Last update: February 12, 2026 1421 UTC
General info:
These public DNS resolvers are accessible via both ipv4 and ipv6 with DoH and DoT, using public denylists to filter #NSFW, ads and domains related to badware.
Why these servers?
It may come in handy to block unwanted content for your family. Or keep rubbish from polluting your homenetwork. You may like to learn new things, or in my case: resend all those ads keeping my browser busy for no reason, just warming up my appartment and running up my electricity bill :-p . After a few months of trial and error I decided to spin up one more server to add redundancy after finding out about Unbound's SRTT and rrset-roundrobin: yes.
Apply for access
while [ youComplyWithMyTermsOfUsage ] do if [ "$yourInternetConnection" = "fixedPublicIPAdress" ]; then echo $fixedPublicIPAdress | mail -s "req use freedns" sysop@freedns.nl.eu.org -r $yourEmailAddress fi done
What is blocked?
I filter domains listed in any of these lists cited below:- https://lists.cyberhost.uk/malware.txt
- https://nsfw.oisd.nl/domainswild2
- https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
- https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/gambling.txt
- https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/hoster.txt
- https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/nsfw.txt
- https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
- https://codeberg.org/xRuffKez/NRD/raw/branch/main/lists/14-day/domains-only/nrd-14day
- https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt
How is this done?
These UNIX *1 servers run FreeBSD on VPSs hosted in the public cloud of OVH. DNS is served by Unbound, forwarding queries encrypted using TLS (DOT) to artikel10.org, digitale-gesellschaft.ch, dns4eu, mullvad and uncensoreddns.org. Filtering is done by blocky. DOH is served using nginx. Or for the more visual inclined folks: a somewhat sloppily drawn picture may clarify matters. Thanks to UptimeRobot and shields.io near-realtime statusinformation is provided.
| Type | Protocol and port | POP *2 | IP, URL or forward-addr *3 UptimeRobot status badge |
|---|---|---|---|
| Unencrypted DNS | TCP and UDP port 53 | France | 57.128.122.60 2001:41d0:20a:800::8b  |
| Germany | 141.95.101.73 2001:41d0:701:1000::2ee3  |
||
| DNS over HTTPS | TCP port 443 | France | https://pensulo.freedns.nl.eu.org/dns-query |
| Germany | https://solvanto.freedns.nl.eu.org/dns-query |
||
| DNS over TLS | TCP port 853 | France | 57.128.122.60@853#pensulo.freedns.nl.eu.org 2001:41d0:20a:800::8b@853#pensulo.freedns.nl.eu.org  |
| Germany | 141.95.101.73@853#solvanto.freedns.nl.eu.org 2001:41d0:701:1000::2ee3@853#solvanto.freedns.nl.eu.org  |
Is it free?
Well sort of. I'm personally commited to make and keep the internet a pleasant place. So as long I'm able to use those highly regarded initiatives I let bystanders use my service.
Will you help me
By operating this server I do, yes! You can help by not asking *me* questions how to configure the stuff you run. I mean: the internet is full of advice. Project suggestions are welcome though. Please submit blocking suggestions to the respective listowners directly as I have no intention to develop my own list.
Terms of use
By using this server you agree not to be abusive to the internet as a whole. It's meant to be used by a typical home user interested in reducing his/her/they/them footprint. If you send hundreds of dns queries a second find yourself a playground $elsewhere.I hereby declare I won't collect nor sell any generated user data. Email data is kept on file as long as necessary.
Status
Status page by 