Internet safety with Yandex.DNS

Free Yandex.DNS Internet safety service restricts access to malicious sites, as well as resources that are not suitable for viewing by children. This service is conveniently integrated into Keenetic routers, allowing the owner to protect either all home devices at once, or to choose filtering for them separately through easy-to-understand ready-made profiles.

The work of Yandex.DNS service in Keenetic is implemented as a component of the system. A user can add or remove this Internet filter from the system, as well as turn it on or off completely, without affecting the parameters of the main Internet connection: Yandex.DNS will work behind any NATs and with any frequently changing dynamic address.

Yandex.DNS has 4 modes (policies), which determine access to a particular category of sites:

  • No protection - no traffic filtering is provided, and for the required hosts will be used provider DNS-servers;
  • Fast DNS - no traffic filtering is provided, but you will use a fast and reliable DNS server from Yandex;
  • Secured - protects against malicious and fraudulent sites, blocks resources containing viruses and phishing;
  • Family-friendly - closes access to both dangerous sites and resources for adults (e.g. pornographic content).

More information about Yandex.DNS service and filtering categories you can find at or in Yandex support.

NOTE: Important! Simultaneous use of Yandex.DNS, SafeDNS and AdGuadrd DNS content filtering services is impossible. Only one of the services can be used.

Before setting up the Internet filter, register your devices according to the instruction 'Connected device registration'.

Now select 'Yandex.DNS' in the 'Service' field on the 'Internet safety' page.


The section 'Assigment of protection policies to devices' appears. Configuration in this section involves assigning the aforementioned policies to regular devices in your home network (registered on your Keenetic) and those that appear periodically (Guest segment and unregistered devices).

For example, assign the 'Family-friendly' policy to two registered devices, and assign the 'Secured' policy to all other devices.


In the 'Default policy' field you can specify a policy that will be applied to all unregistered devices, including those connected to the guest network.

From a registered device through a web browser, we will try to access a resource that may contain prohibited content:


Access to this resource will be blocked and the corresponding message will be displayed.

TIP: Note: Currently, Internet safety services do not support IPv6 protocol. If the 'IPv6' component is installed, individual protection policies will not work. If for some reason the site filtering doesn't work after you turn on the Internet safety service, check whether the 'IPv6' component is installed in the Keenetic's operating system. If you are not using an IPv6 connection, remove this component to make the Internet safety service work properly. Later on, their work on IPv6 protocol will be improved.


Have more questions? Submit a request



Please sign in to leave a comment.