Discussions

So it will disable a filter category at at specific time and then then re-enable it at a later time also to update custom rules folder contents from e.g. github think both of these would be welcomed additions

Dear Master, Sometimes some domains loads successfully without issues, but, however, sometimes it can't be accessed even that I didn't make any changes to my fiters or rules and even when I have already set these websites to be accessed and bypassed the rules and filtered. For example, the website "<https://ntlite.com">. This is a well-known website and it doesn't blocked by default by any filter or rule. However, later I discovered that some websites like the example above, is hosted by Cloudflare, Inc. (AS13335) where the related IPs to (AS13335) is blocked by false or by mistake. In addition, IPs related to (AS13335) networks like (104.21.X.X) and (172.67.X.X) are blocked, which will make the hosted websites and services to be inaccessibile. Can you check further or investigate where is the problem because as I said, sometime it works but sometimes is not. Thank you.

Hi Team, Thank you so much for making internet safe place through your service. I have found this subreddit where they update different websites regularly. If you can please add these websites in your native torrent and piracy filter that would be great. <https://www.reddit.com/r/FREEMEDIAHECKYEAH/wiki/video/> and also these websites for Indian Tv series <https://www.desitellybox.me/> <https://gogoserial.su/> If you need further information please let me know. Thank you. Best regards, Andrew

Often on networks with SQUID proxy and other systems, DNS nameservers need to be specified. For modern routers, it is simple enough to add a bunch of nameservers, but some, like the Xiaomi only allow two DNS nameservers. It would be great if profiles could support fallback nameservers and search domains.

We make use of Entra ID as our source for Authentication but also for user provisioning/de-provisioning. I noticed you mentioned SSO on the feature list of things to come, would be great to understand when that is as well as if you plan on provisioning at the same time and if so when that will come.

I love the expose via DNS feature, however the one thing that I wish that it would do is capture both IPv4 'and' IPv6 so that there's both an A and AAAA record. I use a dual-stack network and it seems that it only shows either the A or AAAA record when I do a query, and never both at the same time. (or at least set it so it prefers IPv4 if available) When I look at the activity log, my router is definitely making requests on both IPv4 and IPv6, so it should be aware of both IPs. So occasionally when I need access to my home network on an IPv4-only network, it ends up being inaccessible since it only has the AAAA record.

This is currently possible with DNSCrypt-Proxy, but is slightly more annoying to set up than the Control D CLI. This way you can put e.g. <https://127.0.0.1:3000> into Firefox/Chrome and enable ECH. It is necessary for certain scenarios where you have a firewall downstream from controlD.

I installing Control D using resolver id x-out(sudo sh -c 'sh -c "$(curl -sSL <https://api.controld.com/dl)"> -s xxxxxxxxxxx forced') on my Firewalla Gold and it breaks in App Network Performance, cannot ping any IP/Domain from Firewall CLI or do a speedtest from Firewalla CLI and it also breaks access to App when on Cellular Network. App has access at home on my network. I have paid for a year subscription of Control D and cannot use ctrld service on Firewalla. To get some functionality of Control D on my Firewall I had to use Firewall Service DNS over HTTPS and add Control D url with resolver id but doing it this way I lose a lot of functionality like seeing the individual device IPs and ability to have multiple profiles per device etc.. How can I get ctrld service to work on Firewalla without breaking Firewalla services mentioned above?

I have an omada system in my house, and I would like to be sure where is absolutely necessary to insert the controld dns. In wan, in lan, or both? Is there any difference where I put it? After I have done this in both, wan and lan, it seems that some pages take a little extra time to load.