Blog

We are constantly reminded that what we think is “easy” isn’t necessarily the case for everyone, and we take that for granted. In an effort to improve that thinking, we have devoted a majority of the first quarter to updating the apps for key platforms in an effort to improve your experience.

Tech talk: CleanBrowsing is a DNS-based filter that allows you to create an internet experience that best conforms with your beliefs and rules. Technically, it does not require software to be installed. It can also be installed at your router to cover the entire network. It can be enabled on any device that allows DNS to be configured.

Summary of Apps Updated

Here is what you can expect with each update:

Device	Updates
Windows	* Rebuilt the app; * Fixed numerous bugs, including the load issue post-installation; * Introduced new “password” setting; * Leverages Encrypted DNS (DOH); * Available Direct Download
MacOS	* Rebuilt the app; * Fixed numerous bugs, including the uninstall issue; * Addressed instability issues with networks; * Leverages Encrypted DNS (DOH); * Removes the need to track public IPs; * Available in App Store
Android	* Rebuilt the app; * Introduced new password option; * Introduced Encrypted DNS (DOH); * Available in Play Store;
iOS	* Continuous bug fixes;

Another important update to the apps is that they all now use a simplified key to enable the custom filter (paid accounts). That key is found in the settings page of every account dashboard.

If you use the app on devices we encourage you to visit the different pages to update your device appropriately.

If you have an ASUS router you have the good fortune of being able to use the Merlin image for your router. This image is built on DD-WRT, and exposes a number of really cool features that isn’t always available with vanillas Router OS’.

A couple of cool features include:

• Prevent DNS changes on local devices, and force your preferred DNS on your network.
• Forcing DNS-over-TLS for secure DNS communication;

Prevent Local DNS Changes

One of the really cool features is your ability to force the DNS of your choice on your LAN. You do this via the LAN > DNSFilter settings page.

Here you want to turn ON the “Enable DNS-based Filtering” option, choose “Router” as your filter mode, and enter the DNS pairs we provide in your dashboard.

Apply the settings and it should reset your connection.

What’s really cool about this feature is it doesn’t just kill the DNS connection, it redirects it. The user doesn’t experience interrupted service, instead it responds as you would expect but with your predefined settings.

Nifty!

Encrypt your DNS with DNS-over-TLS (DOT)

Another really neat feature is the ability to use DOT for encrypted DNS communciation.

You configure this via this settings page: WAN > Internet Connection

From there, scroll down until you get to the WAN DNS Setting section. Here you want to make sure to a few options are selected:

• Connect to DNS Server automatically: NO
• Enter Primary and Secondary IP’s (provided in dashboard)
• Forward local domain queries to upstream: YES
• DNS Privacy Protocol: DNS-over-TLS (DoT)

Add your DOT server to the table under “Preset Servers”, and leave the drop down empty.

You will use the DOT stamp provided in your dashboard that reads: DNS over TLS (Private DNS for Android)

The IP you want to use is the IP of the domain, not the one in your account. You can find it by doing a basic host lookup:

host custom79xxxxxxxxxxxxxxx5.dot.cleanbrowsing.org
custom79xxxxxxxxxxxxxxx5.dot.cleanbrowsing.org has address 185.228.168.199

Which would give you an output like this: