Community Tip - Best Practices for 1.1.1.1 for Families

Overview
There are two options for 1.1.1.1 for Families, one blocks all malware and the other blocks malware & adult content.

Background
Like the 1.1.1.1 Public DNS Resolver, 1.1.1.1 for Families is free. Like all public DNS revolvers, the 1.1.1.1 Public DNS Resolver does not filter any content or block any websites.

1.1.1.1 for Families is built on top of the same infrastructure that made 1.1.1.1 the fastest public DNS resolver in the world, and it blocks malware & adult content!

1.1.1.1 for Families
To enable 1.1.1.1 for Families, simply set the the IP address of your device to 1.1.1.2 or 1.1.1.3, depending upon what you want to block.

Block Malware using 1.1.1.2
Enable 1.1.1.1 for Families to block malware by changing the DNS settings of your device to the following IP addresses:

  • 1.1.1.2
  • 1.0.0.2
  • 2606:4700:4700::1112
  • 2606:4700:4700::1002

Test Blocking Malware
Test if it’s working by visiting http://phishing.testcategory.com/ on your browser.

  • If your browser is unable to visit these domains, 1.1.1.1 for Families is working! Note that these domains are not actually malicious but used for testing if 1.1.1.1 for Families is blocking malicious domains.

Block Malware & Adult Content using 1.1.1.3
To Block Malware, malware & adult content, change the DNS settings of your device to:

  • 1.1.1.3
  • 1.0.0.3
  • 2606:4700:4700::1113
  • 2606:4700:4700::1003

Test Blocking Adult Content
Test if it’s working by visiting by visiting http://nudity.testcategory.com/ on your browser.

  • If your browser is unable to visit these domains, 1.1.1.1 for Families is working! Note that these domains are not actually malicious but used for testing if 1.1.1.1 for Families is blocking malicious domains.

FAQ

  • Does 1.1.1.1 for Families support DNS over HTTPS?

    • Yes, to block malware, use security.cloudflare-dns.com, to block malware & adult content, use family.cloudflare-dns.com.
  • Does 1.1.1.1 for Families support DNS over TLS?

    • No. But our team is working on it.
  • Does 1.1.1.1 for Families support DoH and DoT, like 1.1.1.1 does?

    • We support DoH, we’re working DoT.
  • Does 1.1.1.1 for Families force SafeSearch?

    • Yes, it forces SafeSearch.
  • Are there any known issues & what to do if I see something?

    • Some websites have educational content about ‘Gay, Lesbian or Bisexual’ themes are categorized incorrectly under ‘Adult Themes’ . Our engineering team is aware of this and actively moving those sites out of the ‘Adult Themes’ category. We can manually override sites immediately if you share the site with Cloudflare Support as outlined in the “If You Need More Help” section of this #CommunityTip.

Detailed Setup by Device

Lite Reading

If You Need More Help
This community of other Cloudflare users may be able to assist you, if not, follow the instructions in this Tip to report the issue with 1.1.1.1 for Families to our engineers. The best way to reach Cloudflare Customer Support is to login to Cloudflare and then contact Cloudflare Support.

Expert Comments Appreciated
We really appreciate comments like: “What are the three things to always try”, or “Do this first” or “In my experience”.

This is a Cloudflare Community Tip, to review other tips, click here.

Çevirmek…traduzir…翻译…traducir…Traduire…Übersetzen…:greyg: Translate this Tip

BPFFCT 040120

4 Likes

A post was split to a new topic: Questions about 1.1.1.1 for Families

Stupid question, but isn’t DNS over HTTPS and DOH the same thing? When I update Cloudflared to use 1.1.1.1 for Families, it does not work. Is DOH not supported yet in Cloudflared? Also, how do you use a URL for DNS as listed in the FAQ?

Does 1.1.1.1 for Families support DNS over HTTPS?

  • Yes, to block malware, use security.cloudflare-dns.com , to block malware & adult content, use family.cloudflare-dns.com .