Internet safety with SafeDNS

SafeDNS is a cloud-based Internet security and content filtering (site filtering by content) company. It allows you to restrict access to certain Internet resources for home network users and configure parental control.

SafeDNS service in Keenetic is implemented as an operating system component. You can add or remove this Internet Safety service from the system and turn it on or off completely, without affecting the parameters of the main Internet connection: SafeDNS will work behind any NAT and with a dynamic IP address.

To work with this service, you need to get a SafeDNS account. To do this, register for free at After registration, log in to your account. The 'Web Filtering' and 'Domains' tabs are used to set up content filtering policies.
On the 'Filter' tab, you can set up allowed or forbidden categories of sites (SafeDNS perform the categorization, databases are constantly updated).
On this page, the categories of sites the access to which will be blocked are checked.


In the 'Domains' tab, you can set up access to specific sites more precisely.
For example, on the 'Web Filtering' tab, we prohibit 'Social Networks' and allow 'Torrents & P2P'. And on the 'Domains' tab, regardless of these settings, we can allow access to the social networking site VK ( and deny access to the torrent tracker (


Now let's set up the router.

NOTE: Important! It is not possible to run SafeDNS, Cloudflare DNS and AdGuard DNS services at the same time. Only one of them can be used.

Before setting up the Internet safety service, register your home network devices according to the instruction 'Connected devices registration'.

Then, on the 'Internet safety' page, select 'SafeDNS' in the 'Service' field.


In the 'SafeDNS account' section, you need to enter your SafeDNS account's parameters by clicking 'Log in'. If you do not have a SafeDNS account yet, click 'Create account'.


By clicking 'Log in' enter the e-mail address and password you used when you registered with SafeDNS.


The 'Assignment of protection policies to devices' section appears. This section's setting comes down to assigning filtering profiles to permanent home network devices (registered in Keenetic) and occasionally appearances (guest network and unregistered devices).

For example, we will assign the 'Default filtering profile to three registered devices, and assign the 'No protection' profile to all other devices.

In the 'Default policy' field, you can specify a profile applied to all unregistered devices, including those connected to the Guest segment.


Our example uses a free trial account on the SafeDNS website and a 'Default' profile. If the account is a paid one, several profiles created by the user himself will be available. You can share access rights between registered and unregistered devices (for example, guest devices can only access certain categories, while home devices can be granted more complete access or vice versa). It is also possible to vary profiles between different devices registered on the home network (e.g. a freer profile on your computer, a more secure profile on your child's computer).
There is also a 'No protection' profile, which does not provide any traffic filtering. The required hosts will be using the provider's DNS servers. For example, children's computers can be covered by a filter, and adults can use DNS servers provided by the ISP.

From a registered device, we will try to access the following sites: (blocked in filters, but allowed in exceptions). Access to the site will be allowed.

safedns-07.png (allowed in filters, but prohibited in exceptions). Access to the site will be blocked, and the corresponding message will be displayed.

safedns-08.png (blocked in filters, no entry in exceptions). Access to the site will be blocked, and the corresponding message will be displayed.


For more information on additional ways to block sites, see the 'How to block access to a specific site'.

TIP: Tip: With the help of the SafeDNS service in your personal account on the 'Stats' tab you can see the statistics of the most popular websites accessed from home network computers when working through the Keenetic router.

TIP: Note: Currently, there is no support for Internet safety service on the IPv6 protocol. When the 'IPv6' component is installed, individual policies don't work. If for some reason your site filtering does not work after you turn on the Internet safety service, check if the Keenetic's operating system has an 'IPv6' component installed. If you are not using an IPv6 connection, remove the component to ensure that the Internet safety service works properly. Later on, the operation of Internet safety services with IPv6 protocol will be improved.


Have more questions? Submit a request



Please sign in to leave a comment.