+ Your DNS queries reveal which domains you visit. ISPs can monitor them, and
+ websites use them to share data with third-party ad and tracking networks.
+ While using your VPN provider's DNS resolver and tracker-blocker tool can
+ address this issue, modDNS offers more visibility and better control over
+ what is blocked.
+
+
+ {/* TODO(landing): pull v.1.0.6 from package.json or a build-time constant */}
+ v.1.0.6
+
+
+ {/* PRODUCT SCREENSHOT */}
+
+
[ MODDNS_DASHBOARD ]
+
+
+ {/* Mobile-tuned screenshot at ≤768 px (smaller, narrower aspect).
+ Desktop falls back to the wide screenshot below. */}
+
+
+
+
+
+
+ {/* WHAT YOU CAN DO */}
+
+
DNS_FILTER_MODULES
+
+ Granular DNS Filtering
+
+
+
+
01. COMBINE BLOCKLISTS
+
+ Start with Basic protection or Comprehensive/Restrictive presets. Enable
+ individual lists from Hagezi, OISD, and others. Block specific services
+ (e.g. Facebook, Google, Amazon) or categories (e.g. adult content,
+ gambling).
+
+
+
+
02. DEFINE CUSTOM RULES
+
+ Override blocklists with allowlist entries for domains you don't want
+ blocked. Add denylist entries for domains not covered by existing lists.
+ Use wildcard patterns for wider coverage.
+
+
+
+
03. CREATE DNS PROFILES
+
+ Configure different filtering rules for work and personal devices. Each
+ profile gets a unique identifier for DNS setup. Supports DNS-over-HTTPS,
+ DNS-over-TLS, and DNS-over-QUIC.
+
+
+
+
04. MONITOR QUERIES
+
+ Query logging disabled by default. When enabled, set retention period
+ and review blocked and allowed requests by device. Download logs for
+ analysis.
+
+
+
+
+
+ {/* TECHNICAL SPECIFICATIONS */}
+
+
[ TECHNICAL_SPECIFICATIONS ]
+
+
+
// DNS_PROTOCOLS
+
+
DNS-over-HTTPS (DoH)Port 443
+
DNS-over-TLS (DoT)Port 853
+
DNS-over-QUIC (DoQ)Port 853
+
DNSSECEnabled
+
+
+
+
// PLATFORM_SUPPORT
+
+
System-wideWin/Mac/Linux/iOS/Android
+
BrowserAll supported
+
IVPN AppsCustom DNS
+
Router/FirewallSupported
+
+
+
+
// PRIVACY_ARCHITECTURE
+
+
IP LoggingNone
+
Query LoggingOff by Default
+
Device IDOptional
+
RetentionOptional (1H-30D)
+
+
+
+
+
+ {/* VERIFIABLE PRIVACY */}
+
+
TRUST_SIG
+
Verifiable Privacy
+
+
+
ACCOUNTABLE OPERATORS
+
+ Built by the public team behind IVPN, with a 15-year history in
+ operating privacy services.
+
+ By default we do not log DNS queries, timestamps, IP addresses and
+ device identifiers.
+
+ [ REVIEW OUR POLICIES ]
+
+
+
+
+ {/* SERVICE LIMITATIONS */}
+
+
+ [ SERVICE_LIMITATIONS ]
+
+
+
+ modDNS is a DNS resolver, not a comprehensive privacy solution. It filters
+ DNS queries but does not encrypt other network traffic.
+
+
+ Aggressive blocklists may break legitimate services. Start with Basic
+ protection and adjust as needed.
+
+
+ Query logging is off by default. Enable only if you need visibility for
+ troubleshooting.
+
+
+ Not designed for protection against targeted surveillance or advanced
+ persistent threats.
+
+
+ Blocklists update every 1-3 hours. We can't guarantee new malicious domains
+ are blocked immediately.
+
+
+
+
+ {/* UNLINKED ACCESS */}
+
+
+
UNLINKED_SVC
+
UNLINKED ACCESS
+
+ Additional services in the IVPN privacy stack do not receive or store your
+ IVPN account ID. There is no shared identity layer connecting your accounts
+ across services.
+
+
+
+ Subscription access is verified through token-derived hashes, not
+ account identifiers
+
+
+ Ongoing subscription sync requires no knowledge of which IVPN account
+ you hold
+
+
+ Does not prevent all forms of cross-service correlation — see
+ documentation for the full threat model
+
+
+
+ {/* TODO(landing): wrap "Read more about Unlinked Access" in
+ …
+ once the IVPN explainer page is published. Until then the prose stays
+ unlinked and only the source-code link is active. */}
+ Read more about Unlinked Access and review the{' '}
+
+ code
+
+ .
+
+
+
+ SVC_TOPOLOGY
+
+
+
+
+ {/* GET ACCESS */}
+
+
PLAN_INIT
+
GET ACCESS TO MODDNS
+
+ modDNS is included in IVPN Plus and Pro Suite. No standalone plan is available.
+ Visit{' '}
+
+ ivpn.net
+ {' '}
+ for pricing and account setup.
+
+