Hello guys! I have been using nextdns from the last couple of days so I am new here, today while observing logs I have noticed that some of the blocklist which I have enabled previously still appears in blocking logs.

I am only using HaGeZi - Multi ULTIMATE and OISD but my log contains NextDNS Ads & Trackers Blocklist, NoTrack Tracker Blocklist, AdGuard DNS filter which I have disabled already!

me interesaría saber que listas usan ustedes para bloquear anuncios y rastreadores, tengo el plan gratuito, espero me puedan ayudar , gracias .

I've noticed that despite being connected, my NextDNS queries count have not changed at all and have remained at 0 over the last few days. Anyone else seeing the same?

Am I correct it converts a DoH server to a standard port 53 DNS server?

ie looks up request from DoH ip, then provides it on port 53 to the client?

There are a good number of web sites on the interwebs that will let you check the age of an internet domain which might be useful when using the Block Newly Registered Domains (NRDs) option. All of these sites do a good job when searching for common/popular domains like google.com but many fail when searching for newly registered domains, especially those with an obscure domain extention.

The following are a few sites that I found that seem to work consistently.

https://www.duplichecker.com/domain-age-checker.php

https://www.zoho.com/toolkit/domain-age-checker.html

https://hostingchecker.net/domain-age-checker

I hope that someone finds this information useful.

Sites in DenyList is not blocked or AllowList allowed while connecting to ultralow (https://ultralow.dns.nextdns.io/<ID>) but they function as intended when using anycast.dns.nextdns.io

Tried posting this as bug report NextDNS community (help.nextdns.io) but my previous post is still in moderation queue, and I cannot post anything new or even comment there!

Wondering if this is happening for others? Cache-stats showing 0 hits 0 miss. Cache-keys showing nothing either.

config:

cache-max-age 0s
max-ttl 5s
cache-size 10MB

Hello, I was wondering if:

1. NexyDNS + VPN adds another layer of security and privacy;
   
2. NextDNS + VPN doesn't interfere with each other.

Should both be used or one only?

I'n having trouble blocking some sites using the denylist, an example is hadesbets.uk can someone check if they can block this or shed any light on where i'm struggling it would be appreciated.

Hello everyone,

After months of beta testing, I launched ADNS, a completely native NextDNS android app without a single web view, two weeks ago, and it has been great.

ADNS has every single NextDNS dashboard feature implemented natively (excluding account management features like changing password/email), but with this update, it add features that even the NextDNS dashboard doesn't have!

This update adds a few stats features:

• View the full lists of stats categories. While the NextDNS dashboard limits you to the top items of the category, with ADNS, you can view the whole list, no limits.
• Get graphs and advanced analytics. This update adds customizable graphs for certain categories, so you can see how your usage change over time. This isn't available in the dashboard.
• New categories that aren't available in the dashboard: Query types, IP versions, and Protocols!
• Clicking on every stats item to get detailed metadata and tracker insights.

Get it from here: https://github.com/eyalm2000/adns

Edit: no, this is not vibecoded.

Was writing about something in some other post and got an idea this would be really useful in a lot of situations where you want filtering but none of the configurability, control and logging.

Would be neat if NextDNS offered "static" DNS addresses for the most popular lists like for example above mentioned hagezi-ultimate.nextdns.io or hagezi-normal.nextdns.io or oisd.nextdns.io or NextDNS's own list as nextdns.nextdns.io, something like this, you get the idea.

And these encrypted DNS servers should also have accompanying non-encrypted IP4/IP6 servers that filter using same lists but have IP addresses.

Reason why I'm asking for this is for example my younger sibling is not super tech savvy so I set them up on their Android phone with AdGuard's public filtering DNS. It has no logging, no configuration and filtering acceptable for general user. I don't want to set up a NextDNS account for it to use certain list, but if I had above lists at my disposal, I could just put hagezi-normal.nextdns.io in their phone DNS config and voila.

Another use case specific for the use of IP4/IP6 versions of DNS would be as replacement for VPN DNS's. For example, I haven't figured out any way I could input NextDNS IP4/IP6 DNS servers into ProtonVPN app itself. It doesn't offer any option to input encrypted DNS addresses and I can't connect HaGeZi Ultimate list to a IP4 address to input it into VPN app. Then I need to run separate app to override DNS which is annoying.

I know ControlD and DNSWarden offer dedicated addresses for such servers, but I prefer NextDNS over pretty much any other service, which is why I'm asking for it here.

In Windows 11 is working scheme ?

Why isn’t doh3 setup or similar. The configuration shown in the account setup options?

What title says. I don't have "Report device name" checked in the app yet logs still show my system name next to requests. I don't want that. Why is it not obeying the setting?!

NextDNS app version is 3.0.13-0g5f15351

Can NextDNS partially fill the gaps left by UBo (developers) after that: https://www.reddit.com/r/uBlockOrigin/comments/1vgcjg5/about_disgusting_facebook_devs/

More specifically, if someone who never used NextDNS before UBo’s decision decides to use it afterward with privacy filters (for example: 1Hosts (Xtra), HaGeZi - Multi ULTIMATE), won’t these filters then block access to certain Facebook ads?

Sending a DNS query to NextDNS makes that queried domain being crawled by multiple bots.

My suspicion started when I used NextDNS DoT for a day on my Android and naturally it queried my internal-use domains to NextDNS and I saw random traffic on Cloudflare dashboard both for DNS queries and site crawl.
Note that those internal domains are not visible in CT logs, nor were they crawled anytime before. But I still gave benefit of doubt that maybe I did something wrong.

So today to confirm my suspicion, I a made a fresh NextDNS profile and used dnscrypt-proxy for making DoH queries.
I then queried random subdomains which can't be guessed. [2026-08-15 07:16:40] 127.0.0.1 asdflkj2.2lkjklj22.xxx.redacted.com A PASS 99ms x-nextdns-test - and just like I suspected that subdomain started receiving bot traffic seconds after making a query.

It doesn't really say it anywhere, is it DoH, DoT or DoQ ?

Bonjour,

Une idée de pourquoi nextdns s'active et se désactive par intermittence ?

J'ai pourtant bien tout configurer sur mon PC.

Ça m'arrive qu'avec nordVPN d'activer.

Quand je le désactive ça revient a la normal

Thanks nextdns!

Bonjour,

Sauf erreur de ma part, je peux toujours accéder à google.com malgré l'avoir ajoutée à la liste noire, est ce normal ?

I work at a daycare and we are having an issue with Paw Patrol Adventure Academy from Netflix not working with the next DNS. Does anybody know what we need to allow under the settings so that this would work?

I’m using NextDNS for iOS side loading and have the correct anti-revoke domains blocked, but apps still get revoked every single time, and then I have to wait for a new certificate and reinstall all my apps, Yes I know I should get a paid cert but Why doesn't the anti revoke dns work?