Powerful DNS Protection, Simple Interface

Explore all the features that make MacDNS the best DNS security solution for macOS.

General Settings

The control center for your DNS protection. Here you can see if MacDNS is actively protecting your Mac and toggle the most important security and performance features. Each option is designed to make your internet experience safer and faster.

  • Protection Status — See at a glance if MacDNS is active and protecting your Mac
  • DNSSEC Validation — Ensures websites are authentic and not fake copies created by hackers
  • Prefetch — Speeds up your browsing by loading DNS info before you need it
  • Serve Expired — Keeps websites accessible even when DNS servers are slow or unreachable
  • Query Randomization — Adds extra security by making your DNS requests harder to intercept
  • Cache Controls — Clear stored DNS data when troubleshooting connection issues
MacDNS General Settings Tab

Forward Zones

Need certain websites to use a specific DNS server? Forward Zones lets you route domains to custom nameservers. This is useful for accessing internal company networks, development servers, or services that require specific DNS configurations.

  • Route specific domains to any DNS server you choose
  • Perfect for corporate VPNs and internal networks
  • Enable or disable zones without deleting them
  • Automatic validation prevents configuration errors
MacDNS Forward Zones Tab

DNS Overrides

Take complete control over how your Mac resolves specific domains. You can redirect websites to different addresses, block domains entirely, or create custom DNS records. Great for testing, development, or blocking unwanted sites.

  • Block any website by redirecting it to nowhere
  • Redirect domains to different servers for testing
  • Support for all DNS record types (A, AAAA, CNAME, MX, TXT, and more)
  • Toggle overrides on/off without losing your settings
MacDNS DNS Overrides Tab

Blocklist Protection

Your shield against the bad parts of the internet. MacDNS blocks unwanted content before it even reaches your Mac — no browser extensions needed. Choose what to block and how aggressively, from light filtering to maximum protection.

Each category has multiple protection levels so you can find the perfect balance between security and compatibility. Higher levels block more domains but may occasionally block legitimate websites.

MacDNS Blocklist Tab

Protection Categories & Levels

Ads & Tracking

Stop intrusive advertisements and prevent companies from tracking your online behavior. This category blocks ad networks, analytics services, and data collection scripts.

Light ~80,000 domains

Basic protection against the most common ad networks and trackers. Good for users who want minimal interference with their browsing.

Major ad networks (Google Ads, Facebook Ads) Common analytics trackers Basic telemetry services
Normal ~250,000 domains Recommended

Balanced protection that blocks most ads and tracking while maintaining compatibility with websites.

All Light protections Affiliate tracking links Marketing analytics Cross-site trackers Telemetry and metrics collection
Pro ~330,000 domains

Enhanced protection that also blocks error tracking and monitoring services used by apps and websites.

All Normal protections Error tracking (Bugsnag, Crashlytics, Sentry) App analytics (Firebase, Mixpanel) Pop-up ad networks
Pro+ ~380,000 domains

Aggressive blocking that may cause some websites to not work correctly. Best for advanced users.

All Pro protections Referral and affiliate networks Additional tracking domains May require allowlist adjustments
Ultimate ~470,000 domains

Maximum protection. Blocks everything possible including some legitimate services. Expect some website breakage.

All Pro+ protections Meta/Facebook trackers Microsoft telemetry Location tracking services Aggressive tracker blocking

Malware & Security

Protect your Mac from dangerous websites that distribute malware, attempt phishing attacks, or run scams. This category uses threat intelligence feeds to block known malicious domains.

Light ~15,000 domains

Blocks fake/scam websites and obvious phishing attempts. Minimal resource usage.

Known scam websites Obvious phishing domains Fake shopping sites
Normal ~115,000 domains

Solid protection against common threats. Good balance of security and performance.

All Light protections Malware distribution sites Cryptojacking domains Phishing campaigns Known command & control servers
Pro ~260,000 domains Recommended

Comprehensive threat protection recommended for most users. Blocks a wide range of security threats.

All Normal protections Extended malware databases Emerging threats Suspicious newly-registered domains Additional C&C infrastructure
Ultimate ~625,000 domains

Maximum security coverage using full threat intelligence feeds. Uses more memory but provides the most complete protection.

All Pro protections Full threat intelligence database Zero-day threat domains Comprehensive malicious infrastructure All known attack vectors

Adult Content

Filter explicit and adult websites. Useful for family computers or workplace environments where you want to prevent access to NSFW content.

Enabled ~500,000 domains

Blocks access to adult websites, explicit content, and NSFW material.

Adult/pornography websites Explicit content platforms NSFW image hosts Adult dating sites

Gambling

Block access to online betting, casino, and gambling websites. Helpful for avoiding gambling temptations or restricting access on shared computers.

Light ~2,000 domains

Blocks the most popular gambling and betting websites.

Major online casinos Popular betting sites Sports gambling platforms
Normal ~10,000 domains

Extended coverage including smaller gambling operations.

All Light protections Regional gambling sites Online poker rooms Fantasy sports betting
Pro ~200,000 domains

Comprehensive gambling blocking including affiliate and promotion sites.

All Normal protections Gambling affiliates Betting promotions Lottery websites Cryptocurrency gambling

Social Media

Limit access to social media platforms. Useful for improving productivity, reducing distractions, or creating a focused work environment.

Enabled ~8,000 domains

Blocks major social media platforms and their associated services.

Facebook and Instagram TikTok X (Twitter) Snapchat Related CDNs and APIs

Miscellaneous

Additional protections for specific annoyances and security concerns. Each level adds different types of blocking.

Light ~3,000 domains

Blocks annoying pop-up advertisements that appear on many websites.

Pop-up ad networks Overlay advertisements Interstitial ads
Normal ~10,000 domains

Also blocks URL shorteners that can hide malicious links.

All Light protections URL shortening services (bit.ly, t.co, etc.) Link tracking redirects
Pro ~25,000 domains

Blocks DNS-over-HTTPS (DoH) and VPN services that apps might use to bypass your DNS settings.

All Normal protections DoH bypass servers DNS tunnel services VPN detection avoidance

Allowlist

Sometimes blocklists are too aggressive and block websites you actually need. The Allowlist lets you whitelist specific domains so they always work, no matter what blocklists you have enabled. Think of it as a VIP list for websites.

  • Instantly unblock any website that was incorrectly filtered
  • Allowlist always takes priority over blocklists
  • Add domains directly from the Statistics tab with one click
  • Easy to manage — add or remove domains anytime
MacDNS Allowlist Tab

Statistics

See exactly what MacDNS is blocking on your Mac. The Statistics tab shows you which domains are being blocked most often, helping you understand what threats you are being protected from and fine-tune your blocklist settings.

  • View the top 100 most-blocked domains on your Mac
  • See how many times each domain was blocked
  • Filter by category to understand what type of content is being blocked
  • One-click allowlist if you spot a domain that should not be blocked
  • Updates automatically every 60 seconds
MacDNS Statistics Tab

License & About

Manage your MacDNS license and see information about the application. Activate your license key, check your subscription status, and view the versions of all components that make MacDNS work.

  • See your license status (Trial, Active, or Expired)
  • Enter and activate your license key after purchase
  • View version numbers for MacDNS and its dependencies
  • Quick link to get support or purchase a license
MacDNS About Tab

Ready to Secure Your Mac?

Download and install to start your 7-day free trial. No credit card required.

Download Free Trial