Using this feature the SafeDNS service can identify users by their public IP address only. The feature does not work with the SafeDNS Agent or the SafeDNS VPN solution. 

To set it up, please open your SafeDNS dashboard on the ‘Settings’ page and choose the ‘Nets’ section of ‘Settings’. Add your public IP address to the ‘Enter an IPv4 IP address’ field and choose a filtering profile you would like to be filtered by and click the ‘Add’ button.

  1. Setup on Windows 10
  2. Setup on Linux (Ubuntu)
  3. Setup on MacOS

1. How to configure on Windows 10

Download and install a Stubby msi package at: https://dnsprivacy.org/wiki/display/DP/Windows+installer+for+Stubby

Run the Windows Command Prompt as an administrator:

Go to the Stubby directory using the Command Prompt and open stubby.yml configuration file with Notepad:

Set settings following the example below:

resolution_type: GETDNS_RESOLUTION_STUB
dns_transport_list:
GETDNS_TRANSPORT_TLS
tls_authentication: GETDNS_AUTHENTICATION_NONE
tls_query_padding_blocksize: 128
edns_client_subnet_private: 1
idle_timeout: 10000
listen_addresses:
- 127.0.0.1
- 0::1
round_robin_upstreams: 1
upstream_recursive_servers:
- address_data: 195.46.39.41
  tls_auth_name: “dns-s.safedns.com"

Run the following command to replace the default DNS server to a local Stubby:

PowerShell -ExecutionPolicy bypass -file  "C:\Program Files\Stubby\stubby_setdns_windows.ps1"

Run a stubby.bat file

2. How to configure on Linux (Ubuntu)

Install the Stubby package from a repository:

$ sudo apt install stubby
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following NEW packages will be installed:
  stubby
0 upgraded, 1 newly installed, 0 to remove and 18 not upgraded.
Need to get 29.2 kB of archives.
After this operation, 102 kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu bionic/universe amd64 stubby amd64 1.4.0-1 [29.2 kB]
Fetched 29.2 kB in 0s (291 kB/s)  
Selecting previously unselected package stubby.
(Reading database ... 248895 files and directories currently installed.)
Preparing to unpack .../stubby_1.4.0-1_amd64.deb ...
Unpacking stubby (1.4.0-1) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
Setting up stubby (1.4.0-1) ...

Set the configuration file /etc/stubby/stubby.yml as follows:

resolution_type: GETDNS_RESOLUTION_STUB
dns_transport_list:
  - GETDNS_TRANSPORT_TLS
tls_authentication: GETDNS_AUTHENTICATION_NONE
tls_query_padding_blocksize: 128
edns_client_subnet_private : 1
idle_timeout: 10000
listen_addresses:
  - 127.0.0.2
  -  0::2
round_robin_upstreams: 1
upstream_recursive_servers:
   - address_data: 195.46.39.41
     tls_auth_name: "dns-s.safedns.com"

Change DNS in /etc/resolv.conf file to 127.0.0.2:

nameserver 127.0.0.2

Start the filtering service

service stubby start

3. How to configure on Mac OS

Download and install the Stubby Manager package at:

https://dnsprivacy.org/wiki/download/attachments/6782984/StubbyManager.pkg

If you get a security alert, click on ‘Open Anyway’ in the security settings.

Launch a Stubby Manager app after installation and click the ‘Advanced’ button.

Set the configuration file as follows:

resolution_type: GETDNS_RESOLUTION_STUB
dns_transport_list:
  - GETDNS_TRANSPORT_TLS
tls_authentication: GETDNS_AUTHENTICATION_NONE
tls_query_padding_blocksize: 128
edns_client_subnet_private : 1
idle_timeout: 10000
listen_addresses:
- 127.0.0.1
- 0::1
round_robin_upstreams: 1
upstream_recursive_servers:
   - address_data: 195.46.39.41
     tls_auth_name: “dns-s.safedns.com"

Apply the settings and click ‘Start’.

Open ‘Network Properties’ and set 127.0.0.1 as the DNS server.

Check how the filtering works.