Cloudflare families DoH not blocking content in Firefox

Zero Trust 1.1.1.1
1

Hi,

I am running Firefox on Windows and I have configured Firefox to use Cloudflare families DoH as per the article here Community Tip - Best Practices for 1.1.1.1 for Families. Adult content is not being blocked however as I am still able to access *hub.com site. I am assuming at this stage I have misconfigured something, below is my current config

Firefox

image
image770×899 23.6 KB

Windows output from ipconfig /all

Default Gateway . . . . . . . . . : 10.1.1.1
DHCP Server . . . . . . . . . . . : 10.1.1.1
DHCPv6 IAID . . . . . . . . . . . : 236454771
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-A6-04-A3-18-03-73-2B-56-89
DNS Servers . . . . . . . . . . . : fe80::e2b9:e5ff:feac:2e58%7
10.1.1.1
fe80::e2b9:e5ff:feac:2e58%7
NetBIOS over Tcpip. . . . . . . . : Enabled

2

Also DoT (DNS over TLS) seems to not works for Content FIltering, see here: 1.1.1.3 does not filter content if queries are made via DoT (DNS over TLS)

3

fabio.ancona DoT is not supported for Cloudflare Families (1.1.1.3) but DoH is, thats why I included the link in the original post on how to configure 1.1.1.3 DoH

4

this may be a Firefox issue rather than an issue with Cloudflare blocking content. I stood up Telerik Fiddler on my machine and watched http(s) traffic through the proxy. When using the DNS over HTTPS option "Cloudflare (default)"I could see requests being sent to mozilla.cloudflare-dns.com. After changing the Firefox setting to custom and setting the value to family.cloudflare-dns.com or https://family.cloudflare-dns.com, Fiddler does not show any requests being sent to family.cloudflare-dns.com

5

That post is inaccurate. The proper URL is:

https://family.cloudflare-dns.com/dns-query

Try that for firefox. it works on my end.