Ultimate-NextDNS-Config

The ultimate settings for NextDNS.

Security

1. Threat Intelligence Feeds = Enabled
2. AI-Driven Threat Detection = Enabled
3. Google Safe Browsing = Enabled
4. Cryptojacking Protection = Enabled
5. DNS Rebinding Protection = Enabled
6. IDN Homograph Attacks Protection = Enabled
7. Typosquatting Protection = Enabled
8. Domain Generation Algorithms (DGAs) Protection = Enabled
9. Block Newly Registered Domains (NRDs) = Enabled
10. Block Dynamic DNS Hostnames = Enabled
11. Block Parked Domains = Enabled
12. Block Child Sexual Abuse Material = Enabled

Block Top-Level Domains

.机构 .fit .work .surf .tokyo .asia .review .cn .monster .info

Blocklists

1. OISD
2. Goodbye Ads
3. HaGeZi - Multi ULTIMATE
4. Steven Black
5. hBlock
6. NextDNS Ads & Trackers Blocklist

Native Tracking Protection

• Add all devices you own.

• Block Disguised Third-Party Trackers = Enabled

• Allow Affiliate & Tracking Links = Enabled (Disabling this sometimes causes email verification problems, or some download link problems).

Parental Control

1. Porn
2. Gambling
3. Dating

Denylist

1. adservice.google.com
2. ad.doubleclick.net

Allowlist

1. yt3.ggpht.com
2. youtubei.googleapis.com
3. s.ytimg.com
4. s.youtube.com
5. devuploads.com
6. revanced.net
7. api.picsart.com

Settings

Logs

• Enable Logs = Enabled

Privacy adjustment

• Log clients IPs = Enabled
• Log domains = Enabled

Retention

• 1 months

Storage Location

• Switzerland 🇨🇭 (Because of some great privacy laws)

Block Page

• Disabled

Performance

• Anonymized EDNS Client Subnet = Enabled
• Cache Boost = Enabled
• CNAME Flattening = Disabled

Web3 (optinal)

Enabled