Free Premium DNS — Block Ads, Trackers & Malware at DNS Level

GammaDot

Pick Your Filter Level

6 Options — From Zero Blocking to Nuclear

Hostname	Ads	Trackers	Malware	Adult	Gambling	Social Media
`dns.mullvad.net`	—	—	—	—	—	—
`adblock.dns.mullvad.net`			—	—	—	—
`base.dns.mullvad.net`				—	—	—
`extended.dns.mullvad.net`				—	—
`family.dns.mullvad.net`						—
`all.dns.mullvad.net`

base is the sweet spot for most people — kills ads, trackers, and malware without breaking social media or anything else.

all is scorched earth. Everything blocked. Good for focus mode or kid-proofing a device.

—

Server IPs

IPv4 & IPv6 — Copy What You Need

Hostname	IPv4	IPv6	DoH Port	DoT Port
`dns.mullvad.net`	`194.242.2.2`	`2a07:e340::2`	443	853
`adblock.dns.mullvad.net`	`194.242.2.3`	`2a07:e340::3`	443	853
`base.dns.mullvad.net`	`194.242.2.4`	`2a07:e340::4`	443	853
`extended.dns.mullvad.net`	`194.242.2.5`	`2a07:e340::5`	443	853
`family.dns.mullvad.net`	`194.242.2.6`	`2a07:e340::6`	443	853
`all.dns.mullvad.net`	`194.242.2.9`	`2a07:e340::9`	443	853

These IPs only work with DoH or DoT resolvers — not plain DNS over port 53.

—

Browser Setup

Firefox / Mullvad Browser

Menu → Settings → Privacy & Security
Scroll to the bottom → Enable secure DNS using → select Max Protection
Choose provider → select Custom
Paste one of these and press Enter:

$$
https://dns.mullvad.net/dns-query
https://adblock.dns.mullvad.net/dns-query
https://base.dns.mullvad.net/dns-query
https://extended.dns.mullvad.net/dns-query
https://family.dns.mullvad.net/dns-query
https://all.dns.mullvad.net/dns-query

Mullvad Browser already uses dns.mullvad.net by default — only change it if you want content blocking.

Chrome / Brave / Edge

Settings → Privacy and security (Chrome/Brave) or Privacy, search, and services (Edge)
Click Security (Chrome/Brave)
Enable Use secure DNS
Select Custom (Chrome/Brave) or Choose a service provider (Edge)
Enter one of these and press Tab:

If it says “Please verify that this is a valid provider” — wait a moment, it resolves itself.

—

Mobile Setup

Android 9+

Settings → Network & internet → Private DNS
Select Private DNS provider hostname
Enter one of these:

$$
dns.mullvad.net
adblock.dns.mullvad.net
base.dns.mullvad.net
extended.dns.mullvad.net
family.dns.mullvad.net
all.dns.mullvad.net

Tap Save

If it won’t connect — the nearest Mullvad DNS server is too far and latency is too high. Try a VPN to route closer.

iOS / iPadOS

Open Safari → go to Mullvad’s GitHub DNS profiles
Tap the filter level you want (e.g., base)
Pick DoH or DoT version
Tap View raw → Allow to download
iOS 18: Open Files app → tap the downloaded profile
Settings → Profile Downloaded → Install → enter passcode → Install → Done

Manage profiles later in Settings → General → VPN & Device Management.

If iCloud Private Relay is enabled, Apple may override your DNS profile.

—

Desktop Setup

Windows 11

Settings → Network & internet → Wi-Fi or Ethernet
(Wi-Fi users: click Hardware properties first)
Click Edit next to DNS server assignment → select Manual
Enable IPv4 → enter the IP for your chosen filter:

Filter	IPv4	DoH Template
None	`194.242.2.2`	`https://dns.mullvad.net/dns-query`
Adblock	`194.242.2.3`	`https://adblock.dns.mullvad.net/dns-query`
Base	`194.242.2.4`	`https://base.dns.mullvad.net/dns-query`
Extended	`194.242.2.5`	`https://extended.dns.mullvad.net/dns-query`
Family	`194.242.2.6`	`https://family.dns.mullvad.net/dns-query`
All	`194.242.2.9`	`https://all.dns.mullvad.net/dns-query`

Under DNS over HTTPS → select On (manual template) → enter the matching DoH URL
Click Save
If you have IPv6 — repeat with the IPv6 address (e.g., 2a07:e340::4 for base)

Not available on Windows 10. Set up both Wi-Fi and Ethernet if you use both.

macOS

macOS 15+:

Open Safari → go to Mullvad’s GitHub DNS profiles
Click your filter level → pick DoH or DoT → View raw → downloads automatically
System Settings → Profile Downloaded → double-click → Install → enter password

macOS 13–14:

Same download steps as above
System Settings → Privacy & Security → scroll to Profiles → double-click the profile → Install

Chromium browsers (Chrome/Brave/Edge) need an extra step — open Terminal and run:

$$
defaults write com.google.Chrome BuiltInDnsClientEnabled -bool false
defaults write com.brave.Browser BuiltInDnsClientEnabled -bool false
defaults write com.microsoft.Edge BuiltInDnsClientEnabled -bool false

Safari and Firefox work immediately without this.

Linux (Ubuntu / Fedora)

Enable systemd-resolved:

$$
sudo systemctl enable systemd-resolved

Settings → Network → your connection → IPv4/IPv6 tabs → turn off Automatic next to DNS → leave DNS field blank → Apply → toggle network off and on
Edit the config:

Ubuntu:

sudo nano /etc/systemd/resolved.conf

Fedora (copy first):

cp /usr/lib/systemd/resolved.conf /etc/systemd/
sudo nano /etc/systemd/resolved.conf

Add under [Resolve] — uncomment ONE DNS line:

$$
#DNS=194.242.2.2#dns.mullvad.net
#DNS=194.242.2.3#adblock.dns.mullvad.net
#DNS=194.242.2.4#base.dns.mullvad.net
#DNS=194.242.2.5#extended.dns.mullvad.net
#DNS=194.242.2.6#family.dns.mullvad.net
#DNS=194.242.2.9#all.dns.mullvad.net
DNSSEC=no
DNSOverTLS=yes
Domains=~.

Fix resolv.conf and restart:

$$
sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
sudo systemctl restart systemd-resolved
sudo systemctl restart NetworkManager

Verify:

$$
resolvectl status

Should show Mullvad DNS under Global → Current DNS Server.

If it doesn’t work, try changing DNSOverTLS=yes to DNSOverTLS=opportunistic.

—

Server Locations

Pick a Specific Server If You Want

Anycasted by default — routes you to the nearest server automatically. But if you want a specific one:

Server	Country	City
`de-fra-dns-001.mullvad.net`	Germany	Frankfurt
`gb-lon-dns-001.mullvad.net`	UK	London
`gb-lon-dns-301.mullvad.net`	UK	London
`se-got-dns-001.mullvad.net`	Sweden	Göteborg
`se-mma-dns-001.mullvad.net`	Sweden	Malmö
`se-sto-dns-001.mullvad.net`	Sweden	Stockholm
`sg-sin-dns-101.mullvad.net`	Singapore	Singapore
`us-dal-dns-001.mullvad.net`	USA	Dallas
`us-nyc-dns-601.mullvad.net`	USA	New York

Use format: https://[server]/dns-query

—

How to Verify It’s Working

Go to mullvad.net/check

You should see no DNS leaks. Click “No DNS leaks” for details — the server listed should have “dns” in its name like se-mma-dns-001.mullvad.net.