0

How do I configure DNSCloak to use a custom NextDNS profile?

I want to use a custom NextDNS profile on my son's iPhone (iOS 17) for parental controls/security.  However, when I install the NextDNS app, he can just shut it off by going to Settings->General->VPN,DNS and changing the DNS from NextDNS to Automatic.

The app DNSCloak has a Connect-on-demand option which prevents him from turning it off.  It lists NextDNS as one of its preset options, but that does not use a Custom configuration.  Is there a way to get a custom configuration working with DNSCloak?

(Alternatively, does NextDNS have anything similar to the "Connect on demand" option so that my son can't just turn it off? Or is there any way to block changes to the DNS settings using Apple ScreenTime?)

19 replies

null
    • iOS Developer
    • Rob
    • 1 yr ago
    • Reported - view

    Why can't your son turn off DNSCloak's "Connect-on-demand"?

    (if he can change DNS and VPN settings)

      • andi
      • 1 yr ago
      • Reported - view

      That setting is in the DNSCloak app (which is password protected) as opposed to being in Apple's Settings app.

      • iOS Developer
      • Rob
      • 1 yr ago
      • Reported - view

       And what if he uninstalls the DNSCloak App?

      • andi
      • 1 yr ago
      • Reported - view

       Apple's ScreenTime allows me to block the ability to delete apps.

      • edward_a
      • 1 yr ago
      • Reported - view

       yes but it can’t stop him just turning off the switch in NextDNS app

      • andi
      • 1 yr ago
      • Reported - view

       the NextDNS app is not used in this setup with DNSCloak. 

      • edward_a
      • 1 yr ago
      • Reported - view

       ok, but what’s to stop him disabling DNS Cloak?

      • andi
      • 1 yr ago
      • Reported - view

      DNS Cloak has a "Connect-on-demand" setting which turns itself back on automatically even if the kid turns it off in Apple's settings.

    • R_P_M
    • 1 yr ago
    • Reported - view

    You have to manually add the code to the configuration file, using details on my.nextdns.io the device option of Linux and use DNSCrypt.

     

    You can paste the stamp code into the page here: 
    https://dnscrypt.info/stamps/

    and then edit some of the items to get a device name into it. 

      • andi
      • 1 yr ago
      • Reported - view

       thank you! it was right there in the setup, I just didn't know to look in the Linux device option.

      • andi
      • 1 yr ago
      • Reported - view

       actually now that I tried it, it doesn't seem to work right. I pasted that code right at the bottom of the DNSCloak config file. But then it doesn't seem to do anything; I see ads on my test site, and the VPN switch in Settings is off. When I comment out those lines in the config and go back to adguard-dns, it works again. Any idea why that is?

      • R_P_M
      • 1 yr ago
      • Reported - view

       Is NextDNS highlighted in the list on DNSCLOAK? You may have to comment out the public dns from loading up. 

      Also, to start it tap the play button. (Just in case you didn’t know)

      • andi
      • 1 yr ago
      • Reported - view

       thanks for the help and yes it was highlighted and I pressed play. I can only fiddle with this after my son goes to sleep so I'll try again one of these nights and try to be more specific about what I am seeing.

      • R_P_M
      • 1 yr ago
      • Reported - view

       Also to add, the local (on device) VPN solution is broken since iOS 14.5. Ads and things will not always be blocked if the device is on an iOS version above that. 

      • andi
      • 1 yr ago
      • Reported - view

      Thanks, I wonder if that's the issue.  We are on iOS 17.  I have not gotten it to work successfully and I have stopped trying.  Now I'm looking into a browser (maybe SPIN?) that has child-safety built in.  I wish NextDNS had a browser that could be locked to my custom config!

      • Srdjan
      • 1 yr ago
      • Reported - view

       have you figured it out, I'm in the same boat, trying to disable kids disabling it.

      • andi
      • 10 mths ago
      • Reported - view

       no, I never did figure it out.

    • edward_a
    • 1 yr ago
    • Reported - view

    Hello, 

     

    please see this guide for a solution which it sounds like will work for you: https://www.buymeacoffee.com/mindfuliOS/a-set-help-detach-addictive-tendencies-around-iphone-ipad-use

      • andi
      • 1 yr ago
      • Reported - view

       that seems robust but I'm not sure I want to do all that. Also it says the phone cannot be directly restored, but could all the app data be restored? For example, if my son reached level 20 on a game, he would not be able to handle starting all over. How does the app data get restored in this situation?

Content aside

  • 10 mths agoLast active
  • 19Replies
  • 1626Views
  • 5 Following