DNS
SVEN
ansluten.net ↗
DNS from Ansluten · AS201983

Fast.
Secure.
Simple DNS.

Ansluten DNS is a recursive DNS service with DNSSEC validation, encrypted DNS through DoH and DoT, and optional filtering for threats, adult content and gambling.

Choose DNS profileConfiguration guides
Three profiles

Choose the protection level that suits you.

All profiles use the same recursive DNS platform. The difference is the filtering applied.

Standard

Unfiltered DNS for infrastructure and your own security solutions.

Secure · recommended

Protection from malicious domains — the right choice for most people.

Family

Secure plus filtering for adult content and gambling.

Standard

Fast, unfiltered DNS

For anyone who wants to use Ansluten's resolver without content filtering.

  • ✓ DNSSEC validation
  • ✓ QNAME minimization
  • ✓ IPv4 and IPv6
  • ✓ DoH and DoT
  • ✓ No RPZ filtering
IPv4 · Stockholm212.63.221.6
IPv4 · Växjö185.57.105.250
IPv6 · Stockholm2a01:298:c::6
IPv6 · Växjö2a04:dcc0:0:11::250
Hostname / DoTstandard.dns.ansluten.net
DNS over HTTPShttps://standard.dns.ansluten.net/dns-query
Secure · Recommended

Protection from malicious domains

The recommended profile for everyday use on computers, phones, offices and home networks.

  • ✓ Everything in Standard
  • ✓ Malware
  • ✓ Phishing
  • ✓ Scams and fraud
  • ✓ Command & Control / threat infrastructure
IPv4 · Stockholm212.63.221.7
IPv4 · Växjö185.57.105.249
IPv6 · Stockholm2a01:298:c::7
IPv6 · Växjö2a04:dcc0:0:11::249
Hostname / DoTsecure.dns.ansluten.net
DNS over HTTPShttps://secure.dns.ansluten.net/dns-query
Family

Extended content protection

For homes, families and networks where adult content and gambling should also be filtered.

  • ✓ Everything in Secure
  • ✓ Adult / NSFW
  • ✓ Gambling
  • ✓ DNSSEC validation
  • ✓ DoH and DoT
IPv4 · Stockholm212.63.221.8
IPv4 · Växjö185.57.105.248
IPv6 · Stockholm2a01:298:c::8
IPv6 · Växjö2a04:dcc0:0:11::248
Hostname / DoTfamily.dns.ansluten.net
DNS over HTTPShttps://family.dns.ansluten.net/dns-query
Protocols

Classic or encrypted DNS.

Ansluten DNS supports traditional DNS over UDP/TCP, as well as encrypted DNS over TLS and HTTPS.

Classic DNS

UDP/TCP port 53. Intended for customers and networks connected to Ansluten.

Standard212.63.221.6 / 2a01:298:c::6
185.57.105.250 / 2a04:dcc0:0:11::250
Secure212.63.221.7 / 2a01:298:c::7
185.57.105.249 / 2a04:dcc0:0:11::249
Family212.63.221.8 / 2a01:298:c::8
185.57.105.248 / 2a04:dcc0:0:11::248

Encrypted DNS

DoT uses port 853 and DoH uses HTTPS on port 443. Both can be used outside the Ansluten network.

DNS over TLSstandard.dns.ansluten.net
secure.dns.ansluten.net
family.dns.ansluten.net
DNS over HTTPS path/dns-query
ProfileIPv4IPv6DoT hostnameDoH URL
Standard212.63.221.6
185.57.105.250		2a01:298:c::6
2a04:dcc0:0:11::250		standard.dns.ansluten.nethttps://standard.dns.ansluten.net/dns-query
Secure212.63.221.7
185.57.105.249		2a01:298:c::7
2a04:dcc0:0:11::249		secure.dns.ansluten.nethttps://secure.dns.ansluten.net/dns-query
Family212.63.221.8
185.57.105.248		2a01:298:c::8
2a04:dcc0:0:11::248		family.dns.ansluten.nethttps://family.dns.ansluten.net/dns-query
Access: Classic DNS on port 53 is intended for Ansluten customers and networks. For mobile use, hotel Wi-Fi, external offices and other networks, use DNS over TLS or DNS over HTTPS.
Security

Built for secure and efficient name resolution.

Filtering takes place at the DNS layer. When a domain matches an active security or content policy, the lookup is blocked before the client connects to its destination.

DNSSEC

All profiles validate DNSSEC to detect manipulated or invalid DNS responses.

QNAME minimization

The resolver limits how much of the domain name is sent to each DNS server during recursive resolution.

Automatic filters

Secure and Family use automatically updated threat and content lists that are normalized and validated before activation.

IPv4 + IPv6

The service is available over IPv4 and IPv6 and supports both classic DNS and encrypted transports.

About filtering: DNS filtering is an additional layer of protection and does not replace updated clients, endpoint protection, firewalls or other security measures. External threat and content lists can sometimes classify domains incorrectly.
Privacy

Encrypted DNS with clear expectations.

DNS queries can reveal which services a device is trying to reach. Ansluten DNS therefore uses encrypted transport protocols and QNAME minimization to limit the exposure of DNS data.

DoH and DoT

Encrypted DNS protects queries between the device and Ansluten DNS on external networks.

QNAME minimization

The resolver limits how much of the domain name is sent to each DNS server during recursive resolution.

DNSSEC validation

Manipulated or invalid DNS responses are detected before they reach the client.

Transparency

DoH and DoT encrypt transport between your device and Ansluten DNS, but they do not anonymize queries from the DNS operator. Ansluten DNS must process queries in order to answer them.

Get started

Configure in a few minutes.

Choose Secure for everyday use. Family is intended for networks where additional content filtering is desired.

Windows 11
  1. Open Settings → Network & internet and select your Wi-Fi or Ethernet connection.
  2. At DNS server assignment, choose Edit → Manual and enable IPv4.
  3. Set Preferred DNS to 212.63.221.7 and preferably Alternate DNS to 185.57.105.249 for Secure.
  4. For each DNS server, choose DNS over HTTPS → On (manual template) and enter https://secure.dns.ansluten.net/dns-query.
  5. Disable fallback to plaintext if you want to require DoH, then choose Save.

For Family, use 212.63.221.8 and 185.57.105.248 with https://family.dns.ansluten.net/dns-query.

macOS
  1. Open System Settings → Network and select the connection you use.
  2. Open Details → DNS.
  3. Add 212.63.221.7 and 185.57.105.249 for Secure. You can also add IPv6 addresses 2a01:298:c::7 and 2a04:dcc0:0:11::249.
  4. Choose OK, then Apply or Done.

This configures classic DNS. For encrypted DNS on macOS, use the Ansluten configuration profile below.

Android · Private DNS (DoT)
  1. Open Settings → Network & internet → Private DNS. If it is not visible, search Settings for Private DNS.
  2. Choose Private DNS provider hostname.
  3. Enter secure.dns.ansluten.net for Secure or family.dns.ansluten.net for Family.
  4. Tap Save.

Private DNS uses DNS over TLS and normally applies to both Wi-Fi and mobile networks.

iPhone / iPad / macOS · encrypted DNS

Install an Ansluten DNS profile to use encrypted DNS when switching between networks. On iPhone and iPad: download the profile, open Settings → Profile Downloaded, and tap Install. On macOS, open the downloaded profile and follow the installation flow in System Settings.

Install SecureInstall FamilyInstall Standard
UniFi
  1. Open Settings → Networks → [Network Name] → DHCP Service Management.
  2. Under DNS Server, enter the Ansluten DNS servers to distribute to clients.
  3. Secure: 212.63.221.7 and, when multiple DNS fields are available, 185.57.105.249. Family: 212.63.221.8 and 185.57.105.248.
  4. Save. Renew the DHCP lease or reconnect clients to receive the new DNS settings immediately.

The UniFi gateway's own DNS is configured separately under Settings → Internet → DNS Server. The setting above controls DNS distributed to clients by DHCP.

pfSense

Simple via DHCP: distribute Secure addresses 212.63.221.7 and 185.57.105.249 to clients.

DNS over TLS through pfSense DNS Resolver:

  1. Open System → General Setup. Add 212.63.221.7 and 185.57.105.249 as DNS servers. Set hostname secure.dns.ansluten.net for TLS certificate validation and uncheck Allow DNS server list to be overridden by DHCP/PPP on WAN.
  2. Set DNS Resolution Behavior to use local DNS and ignore remote DNS servers.
  3. Open Services → DNS Resolver. Uncheck Enable DNSSEC Support, enable Enable Forwarding Mode, and enable Use SSL/TLS for outgoing DNS Queries to Forwarding Servers.
  4. Save and choose Apply Changes.

pfSense recommends disabling local DNSSEC validation in forwarding mode. DNSSEC validation is instead performed by Ansluten DNS. Do not configure other DNS servers as fallbacks if all DNS should use Secure.

OPNsense

DNS over TLS through Unbound:

  1. Open Services → Unbound DNS → DNS over TLS.
  2. Create an enabled entry. Leave Domain empty to forward all DNS queries.
  3. Set Server IP to 212.63.221.7, Port to 853, and Verify CN to secure.dns.ansluten.net.
  4. Preferably add a second entry with Server IP 185.57.105.249, the same port and the same Verify CN for redundancy.
  5. Save and apply the changes.

If Use System Nameservers is enabled, system nameservers can take precedence over a catch-all forward. Also avoid other DNS fallbacks if all DNS should use Secure.

Help improve our filters

Has a domain been blocked incorrectly?

Report it and we will review it. A short explanation of why the domain should be available is helpful.

Your IP address is not stored as raw data. A cryptographic hash is used only to limit spam.

Submitting a report does not automatically unblock the domain. All reports are reviewed manually.

Copied