Windows 11: encrypted DNS

Windows 11 can encrypt DNS to any DoH server once you register the template. Windows 10 and older: set the router or computer DNS to the IPv4 addresses on the free filters page.

1. Register the Skoonveld DoH template (once, as Administrator)

Open Terminal (Admin) and run the two lines for your filter:

Security Filter

netsh dns add encryption server=1.1.1.2 dohtemplate=https://doh.skoonveld.app/doh/security-filter/ autoupgrade=yes udpfallback=no
netsh dns add encryption server=1.0.0.2 dohtemplate=https://doh.skoonveld.app/doh/security-filter/ autoupgrade=yes udpfallback=no

Adult Filter

netsh dns add encryption server=1.1.1.3 dohtemplate=https://doh.skoonveld.app/doh/adult-filter/ autoupgrade=yes udpfallback=no
netsh dns add encryption server=1.0.0.3 dohtemplate=https://doh.skoonveld.app/doh/adult-filter/ autoupgrade=yes udpfallback=no

Family Filter

netsh dns add encryption server=1.1.1.3 dohtemplate=https://doh.skoonveld.app/doh/family-filter/ autoupgrade=yes udpfallback=no
netsh dns add encryption server=1.0.0.3 dohtemplate=https://doh.skoonveld.app/doh/family-filter/ autoupgrade=yes udpfallback=no

2. Set the DNS servers

  1. Settings → Network & internet → Wi-Fi (or Ethernet) → your network → Hardware properties.
  2. Next to DNS server assignment click Edit, choose Manual, turn on IPv4.
  3. Enter the two IPv4 addresses from step 1 as preferred and alternate DNS, and set DNS over HTTPS to On (manual template) for each; the template fills in automatically.
  4. Save.

3. Keep it in place

Use a standard (non-administrator) account for children so the setting cannot be changed, and disable browser secure DNS or point it at the same Skoonveld endpoint (see browsers).

Check that it works