Ubiquiti devices include built-in content filtering that can hijack your DNS settings. This guide shows you how to disable it so your CleanBrowsing DNS configuration takes effect.
CleanBrowsing partners with Ubiquiti to provide basic filtering through their platform. When Ubiquiti's built-in content filtering (CyberSecure) is enabled, it hijacks your DNS queries, preventing your custom CleanBrowsing DNS rules from being respected.
Disabling this service allows your own DNS configuration to take effect.
Log into your Ubiquiti DreamPro system and navigate to Network > CyberSecure.
On the CyberSecure page, locate the Content Filtering option and disable the toggle to turn it off.
Once disabled, your configured CleanBrowsing DNS filtering rules will be properly enforced instead of being overridden by Ubiquiti's default service.
After disabling CyberSecure, verify that CleanBrowsing DNS is now active by running:
nslookup -type=txt debug.cleanbrowsing.org
The response should confirm you are using CleanBrowsing DNS. If it does not, ensure your WAN DNS settings are configured with the CleanBrowsing IPs:
185.228.168.168185.228.169.168Note: If you have a paid CleanBrowsing plan, use the DNS IPs provided in your dashboard instead.
Configure CleanBrowsing DNS on a UDM Pro.
Configure CleanBrowsing DNS on a UniFi USG.
Answers to frequently asked questions and fixes.