Blocking VPN connections at the network level can be challenging because VPN traffic can be disguised to look like regular HTTPS traffic. However, there are several strategies you can employ to detect and block VPN connections: Deep Packet Inspection (DPI) DPI is a method used by some firewalls to inspect…
In a typical network level CleanBrowsing deployment, pointing DNS to CleanBrowsing alone may not be sufficient to enforce CleanBrowsing protections. Savvy users may attempt to bypass CleanBrowsing by changing the DNS settings on their machines or using encrypted DNS technologies like DOH. This article discusses ways to lock down your…
DNS-over-TLS (DoT) is a security protocol that encrypts Domain Name System (DNS) queries using Transport Layer Security (TLS). By wrapping DNS traffic in a layer of encryption, DoT prevents third parties—like ISPs, attackers, or network snoops—from seeing or tampering with your DNS activity. 🛡️ Why Use DNS-over-TLS? Traditional DNS queries…
DNS-over-HTTPS (DoH) is a modern security protocol that encrypts DNS (Domain Name System) queries using the same HTTPS protocol that secures websites. Instead of sending DNS requests in plaintext, DoH wraps them inside standard HTTPS traffic, protecting users from surveillance, tracking, or tampering. 🌐 Why DoH Matters When you visit…
The easiest way to bulk upload a subnet to CleanBrowsing is to use our API. You want to use the Network/Add action: To help automate this, you can use Python (Python3) if on a MacOS. Upload /24 Using the CleanBrowsing API Here is what you would do to upload a…
Apple introduced a feature in recent iOS versions called Advanced Tracking and Fingerprinting Protection. When enabled, this feature allows Safari (especially in Private Browsing mode) to bypass local and network-level DNS settings — including CleanBrowsing filters. This means some websites may be accessible even when CleanBrowsing is configured correctly. ✅…
Platforms like Netflix are closed-platforms. This means that it’s impossible for content filtering services like CleanBrowsing to filter its content. To do this, they would have to do something similar to Google and their Safe Search that would allow a network provider to enforce a “safe search” like experience. Until…
When contacting the CleanBrowsing support team, you may be asked to run specific “commands” on your device. These are small text instructions entered into a tool called a command-line interface—available on both Windows and macOS. This guide will walk you through how to access and use these tools, even if…
Every paid dashboard offers its user the ability to easily tune a network to a desired end state. What CleanBrowsing offers is a foundation to build the desired family friendly network. CleanBrowsing, like most other networking tunes, may require some tuning. This is especially true when it comes to apps,…
If you manage a network at home, or an office, you might want to take control of what is happening on your network. There are different solutions available, but one of the most effective options is to leverage the Domain Name System (DNS). Because of how DNS works, you don’t…