MoatDNS

Early access waitlist is open

A DNS filter that's actually maintained.

Block ads, trackers and malware on every device you own, with the wildcard rules, actionable log and pause controls power users have been asking for. Support comes from the people who build it.

Living room3 devices
Log Pause Lists
  1. app-measurement.comHaGeZi Pro · tracker
    Blocked
  2. yt3.ggpht.comMatched your rule *.ggpht.com
    Allowed
  3. samsungads.comSmart TV · ads
    Blocked
  4. api.github.comDoH · 9 ms
    Allowed
  5. connect.facebook.netOISD · tracker
    Blocked
Design preview. Allow or block straight from the log.

Built from the requests that kept coming up.

We read years of forum threads and feature requests from people running DNS filters at home. These are the ones we kept seeing, and they're where MoatDNS starts.

Rules that bend

Wildcard and regex rules. Allow a subdomain of a blocked domain and it actually loads.

*.ggpht.com/^ads?\d*\./

Pause, then auto-resume

Turn filtering off for one device or the whole house. It comes back on by itself.

15m1huntil 7:00

A log you can act on

Allow or block from any entry. Filter by what didn't block it, by protocol, or hide the noisy domains.

not blocked byprotocolhide

Any blocklist, by URL

Add HaGeZi, OISD or your own list by link. Share allow and deny lists across every profile.

HaGeZiOISDhttps://…

Your block response

Choose how blocked requests fail per profile, so apps and routers behave the way you expect.

NXDOMAINREFUSED0.0.0.0

Built in the open

A public changelog and roadmap from launch day. Support emails go to the people who write the code.

changelogroadmaphumans

See which rule wins before you save it.

Your allow rules beat blocklists, and every answer names the rule that decided it. Try a domain against this example profile.

Your rules

  • *.ggpht.comAllow
  • /^ads?\d*\./Block, regex

Example blocklist

  • ggpht.comBlock
  • app-measurement.comBlock
  • doubleclick.netBlock
  • connect.facebook.netBlock

Checked in this order

  1. Your allow rules
  2. Your block rules
  3. Blocklists
Try

Allowed

Matched your rule *.ggpht.com. It overrides ggpht.com on the example blocklist, so this subdomain loads while the rest stays blocked.

Where it goes after launch.

These are planned, not built. Pick the ones you want when you join and they move up the list.

Vote with your signup

  1. Schedules per device

    TikTok off after 10pm on the kids' tablets. Homework mode on weekday afternoons. Your laptop untouched.

    tablet · social off 22:00–07:00

  2. Unblock requests

    A blocked page can send a request instead of a dead end. A parent approves it from their phone, for an hour or for good.

    request · roblox.com · approve 1h

  3. Alerts and webhooks

    A push or a webhook when a new device shows up or something tries to reach a known malware domain.

    event · new device joined

  4. Shareable rule packs

    Publish your allow and deny rules as a pack. Others subscribe and get your fixes as you make them.

    subscribe · smart-tv-quiet

  5. Categories for new domains

    A domain no list has seen gets classified the first time anyone hits it, and that answer is shared with everyone.

    unknown → classified once

Bring your NextDNS setup with you.

Rebuilding years of allowlist tweaks by hand is why most people never switch. The import does it for you.

  1. Connect your account

    Paste your NextDNS API key. MoatDNS only reads your configuration.

  2. Everything comes across

    Profiles, blocklists, allow and deny entries, and settings arrive as they are.

  3. Point your devices

    Swap the DNS address on your router or devices. Your rules are already waiting.

Import from NextDNSRead-only API key
  • Profiles
  • Blocklists
  • Allowlist entries
  • Denylist entries
  • Settings and block response

One-click import is planned for launch. This is a preview of how it works.

Before you join

Anything else, ask us when you join. Early members talk to the builders directly.

Get in early and help decide what ships first.

Add your email, then tell us what you use today.

  • First access. Waitlist members get in before anyone else.
  • A direct line. Reply to any email and the people building it read it.
  • Your votes count. The features you pick set the order things ship after launch.