How to Block Adult, Gambling, Drug and Other Inappropriate Websites Using Free DNS

Quick Answer

To block adult websites, pornography, gambling, drug-related websites and other inappropriate content for children, use a free family-filtering DNS service. Two practical options are Cloudflare 1.1.1.1 for Families and CleanBrowsing Family Filter. These services block access to domains that match their filtering categories without requiring you to install conventional filtering software on every device when you configure them at the router level.

For a simple free starting point, Cloudflare's adult-content and malware filtering uses 1.1.1.3 and 1.0.0.3. CleanBrowsing's free Family Filter uses 185.228.168.168 and 185.228.169.168. Both can help restrict inappropriate websites, but neither guarantees that every unwanted website, game, app, or online service will be blocked.

What Is Family DNS Filtering?

DNS stands for Domain Name System. It helps devices find the IP address associated with a website's domain name. A DNS filtering service checks a requested domain against its classification and policy before returning the normal DNS answer.

For example, when a child tries to open a domain classified as an adult website, a family DNS resolver may refuse to resolve that domain. The website may then fail to open in the browser.

Unlike a browser extension, DNS filtering can cover many browsers and applications on a device, provided they use the configured resolver and do not bypass it. When configured correctly on a home router, it can also cover multiple connected devices.

Which Free DNS Is Best for Blocking Inappropriate Websites?

The right choice depends on the type of content you want to restrict. The following options have publicly documented free filtering configurations.

Recommendation: Start with Cloudflare 1.1.1.1 for Families if you want a straightforward free option for blocking adult content and known malicious domains. Consider CleanBrowsing Family Filter if you prefer a more restrictive family-focused filter, including SafeSearch enforcement and blocking of certain mixed-content domains. Test the chosen service with your family's normal websites and applications before deploying it across the entire household.

Filtering categories, addresses, policies, and availability can change. Check the provider's official documentation before implementation.

What Types of Websites Can DNS Filtering Block?

Depending on the provider's classifications and filtering profile, family DNS may block domains associated with the following categories:

• Adult and sexual content: Pornography and other explicit websites.
• Gambling and lottery: Online betting, casinos, and some lottery-related domains when categorized by the provider.
• Drugs: Some websites associated with illegal drugs or drug-related content, if included in the provider's classifications.
• Malware and phishing: Known malicious domains that attempt to distribute malware or steal information.
• Other inappropriate content: Additional categories supported by a specific provider or filtering plan.

Important limitation: Do not assume that every free family DNS service offers a separate, configurable category for gambling, lottery, drugs, social media, gaming, or every other unwanted topic. Some free resolvers mainly filter adult content and malicious domains. If you need precise control over each category, check the provider's feature list or consider a parental-control product with category-level policies.

Does Family DNS Block Online Games?

Not necessarily. A DNS filter generally blocks domains according to its categories; it does not automatically know whether every game is suitable for a particular child's age.

Some online games use shared domains for login, updates, chat, purchases, and gameplay. Blocking those domains may stop the game from working, but it may also affect unrelated services. A DNS provider may not classify a gaming domain as inappropriate at all.

If your goal is to limit gaming, use the controls provided by the child's device or gaming platform. For example, Microsoft Family Safety supports app and game restrictions on supported Windows and Xbox devices. Use the platform's own parental settings to manage age ratings, purchases, communications, and screen time where available.

Method 1: Configure Cloudflare Family DNS on Your Router

Configuring DNS on your home router is a convenient way to apply the same filtering to many devices that use the router's DNS settings. The exact menus differ by router model and firmware.

Step 1: Open the Router Settings

1. Connect a computer or phone to your home network.
2. Open your router's administration page or official management app.
3. Sign in using your router administrator credentials.
4. Find the Internet, WAN, DHCP, or DNS settings section.

Use the management address documented for your router. Do not reset the router or change its management IP address merely to configure DNS.

Step 2: Enter the Family DNS Addresses

For Cloudflare's adult-content and malware filtering, enter these IPv4 DNS addresses in the appropriate DNS fields:

• Primary DNS: 1.1.1.3
• Secondary DNS: 1.0.0.3

If your router supports IPv6 and devices use IPv6, configure the matching Cloudflare family-filtering IPv6 addresses as documented by Cloudflare:

• Primary IPv6 DNS: 2606:4700:4700::1113
• Secondary IPv6 DNS: 2606:4700:4700::1003

Save the settings. Some routers apply DNS settings to the router's own internet connection, while others distribute them to client devices through DHCP. Follow the router manufacturer's instructions to confirm which behavior applies to your model.

Step 3: Reconnect Devices

Reconnect children's devices to the Wi-Fi network. If a device continues using its previous DNS settings, renew its network connection or restart it. Clear browser or DNS caches only if necessary.

Step 4: Test the Filter

Use Cloudflare's official test instructions to check whether the filtering profile is active. Test both a provider-supplied test domain and normal websites the child needs for school or everyday use.

If a site that should be blocked remains accessible, check whether the device is using the router's DNS, whether IPv6 DNS has been configured, and whether a browser, VPN, proxy, or application is bypassing the router's resolver.

Method 2: Configure CleanBrowsing Family Filter

CleanBrowsing offers a free Family Filter designed to block adult and explicit content and apply additional restrictions. Its free filtering service can be used without a paid account, subject to the provider's current service terms and limitations.

Use These DNS Addresses

• Primary DNS: 185.228.168.168
• Secondary DNS: 185.228.169.168

To apply the filter across the household, enter these addresses in the router's appropriate DNS settings and save the configuration. For device-specific setup instructions, use CleanBrowsing's official setup guide.

CleanBrowsing also documents encrypted DNS options. If you configure DNS over HTTPS (DoH) or DNS over TLS (DoT), use the official Family Filter endpoint or hostname for the device and protocol you are configuring.

Do not mix a filtered primary DNS service with an unrelated unfiltered secondary resolver. Devices and routers can use either resolver, potentially allowing unwanted domains to resolve through the unfiltered service.

Method 3: Apply Filtering on an Individual Windows Computer

If you want to protect one Windows 10 or Windows 11 computer rather than every device on the network, you can configure a family DNS resolver on that computer.

1. Open Settings.
2. Select Network & Internet.
3. Choose Wi-Fi or Ethernet, depending on the connection.
4. Open the connection properties and locate DNS server assignment.
5. Select Edit and switch to manual DNS configuration if required.
6. Enable IPv4 and enter the primary and secondary addresses for the chosen family DNS provider.
7. Save the changes and test the filtering.

For Cloudflare adult-content and malware filtering, use 1.1.1.3 and 1.0.0.3. For CleanBrowsing Family Filter, use 185.228.168.168 and 185.228.169.168.

If IPv6 is enabled and the device uses IPv6 DNS, configure the matching filtered IPv6 addresses as well. Otherwise, some DNS requests may use a different resolver, depending on the network and operating system configuration.

Method 4: Use Android Private DNS

Android 9 and later supports Private DNS using DNS over TLS. Where supported by the device, this can encrypt DNS queries between the device and the configured resolver.

To use CleanBrowsing Family Filter:

1. Open Android Settings.
2. Find Network & Internet, Connections, or the equivalent menu for your device.
3. Open Private DNS.
4. Select the option to enter a private DNS provider hostname.
5. Enter family-filter-dns.cleanbrowsing.org.
6. Save the setting and test browsing.

Android menu names differ between manufacturers. If the setting causes connectivity problems, restore the previous Private DNS option.

For other devices, use the provider's official instructions for the relevant operating system. Do not enter an IP address into a field that specifically requests a DNS-over-TLS provider hostname.

Method 5: Use DNS Filtering in a Web Browser

Modern browsers may support Secure DNS, which uses DNS over HTTPS. This can be useful when you want filtering in a particular browser, but it can also bypass the DNS settings configured on the operating system or router if it uses a different provider.

For a compatible browser, configure the provider's official DoH endpoint. CleanBrowsing documents the Family Filter endpoint as:

https://doh.cleanbrowsing.org/doh/family-filter/

Browser menus and options vary. Consult the official instructions for Chrome, Edge, Firefox, or the browser you use.

If the browser uses an unfiltered Secure DNS provider while the router uses a filtered resolver, the browser may be able to resolve domains the router's DNS would otherwise block. For parental control, ensure that browser-level settings are consistent with the intended filtering policy.

DNS Filtering for Lottery, Gambling and Drug-Related Websites

Filtering adult content is not the same as filtering every gambling, lottery, drug, or gaming website. Free DNS services differ in their classification categories and in the degree of control they provide.

Before choosing a provider, confirm the following:

• Whether gambling and betting sites are specifically included in the filter.
• Whether lottery-related websites are covered by the provider's category policy.
• Whether drug-related websites have a dedicated category or are only blocked when classified as malicious or explicit.
• Whether online gaming, social media, chat, and video platforms can be restricted individually.
• Whether custom blocklists and allowlists are included in the free service.
• Whether SafeSearch can be enforced for supported search engines.

If you require a separate switch for every category, a free public resolver may not provide enough control. A dedicated parental-control application, family-safety service, or router with category-based filtering may be more appropriate.

How to Prevent Children from Bypassing DNS Filtering

Changing DNS on the router does not guarantee that every device will use that resolver. Children may be able to change device DNS settings, use a VPN or proxy, enable browser Secure DNS, or use an app that handles connections differently.

For stronger protection:

• Use supervised accounts: Give children standard or child accounts rather than administrator accounts wherever practical.
• Enable device-level parental controls: Configure content restrictions, app limits, game ratings, purchase controls, and screen-time limits.
• Check browser Secure DNS: Make sure the browser is not using an unfiltered resolver that conflicts with your family policy.
• Review VPN and proxy access: Restrict unapproved VPN or proxy applications using the device's parental-control tools where supported.
• Configure IPv4 and IPv6: If the network uses both, ensure the filtering policy applies to both.
• Use router controls when available: Some routers support device profiles, access schedules, or restrictions on DNS changes. Features vary by model.
• Test each device separately: A working filter on one computer does not prove that every phone, tablet, console, or smart device is protected.

DNS filtering is not tamper-proof. A determined user with sufficient permissions or an alternate network connection may bypass it. Use device-level controls and age-appropriate supervision rather than relying on DNS alone.

Additional Free Parental Controls

Microsoft Family Safety

Microsoft Family Safety provides web and search filtering for supported configurations, along with app and game controls on supported platforms. Web filtering depends on supported browsers and signed-in family accounts; Microsoft's documented web filtering is closely integrated with Microsoft Edge.

Use it when you need more than DNS filtering, such as age-related web restrictions, app controls, or screen-time management. See the official Microsoft instructions in the Sources section.

SafeSearch

SafeSearch can filter explicit results in supported search engines, but it does not block every adult website or every link found elsewhere on the internet. Enable it alongside DNS filtering and device-level parental controls.

Platform-Specific Parental Controls

Phones, tablets, consoles, and streaming devices may provide built-in controls for app installation, age ratings, purchases, communication, and screen time. Use the controls available on the actual device, especially when DNS cannot distinguish between appropriate and inappropriate content hosted on the same platform.

How to Verify That DNS Filtering Works

1. Confirm that the device is connected to the network where you configured filtering.
2. Check the DNS addresses or encrypted DNS provider configured on the device.
3. Use the provider's official test domain or verification instructions.
4. Try accessing an appropriate test category specified by the provider rather than visiting explicit or dangerous websites.
5. Check that normal educational websites, school portals, and required applications still work.
6. Repeat the checks on each device and browser used by the child.

If a test domain is blocked as expected, this is evidence that the filter is active for that query. It does not prove that every category or bypass route is blocked.

Troubleshooting Common Problems

How to Remove DNS Filtering

If filtering prevents access to legitimate websites or causes connectivity problems, restore the previous DNS settings.

• On a router: Return to the DNS configuration and restore the original addresses or the original automatic setting.
• On Windows: Open the active network connection's DNS settings and restore the previous addresses or automatic DNS configuration.
• On Android: Return to Private DNS and select the previous setting, such as Automatic, if that was the original configuration.
• In a browser: Restore the previous Secure DNS provider or setting.

Reconnect to the network and test normal browsing. Keep a record of the original configuration before making changes so it can be restored easily.

Frequently Asked Questions

Which free DNS is best for blocking adult websites?

Cloudflare 1.1.1.1 for Families using 1.1.1.3 and 1.0.0.3 is a straightforward free option. CleanBrowsing Family Filter is another choice and offers additional family-focused restrictions. Compare their current policies and test the websites your household needs.

Can free DNS block all adult, gambling, lottery and drug websites?

No DNS provider can guarantee that every unwanted domain will be blocked. Coverage depends on the provider's categories, classification accuracy, updates, and the way the device accesses the internet. Dedicated category-based parental controls may be necessary for more precise restrictions.

Will DNS filtering block YouTube videos that are unsuitable for children?

Not reliably. DNS filtering typically works at the domain level and may not distinguish individual videos hosted on the same domain. Use the platform's supervised or restricted-content settings in addition to DNS filtering.

Can I block online games using family DNS?

Only if the relevant domains are covered by the provider's filter or you use a filtering service that supports appropriate custom controls. Device or platform parental controls are generally better for restricting particular games, age ratings, purchases, and play time.

Does router DNS protect phones using mobile data?

No. Router DNS applies to devices using that router and only when they use the router's resolver. Mobile data requires compatible device-level filtering or parental controls.

Can children bypass DNS filtering?

Yes, in some situations. Custom DNS, encrypted DNS, VPNs, proxies, alternate browsers, and other connections may bypass router-level filtering. Use supervised accounts, device restrictions, and compatible parental controls to reduce this risk.

Is DNS filtering a replacement for antivirus?

No. DNS filtering can block some known malicious domains, but it cannot detect every malicious file, infected device, or harmful action. Keep operating systems and applications updated and use suitable endpoint security.

Will family DNS slow down the internet?

It may change DNS lookup response times, but the effect on overall browsing depends on the provider and network. Test normal websites and applications after configuration.

Conclusion

Free family DNS is a practical starting point for restricting access to adult websites and some other inappropriate or malicious domains on children's devices. Cloudflare 1.1.1.1 for Families and CleanBrowsing Family Filter are two options worth evaluating.

For a home network, configuring the chosen filter on the router can cover many connected devices, but device-specific settings, IPv6, encrypted DNS, VPNs, and mobile data can affect coverage. Combine DNS filtering with parental controls, SafeSearch, supervised accounts, and appropriate family guidance for stronger protection.

Sources

• Cloudflare – Set Up 1.1.1.1 and 1.1.1.1 for Families
• Cloudflare – Public Resolver Addresses and Filtering Options
• CleanBrowsing – Free DNS Filtering Options
• CleanBrowsing – Configure Free DNS Filters
• CleanBrowsing – Official Device and Router Setup Guide
• Microsoft Support – Filter Websites and Searches Using Family Safety
• Microsoft Support – Filter Apps and Games with Family Safety