high-quality filter lists.
Important:Do not use any filter lists for ad blocker browser extensions (e.g. EasyList Germany). These usually contain entries that a DNS filter cannot apply (e.g. HTTP paths or HTML restrictions. When such lists are used it is possible to block websites unintentionally.
- Search the internet for a suitable DNS filter list.
- Make a note of the filter list's URL. You will need this when configuring the DNS filter list.
- Examples of DNS filter lists:
Name URL Blocks OISD.nl https://big.oisd.nl Ads, phishing, malware, spyware, ransomware, tracking HaGeZi's Pro https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/pro.txt Ads, affiliate links, phishing, malware, scams, fake news, tracking, telemetry Steven Black Hosts https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts Adware, malware
- Examples of DNS filter lists:
2 Configuring DNS filter lists
- Click on 'Home Network' in the FRITZ!Box user interface.
- Click on 'Network' in the 'Home Network' menu.
- Click on the 'Network Settings' tab.
- Click on 'Change Advanced Network Settings'.
- Click on the 'DNS Filter' tab.
- Click on 'Add Exception'.
- Enable the option 'Use DNS filter lists and block access to harmful or unwanted web pages'.
- Click on 'Add filter list'.
- Enter the name and the URL of the DNS filter list and click on 'Add'.
Example:
Name: OISD.nl
URL of the DNS filter list: https://big.oisd.nl - Click on 'Apply' to save the settings.
3 Configuring domain exceptions
If you want to overwrite or expand individual entries of a filter list, you can configure exceptions for individual domains:
Note:Domain exceptions always have a higher priority than DNS filter lists. Permitted domains always have a higher priority than blocked domains.
- Click on 'Home Network' in the FRITZ!Box user interface.
- Click on 'Network' in the 'Home Network' menu.
- Click on the 'Network Settings' tab.
- Click on 'Change Advanced Network Settings'.
- Click on the 'DNS Filter' tab.
- In the 'Domain Exceptions' section, click on 'Add own domain'.
- Select whether the domain is to be blocked or permitted, enter the complete domain name, and click on 'Add'. If you want to configure exceptions for several domains, separate the entries with a space.
Example:
example.com my-domain.com - Click on 'Apply' to save the settings.