Control D Profiles & Custom DNS Rules Setup

Updated 6 November 2026 · Standard formula, shown below

This guide walks you through configuring Control D profiles, filters, and custom DNS rules to manage your network’s DNS traffic. You’ll learn how to create a profile, apply filters for blocking categories, and add custom rules for granular control over specific domains. By the end, you’ll have a working setup that enforces your chosen DNS policies across your devices.

What You’ll Need

A Control D account (free or paid) and access to the Control D dashboard at controld.com.
Your Control D DNS resolver addresses (found in the dashboard under “Resolvers”).
Devices or routers that support custom DNS settings (most do).
Basic understanding of DNS and domain names.

Step-by-Step

Log in to the Control D dashboard – Go to controld.com and sign in with your account credentials.
Create a new profile – In the left sidebar, click “Profiles”. Then click the “+ New Profile” button. Give it a descriptive name, e.g., “Home Network” or “Kids Devices”. Click “Create”.
Select a base configuration – After creating, you’ll see a list of preset configurations (like “Default”, “Ad Block”, “Security”, etc.). Choose one that fits your needs, or start with “Default” and customize later. Click “Apply” on your chosen preset.
Configure filters – In the profile’s settings, go to the “Filters” tab. Here you’ll find categories like “Ads & Trackers”, “Malware”, “Adult Content”, “Social Media”, etc. Toggle the switches to enable or disable each filter. For stricter blocking, enable more categories. For example, to block ads and trackers, turn on “Ads & Trackers”.
Add custom DNS rules – Go to the “Rules” tab (or “Custom Rules” depending on your UI). Click “+ Add Rule”. You’ll need to specify:
- Type: Choose whether to allow, block, or redirect the domain.
- Domain: Enter the exact domain (e.g., example.com) or use wildcards like *.example.com.
- Action: For “block”, you can optionally return a custom IP (like 0.0.0.0) or use the default block page. For “allow”, the domain will bypass filters. For “redirect”, you can point it to another domain or IP.
Click “Save” to add the rule.
Apply the profile to devices – In the profile’s “Devices” tab, click “+ Add Device”. You’ll see instructions for different platforms (Windows, macOS, Android, iOS, Router). Follow the instructions for your device. Typically, you’ll either install the Control D app or manually set the DNS server addresses to the ones provided for your profile.
Test your configuration – After applying, visit a site that should be blocked (e.g., a known ad-heavy site) to confirm it’s blocked. Also, visit a site you’ve allowed to ensure it works.
Monitor and adjust – Check the “Logs” section in the dashboard to see DNS queries and any blocked attempts. Adjust filters and rules as needed.

Common Mistakes

Forgetting to apply the profile to the device – Creating a profile without attaching a device means it won’t affect any traffic.
Using the wrong DNS server address – Each profile has unique resolver IPs. Using the default Control D IPs (76.76.2.0 and 76.76.10.0) won’t apply your profile’s rules.
Overly broad wildcard rules – Using *.example.com blocks all subdomains, which might be unintended. Be specific when possible.
Not clearing DNS cache – After changing rules, your device or browser may cache old DNS results. Clear the cache or wait for TTL to expire.
Conflicting rules – If you have an “allow” rule for a domain but the filter blocks it, the most specific rule usually wins, but you should check the order.

Tips

Use profiles for different device groups – Create separate profiles for kids, guests, or IoT devices to apply different filters.
Leverage the “Redirect” action – Instead of blocking a domain, you can redirect it to a safe page or your own server.
Start with presets – Presets like “Ad Block” or “Security” are well-tested and a good starting point before customizing.
Regularly review logs – The logs show you what’s being blocked and allowed, helping you refine your rules.
Use the Control D browser extension – For per-device control, the extension can override DNS settings for that browser, which is handy for testing.

Troubleshooting

Profile not working – Re-check that you’ve selected the correct profile on the device. On routers, ensure the DNS settings are applied to the WAN interface, not just LAN.
Some sites still load despite being blocked – This could be due to DNS caching. Flush the DNS cache on the device (e.g., ipconfig /flushdns on Windows) or wait a few minutes.
Custom rule not taking effect – Verify the rule syntax. For example, ensure you’re using the correct wildcard format. Also, check if the rule is in the right profile and that the profile is applied.
Can’t access the dashboard – If the dashboard itself is blocked, check your filters—maybe you blocked the Control D domain accidentally. Use a different network or device to fix it.
Performance issues – If DNS resolution is slow, try using the closest resolver address provided by Control D for your region.

Frequently Asked Questions

Q: Can I have multiple profiles for different devices?
A: Yes, you can create as many profiles as you need and assign each device to one profile. Each profile has its own set of filters and rules.

Q: How do I allow a specific domain that is being blocked by a filter?
A: Add a custom rule with type “Allow” for that domain. The allow rule takes precedence over filter blocks.

Q: What is the difference between “block” and “redirect”?
A: “Block” returns a NXDOMAIN or a block page, preventing access. “Redirect” sends the DNS request to a different IP or domain, which can be used to show a custom page or route traffic elsewhere.

Q: Do I need to install any software to use Control D?
A: Not necessarily. You can manually set the DNS servers on your device or router. However, the Control D app offers easier management and additional features like per-app filtering.

Q: Will these settings affect my VPN?
A: If your VPN routes all traffic through its own DNS, Control D may not take effect. You may need to configure the VPN to use Control D’s DNS or use the Control D app which can work alongside VPNs.

Q: How do I know if my rule is working?
A: Check the Logs section in the dashboard. You’ll see queries for the domain and whether they were allowed, blocked, or redirected.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.