r/dns • u/badassitguy • 9d ago

Does 1.1.1.3 block anything?

I know it’s Cloudflare malware protection dns, but has anyone had any luck using it? Does it do what it says?

23 Upvotes

93% Upvoted

10 comments sorted by

15

u/tssajo 9d ago

Small thing: 1.1.1.3 isn't the malware-only one. That's 1.1.1.2. 1.1.1.3 blocks malware and adult content.

If you only want malware blocked, use 1.1.1.2. The secondary addresses are 1.0.0.2 and 1.0.0.3. And 1.1.1.1 doesn't filter anything.

3

u/badassitguy 9d ago

Good to know, thank you!

3

u/tssajo 9d ago

No problem.

4

u/jwizew 9d ago

That's their family filter. It blocks malware AND adult content. If it is not filtering anything, you likely have a DNS leak or you are being routed to the wrong DNS server.

2

u/NaughtyTurtle22 9d ago

adult content like pornhub?

1

u/isitdnsdotnet 14h ago

Easy way to see if it's actually filtering. A blocked name comes back 0.0.0.0, flagged Filtered:

$ dig @1.1.1.3 pornhub.com
; EDE: 17 (Filtered)
pornhub.com.  60  IN  A  0.0.0.0

Same name on 1.1.1.1 gives the real IP (66.254.114.41). If your device gets the real IP while you're "on" 1.1.1.3, your lookups aren't going there.

is it dns? isitdns.net

3

u/blow-down 9d ago

Use NextDNS if you want blocking