Policy targeting
IPv4/IPv6 networks, exact client IPs, and exact or wildcard PTR hostnames. Active whitelist targets take precedence.
Read the guide →CAPABILITIES
Control the rule.
Understand the result.
From a single endpoint to a dual-stack network, shape DNS policy around how your infrastructure is used.
Lists & exceptions
URL, file, pasted, and manual sources. Domain whitelists are evaluated before block lists.
Read the guide →Recurring schedules
Up to 32 weekly windows per list or target, with overnight support and a shared timezone per schedule.
Read the guide →Decision visibility
Policy Tester explains matches. Query Log records clients, server IDs, targets, lists, and reasons.
Read the guide →Operational control
SQLite or MySQL, managed HTTPS through Caddy, administrator accounts, and named API keys.
Read the guide →Resolver integration
Connect Technitium, CoreDNS, or PowerDNS Recursor with authenticated HTTP/HTTPS policy requests.
Read the guide →Designed for daily operation.
URL list refreshes keep the last working data after failures. Background PTR learning keeps reverse lookups off the decision request path.