Every time you visit a website, your device sends a DNS query — a request to translate a domain name like "example.com" into an IP address. That query goes somewhere. On most networks, it goes to your internet provider's DNS server, where it can be logged, analysed, and in some countries used to block or redirect you without your knowledge. Most people never change this default. They probably should.
dnsforge.de is a German public DNS resolver that changes where that query goes and what happens to it. The service runs four filtering profiles. The default — called Normal — blocks ads, trackers, and malware domains using a combined list of over 1.2 million entries drawn from 39+ blocklists. Because blocking happens at the DNS level, it applies to every app on every device, not just browsers. A weather app phoning home to an ad network, a smart TV sending telemetry, a podcast client loading tracking pixels — all of it gets cut off before a connection is ever made.
Privacy is the other half of the pitch. dnsforge.de logs no queries, validates DNSSEC to prevent DNS spoofing, and runs exclusively on servers in Germany — under German and EU data protection law. The contrast with default ISP DNS, which typically logs everything, is significant.
The service supports modern encrypted protocols: DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), and DNS-over-QUIC (DoQ). This means your DNS queries are encrypted in transit, so your ISP can no longer read which domains you're looking up even if they try.
Setup takes minutes on any device. On iOS and Android, DoH can be configured in system settings. On desktop, browsers like Firefox and Chrome accept a custom DoH resolver directly. At the router level, a single configuration protects everything on the network — including devices that don't support encrypted DNS on their own.
dnsforge.de is free, requires no account, and imposes a rate limit only relevant in automated contexts. For most users it's invisible once set up. That's the point — one change, every device, no ongoing effort.
Source: dnsforge.de
← all posts