Service for blocking ads, malware, and AI

Updated July 28, 2026.

A DNS server is a service that is responsible for converting a domain name like reddit.com into an IP address that your devices will understand. I run a server at home and it blocks domains that serve ads, malware, and generative AI websites. The server is small, but it has enough capacity to handle a lot of users since a DNS service isn’t that resource intensive. It runs on an old laptop at home and it’s more than capable of doing this. Please feel free to use it and share it with your friends! There’s no need for an account.

Let’s block ads and AI!

Take note though that using this is not enough to block all types ads. Ads on YouTube, Facebook, and Instagram, for example, can’t be blocked this way. You’ll need something else like uBlock Origin for blocking YouTube ads and F.B. Purity for Facebook ads.

Join the announcement channel for any updates or the status page as well. Let me know if you’re having issues!

Features

It uses Wikimedia DNS as the upstream resolver which does not log any DNS queries.
Blocks ads, tracking, malicious, and phishing websites using HaGeZi Pro++ and Threat Intelligence Feeds and DNSBunker CTI.
Blocks AI websites that I encounter online.
Blocks unsafe file sharing websites using Free Media Heck Yeah Filterlist
Additional malware and phishing domains from:
- DandelionSprout’s Anti-Malware
- A blocklist of phishing websites, curated from OpenPhish, IPThreat and PhishTank: phishing-filter
- A blocklist of malicious websites that are being used for malware distribution: urlhaus-filter
Only secure DNS is enabled so only DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC are the only ones supported to make sure no one else on the network can see the websites you’re visiting.
Queries are not logged into disk. They only reside in memory which gets wiped when the computer shuts down or reboots.

How to use

Take note that the server is running in Lenapehoking (Philly, PA) and the distance affects how fast the domains are resolved. Using the service for the first time might also feel slow at first and that’s because the domains are not cached yet, but they should get faster as time goes by because the server will cache the frequently-accessed domains for you.

If you want to check if you’ve properly configured it, you can try accessing OpenAI or Anthropic. They should stop working 😈 although it might be cached on your device so you can try a tool called check.wikimedia-dns.org to be sure.

Protocol	Location
DNS-over-HTTPS/2 or HTTPS/3	`https://dns.acab.fans/dns-query`
DNS-over-TLS or DNS-over-QUIC	`dns.acab.fans`

Android

Go to Settings > Network & internet > Private DNS and type in dns.acab.fans. See the help page on Google for more information.

Firefox

Including LibreWolf, WaterFox, Mullvad Browser, Zen Browser.

Go to Settings > Privacy & Security > DNS over HTTPS > Maximum Protection > Custom and type in https://dns.acab.fans/dns-query. See the help page on Mozilla for more information.

Chrome

Including Brave.

Go to Settings > Privacy and Security > Security > Use secure DNS > Add custom DNS service provider and type in https://dns.acab.fans/dns-query.

Vivaldi

Go to Settings > Network > DNS over HTTPS > Custom DNS Provider and type in https://dns.acab.fans/dns-query.

macOS and iOS

Download either dns.acab.fans.mobileconfig on the device that you want to use it on. To install it, follow the instructions here.

Windows

YogaDNS is a free tool that you can use to set this DNS server for the whole system.

Additional notes

The actual lists

# Malware
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/wildcard/tif.txt
https://codeberg.org/xRuffKez/tif/raw/branch/main/adblock.txt
https://cdn.jsdelivr.net/gh/DandelionSprout/adfilt@latest/Alternate%20versions%20Anti-Malware%20List/AntiMalwareDomains.txt
https://raw.githubusercontent.com/fmhy/FMHYFilterlist/main/filterlist-wildcard-domains.txt
https://malware-filter.gitlab.io/malware-filter/phishing-filter-wildcard.txt
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-agh.txt

# Ads and trackers
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/wildcard/pro.plus-onlydomains.txt

# AI blocklist
https://codeberg.org/durian/noai/raw/branch/main/noai.txt

# Allowlist
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/whitelist-referral.txt

How port 53 is disabled on the server

This is mostly for me, but Technitium DNS doesn’t allow disabling port 53 on the server and unfortunately it’s prone to abuse. So the servers that I’m running has the daemon Uncomplicated Firewall installed which manages the open ports for us. It has the following configuration:

> sudo ufw show added                                                                                                                                                      

Added user rules (see 'ufw status' for running firewall):
ufw allow OpenSSH
ufw allow mosh
ufw allow 5380
ufw allow 53443
ufw allow 80
ufw allow 443
ufw allow 853