In this article

Users with Internet Service Providers (ISP) that use Carrier-Grade NAT (CGNAT) may run into issues while deploying DNSFilter. CGNAT frequently update public IP addresses, i.e. the IP address assigned to your account, which are vital for directing DNS queries to DNSFilter.

Additionally, ISPs using this method are likely to use transparent proxying, another technique that can prevent DNS queries from reaching DNSFilter.

But don't worry—there are solutions to stay on track to protect your network from threats.

How to work around ISPs that use Carrier-Grade NAT

Install our Roaming Client

If the goal is to protect computers and hand-held devices (smart phones/tablets), the easiest solution is to avoid the need for a stable public IP address all together and install our Roaming Client. The agent binds to the network adapter on the device and proxies DNS traffic to our servers, skipping the need for the IP address. 

Note that Roaming Clients can't protect devices like smart watches, wearable health trackers, or printers. 

Use Dynamic DNS 

Dynamic DNS (DDNS) is a service that can automatically update DNS records when an IP address changes. Add your DDNS account hostname to the DNSFilter Site and the associated IP address will stay up to date no matter the ISP changes.