In this article

An Allow List–Only policy blocks all domains by default, allowing access only to domains added to the Allow List. This method functions as a “default deny” configuration, where DNS requests are denied unless explicitly permitted.

After enabling Allow List Only, DNSFilter blocks all DNS requests except those explicitly added to the Policy’s Allow List, ensuring strict network access control.

When Allow List Only is enabled:

• All tabs in the Policy menu except Settings and Allow List are greyed out 
• All options on these disabled pages are unavailable
• The Policy ignores all other settings and allows only the domains listed in the Allow List

Enable an Allow List–Only Policy

1. From the DNSFilter dashboard, navigate to Policies and select Filtering
2. Select an existing policy or create a new one
3. Open the Settings tab
4. Toggle on Enforce Allow List Only
   
5. Tab to Allow List and add domains to permit
6. Select Save Policy

Only these domains will resolve under the Policy. All other DNS requests will be blocked.

Important Notes

• Websites often rely on multiple domains and services. Adding a single domain to the Allow List does not guarantee the entire site will function
• Refer to the Pages Not Loading guide for tips on identifying dependent domains