Serious Discussion What NextDNS Config Are You Running These Days?

[lokamoka820]

Hey everyone,

I've been noticing a lot of discussion around NextDNS configs lately and was wondering what everyone's currently running.

If you don't mind sharing, I'm interested in:

• Which blocklists you use
• Security and privacy settings you've enabled
• Any advanced tweaks or custom rules
• Why you chose that particular setup

A quick screenshot or summary of your config would be great too.

Just looking to see what the community's preferred NextDNS setup is these days and maybe pick up some ideas. Thanks!

 

[Halp2001]

I know there is no one-size-fits-all configuration. Before recommending specific settings, I think it's worth asking what each person actually wants from NextDNS: ad blocking, greater privacy, protection against malware and phishing, parental controls, or maximum website compatibility?

Personally, I eventually switched to AdGuard Home, using Quad9 as a DNS resolver with threat protection, because I prefer having greater local control over filtering and DNS management. That said, when I used NextDNS, I found that a moderate configuration often works better for most users than trying to block absolutely everything.

That's why I find it interesting to see what each person looks for in NextDNS, since the ideal configuration can vary considerably depending on individual needs and preferences.

 

[lokamoka820]

I'm currently using Quad9 as well, just because NextDNS caused some websites to break for me. I'm not someone who relies on allowlists and usually switch antivirus software if it flags false positives, so reliability is my top priority. However, since NextDNS is highly recommended by many members, I'm considering giving it another try—perhaps the issues I experienced were due to my configuration rather than NextDNS itself.

 

[Halp2001]

Just to add a little more context, when I used NextDNS, my goal wasn't to block as much as possible, but rather to add an extra layer of security and privacy to complement Windows' built-in protections and tools like uBlock Origin, avoiding unnecessary overlap and keeping things simple without requiring too much maintenance.

I used it alongside YogaDNS to encrypt DNS queries. The free NextDNS plan was always sufficient for my needs, as I never reached the query limit.

As for the settings, I kept NextDNS's default ads and trackers blocklist and added HaGeZi Multi PRO++. I also enabled disguised third-party trackers blocking and the option to block private IP addresses, which helps protect against DNS rebinding attacks. I never used AI-driven threat detection because I encountered quite a few false positives, and preferred relying on Google Safe Browsing as an additional layer of browser protection, although I understand that not everyone shares that preference.

I also kept the block page enabled because I found it useful to see which domains had been blocked and why.

Keep in mind that this was quite some time ago, when many of the features available in NextDNS today weren't yet available. At the time, I was looking for something straightforward for a PC mainly used for browsing, multimedia and entertainment, with a good balance between protection, compatibility and low maintenance.

 

[Sampei.Nihira]

Hey everyone,

I've been noticing a lot of discussion around NextDNS configs lately and was wondering what everyone's currently running.

If you don't mind sharing, I'm interested in:

• Which blocklists you use
• Security and privacy settings you've enabled
• Any advanced tweaks or custom rules
• Why you chose that particular setup

A quick screenshot or summary of your config would be great too.

Just looking to see what the community's preferred NextDNS setup is these days and maybe pick up some ideas. Thanks!

Security = all,no Payload DNS - All non-European characters + the most commonly abused TLDs + some high-risk TLDs (cn, ru, kr, etc.)...
Privacy = HaGeZi Multi ultimate (but you have to use the whitelist) + Youtube DNS

I think you'll be able to choose the other settings on your own.

 

[LinuxFan58]

All security features enables, except
- tunneling endpoints
- residential hosting
- datadrop services

Optional
- Free hosting
- High risk TLD's


In privacy enable
- all options
- OISD.nl filter
- Youtube reroute

 

[superleeds27]

Using the Adguard filter only. I don't have many of the other features enabled either.

Had thought about using Hagezi but not really sure what difference/benefit there would be. I've never ran into any issues with the Adguard filter as of yet.

 

[TairikuOkami]

Security - All except DNS Payload, because it blocks eSNI as posted by @Sampei.Nihira, added virtually all TLDs except common ones like com, net, io, co.uk, org
Parental - All enabled except a few services I use, I rather block all and enable a single domain that I need, like I block streaming and I just enable Netflix alone
I use different profiles for browsers/Windows. I use Edge as primary, LibreWolf for FB and Brave for Google/YouTube, the rest of the internet is blocked