Override Ubiquiti DNS Settings

Ubiquiti devices include built-in content filtering that can hijack your DNS settings. This guide shows you how to disable it so your CleanBrowsing DNS configuration takes effect.

Why This Happens

CleanBrowsing partners with Ubiquiti to provide basic filtering through their platform. When Ubiquiti's built-in content filtering (CyberSecure) is enabled, it hijacks your DNS queries, preventing your custom CleanBrowsing DNS rules from being respected.

Disabling this service allows your own DNS configuration to take effect.

Step 1: Access Network Settings

Log into your Ubiquiti DreamPro system and navigate to Network > CyberSecure.

Note: This guide applies to the 5.14.x controller version. For 6.x controller versions, the location may differ slightly.

Step 2: Disable Content Filtering

On the CyberSecure page, locate the Content Filtering option and disable the toggle to turn it off.

Once disabled, your configured CleanBrowsing DNS filtering rules will be properly enforced instead of being overridden by Ubiquiti's default service.

Step 3: Verify Your DNS

After disabling CyberSecure, verify that CleanBrowsing DNS is now active by running:

nslookup -type=txt debug.cleanbrowsing.org

The response should confirm you are using CleanBrowsing DNS. If it does not, ensure your WAN DNS settings are configured with the CleanBrowsing IPs:

  • Primary DNS: 185.228.168.168
  • Secondary DNS: 185.228.169.168

Note: If you have a paid CleanBrowsing plan, use the DNS IPs provided in your dashboard instead.

Related Guides

Ubiquiti Dream Machine Pro

Configure CleanBrowsing DNS on a UDM Pro.

UniFi USG

Configure CleanBrowsing DNS on a UniFi USG.

Common Questions

Answers to frequently asked questions and fixes.