Alternatives to NxFilter

A self-hosted DNS filter with per-user policies, reports and Active Directory integration. The listings below can replace it for an important use case. Each note says what changes if you switch.

  • NxFilter

    A self-hosted DNS filter with per-user policies, reports and Active Directory integration.

    FreeProprietarySelf-hosted

Replacements

Listings that take over the same core job as NxFilter.

  • AdGuard Home

    Network-wide ad and tracker blocking in a single binary, with encrypted DNS built in rather than bolted on.

    FreeOpen sourceWindowsmacOSLinuxWebSelf-hosted

    AdGuard Home is GPL-3.0 open source with per-client rules, parental controls and a web interface, but lacks NxFilter's Active Directory integration and per-user reports.

  • Pi-hole

    A DNS server for your home network that refuses to look up ad and tracker domains, for every device at once.

    FreeOpen sourceLinuxSelf-hostedWeb

    Pi-hole is open source under EUPL-1.2 and aimed at home networks, blocking ads and trackers for every device, without Active Directory integration or per-user policies.

  • pfBlockerNG

    A pfSense package that adds IP blocklists, country blocking and DNS blocklists to the firewall.

    FreeProprietarySelf-hosted

    pfBlockerNG adds IP blocklists and country blocking inside a pfSense firewall, so it only runs on pfSense and its many options make setup involved.

  • Blocky

    Lightweight DNS proxy with blocklists, written for container deployments.

    FreeOpen sourceWindowsmacOSLinuxSelf-hostedCommand line

    Blocky is an Apache-2.0 open source proxy with per-client and per-group blocking suited to containers, but has no administration interface, reports or directory integration.

  • CleanBrowsing

    A DNS filtering service that blocks malware, phishing and adult content at the network level.

    FreemiumProprietaryWeb

    CleanBrowsing is a hosted service for families and schools that blocks adult content and malware by changing DNS settings, instead of running your own server.

  • NextDNS

    Cloud DNS filtering with per-device profiles and detailed logs.

    FreemiumProprietaryWindowsmacOSLinuxAndroidiOS

    NextDNS moves filtering to a cloud service with per-device profiles and detailed logs, so no server is needed, but its free tier has a monthly query allowance.

  • Control D

    Customisable DNS filtering service with per-device profiles.

    FreemiumProprietaryWindowsmacOSLinuxAndroidiOS

    Control D is a hosted freemium service with per-device profiles and granular per-service rules, so filtering happens on its infrastructure rather than your own server.

  • OpenDNS Home

    A public DNS service from Cisco with phishing protection and optional content filtering for home networks.

    FreeProprietaryWindowsmacOSLinuxAndroidiOS

    OpenDNS Home is a free Cisco resolver offering content filtering and phishing protection set once at the router, without per-user policies or Active Directory support.

Also worth comparing

These listings name NxFilter as their own alternative, so the relationship runs both ways.

  • Safe Surfer

    A parental-control DNS filtering service that blocks harmful content on phones, computers and home routers.

    PaidProprietaryAndroidiOSWeb

    NxFilter is a free self-hosted filter with per-user policies, screen time control and reports, requiring your own server and more setup.

Similar software

Related functionality, not a direct replacement.